$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514c4c96-4351-3a5a-a910-41c5ed5dd971.roa File: 514c4c96-4351-3a5a-a910-41c5ed5dd971.roa (raw, json) Hash identifier: 8dp1z2DELF30wrTwaqDeF/aQky7YnXq56FisDGW06hs= Subject key identifier: 17:5A:AF:40:B4:2D:57:D2:16:2D:C1:7E:DA:94:78:F3:3E:F8:6A:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2568D97B240BC37B47B0D60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514c4c96-4351-3a5a-a910-41c5ed5dd971.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.78.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:8d:97:b2:40:bc:37:b4:7b:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=8742840e-17ef-4407-9703-dba15458b3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:92:69:18:53:11:9d:50:9d:68:51:4b:f6:92: f1:fd:dc:ff:03:47:dd:0d:c7:7b:0a:64:3c:cb:16: fc:63:6a:f3:0b:ba:f5:a3:4c:e7:d3:28:69:45:c4: fa:35:1d:ae:3f:a1:c3:eb:af:18:00:2e:16:8f:c6: c5:19:73:25:80:fd:75:9b:2e:51:1a:fd:83:8e:4e: 04:d4:75:bd:47:8e:56:49:25:8d:9d:41:1b:36:e7: 7f:4c:a9:7a:2c:84:26:97:34:64:92:7b:b5:90:a3: 60:04:2f:28:8f:93:2d:3b:65:3c:9c:e6:fb:03:28: 3e:c2:a9:21:4e:0d:fc:50:41:0b:79:57:9e:b7:7a: 42:3b:72:0b:b0:7e:a1:2a:a2:3a:46:2c:d1:03:17: 36:53:a7:15:0d:46:11:f5:ce:c0:64:e0:63:de:49: 17:c1:be:a8:80:03:23:7d:68:fa:68:0b:cb:2e:23: e9:af:e3:fc:12:2c:92:fd:16:a1:d4:a0:db:cf:87: e5:9c:b3:b4:d5:f1:68:c7:fd:f9:63:ad:ae:ac:aa: 59:42:7d:6b:28:71:ad:55:6c:9b:b0:1c:60:bf:38: 3a:c1:7e:09:ca:a0:40:b8:d8:a2:43:2e:5b:25:91: 34:4f:6c:a3:7a:36:85:b3:17:95:bc:0b:ab:ff:63: 75:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5A:AF:40:B4:2D:57:D2:16:2D:C1:7E:DA:94:78:F3:3E:F8:6A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/514c4c96-4351-3a5a-a910-41c5ed5dd971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.78.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b0:8d:fe:9c:2e:e0:b5:36:53:57:48:32:b6:df:8f:5f:b1: 61:28:bc:2b:18:e3:e0:87:f1:21:96:37:70:27:8f:ac:98:b2: fe:a9:53:87:16:db:a5:ef:14:5f:3d:12:36:6a:6e:82:88:1d: 95:ed:0d:23:84:af:29:c3:77:30:4a:e5:75:3e:6f:f4:a4:59: 81:d9:c3:61:85:c4:46:eb:0a:76:f5:85:5e:5e:75:6b:1c:cd: 06:ce:2c:4d:ed:50:7b:3e:31:e4:d4:4e:b1:1e:18:fd:ac:ba: ad:75:8a:64:3a:a6:be:7e:2d:ae:d0:03:22:27:62:c7:93:02: 6b:7a:06:76:a4:c6:4b:27:59:cc:58:b5:b8:b5:e1:f8:7a:6e: 7e:5b:05:6c:3f:86:62:05:04:32:a8:b7:03:96:6d:57:bc:99: e7:06:81:f3:04:fb:0b:4a:f7:99:1d:2d:e5:1f:05:17:9c:92: 0f:4c:41:59:a6:f9:eb:da:f0:35:8d:b0:9a:15:c1:6b:5a:b1: ac:4c:6b:28:f4:9b:18:f8:5c:b4:9b:b4:a7:28:19:e5:7a:f8: 68:ab:cd:fd:d7:51:64:69:28:5b:5f:0a:4b:03:90:30:69:34: 83:7c:79:bb:62:2a:d7:33:ca:fd:ba:56:61:51:bf:48:48:c5: c5:42:70:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVo2XskC8N7R7DWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ODc0Mjg0MGUtMTdlZi00NDA3LTk3MDMtZGJhMTU0NThiM2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpJpGFMRnVCdaFFL9pLx/dz/A0fdDcd7CmQ8 yxb8Y2rzC7r1o0zn0yhpRcT6NR2uP6HD668YAC4Wj8bFGXMlgP11my5RGv2Djk4E 1HW9R45WSSWNnUEbNud/TKl6LIQmlzRkknu1kKNgBC8oj5MtO2U8nOb7Ayg+wqkh Tg38UEELeVeet3pCO3ILsH6hKqI6RizRAxc2U6cVDUYR9c7AZOBj3kkXwb6ogAMj fWj6aAvLLiPpr+P8EiyS/Rah1KDbz4flnLO01fFox/35Y62urKpZQn1rKHGtVWyb sBxgvzg6wX4JyqBAuNiiQy5bJZE0T2yjejaFsxeVvAur/2N1ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdar0C0LVfSFi3BftqUePM++GqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTE0YzRjOTYtNDM1MS0z YTVhLWE5MTAtNDFjNWVkNWRkOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE60MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuwjf6cLuC1NlNXSDK2349fsWEovCsY4+CH8SGWN3Anj6yYsv6pU4cW 26XvFF89EjZqboKIHZXtDSOErynDdzBK5XU+b/SkWYHZw2GFxEbrCnb1hV5edWsc zQbOLE3tUHs+MeTUTrEeGP2suq11imQ6pr5+La7QAyInYseTAmt6BnakxksnWcxY tbi14fh6bn5bBWw/hmIFBDKotwOWbVe8mecGgfME+wtK95kdLeUfBReckg9MQVmm +eva8DWNsJoVwWtasaxMayj0mxj4XLSbtKcoGeV6+Girzf3XUWRpKFtfCksDkDBp NIN8ebtiKtczyv26VmFRv0hIxcVCcIk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:54 2025 by rpki-client