$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa File: 59f07b4d-cb34-32ed-981a-201e9fd7815e.roa (raw, json) Hash identifier: uzCImtFUjJ06KNsL6Xlp/SN4v4o7DiEVmBvJAz/Ut7Y= Subject key identifier: 0D:F0:F3:0E:41:19:A3:C2:F2:94:0E:7E:83:CB:A4:9C:F9:B6:7B:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569F2CC512E209D6E15540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.77.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9f:2c:c5:12:e2:09:d6:e1:55:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=2330d436-3678-42e6-b9e1-3d5b0fc1ca68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:02:09:e1:b2:62:36:a2:1c:43:7c:9f:65: 01:76:cd:09:9c:5d:50:4c:fe:4c:2a:b6:66:ef:f6: b1:2d:e4:1c:9b:3a:3d:2b:de:26:48:c9:82:58:65: 61:20:86:57:cd:3c:e2:01:48:ab:a1:6f:89:98:9b: f4:f3:d6:a8:2d:d2:68:cb:62:f1:65:91:dc:56:bb: 49:dc:56:a2:ff:c1:aa:8b:b2:34:4e:35:5e:26:74: 4e:1c:5b:c1:95:08:df:f0:d9:98:01:9a:f4:e0:78: d3:40:44:1b:26:23:71:2a:59:3c:e3:cd:d6:66:97: 1f:09:03:0a:8f:b2:83:d2:74:c2:2d:26:81:30:a2: 62:45:57:8d:06:c9:54:be:8b:45:a5:98:f7:15:62: 6f:c1:ad:a5:97:d5:44:73:dc:23:bd:77:e5:42:10: 7f:4c:a2:3b:4c:3f:eb:43:70:0e:8b:85:c5:2f:41: b3:7b:9d:72:38:da:ce:c2:e6:bf:02:fa:77:be:fa: 89:09:50:9d:f6:13:64:db:6e:9f:66:27:a7:3f:9c: e6:fb:8c:af:9e:c5:3f:4a:be:03:0b:c4:81:33:8b: 66:4e:d3:29:f5:16:98:27:6c:0a:04:d8:14:77:73: 06:66:f5:1d:03:20:d0:15:62:f8:09:77:61:45:3d: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F0:F3:0E:41:19:A3:C2:F2:94:0E:7E:83:CB:A4:9C:F9:B6:7B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59f07b4d-cb34-32ed-981a-201e9fd7815e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a2:fa:62:96:a2:e2:6f:39:59:ae:ea:06:db:a1:b6:a7:ad: 39:d7:ff:31:90:82:7a:4f:58:ee:db:70:25:85:a9:4a:98:23: 6b:a6:d6:94:4d:98:a0:3a:2f:5d:9f:ff:c7:0d:80:b7:9f:ad: 87:35:59:86:99:06:84:b8:2c:ce:7c:85:84:70:35:05:2b:74: fb:da:c1:e0:f0:b1:60:f5:a7:a5:e8:93:15:0c:ad:95:f2:99: dd:42:7e:60:e7:98:05:b5:08:ad:0e:81:a7:43:3a:c1:7a:dd: 8b:ad:aa:35:48:88:3b:96:4f:81:da:c7:1e:03:11:71:26:27: ad:5c:ad:e2:12:f2:56:b4:88:22:21:9b:e5:4d:db:2e:6d:2c: 15:aa:03:85:dd:3f:7c:c1:d8:e4:54:e4:64:82:51:99:be:46: 05:54:60:c6:30:80:6d:19:f2:32:2c:9a:7a:94:fd:d6:2c:75: ef:d9:f6:2e:27:dc:72:19:82:28:22:e4:d9:fd:37:b7:66:6d: e5:ba:91:bb:7e:37:d3:8f:40:49:01:12:d3:64:3f:ee:7f:9a: e8:6e:06:52:22:e9:bc:ae:e6:4e:6e:2f:d5:b1:1a:d5:74:0f: aa:00:01:7f:de:3c:69:d0:d3:af:74:27:bd:b9:79:cc:62:7e: 0d:ff:e8:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp8sxRLiCdbhVUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MjMzMGQ0MzYtMzY3OC00MmU2LWI5ZTEtM2Q1YjBmYzFjYTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypECCeGyYjaiHEN8n2UBds0JnF1QTP5MKrZm 7/axLeQcmzo9K94mSMmCWGVhIIZXzTziAUiroW+JmJv089aoLdJoy2LxZZHcVrtJ 3Fai/8Gqi7I0TjVeJnROHFvBlQjf8NmYAZr04HjTQEQbJiNxKlk8483WZpcfCQMK j7KD0nTCLSaBMKJiRVeNBslUvotFpZj3FWJvwa2ll9VEc9wjvXflQhB/TKI7TD/r Q3AOi4XFL0Gze51yONrOwua/Avp3vvqJCVCd9hNk226fZienP5zm+4yvnsU/Sr4D C8SBM4tmTtMp9RaYJ2wKBNgUd3MGZvUdAyDQFWL4CXdhRT1SjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3w8w5BGaPC8pQOfoPLpJz5tntFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTlmMDdiNGQtY2IzNC0z MmVkLTk4MWEtMjAxZTlmZDc4MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGi+mKWouJvOVmu6gbbobanrTnX/zGQgnpPWO7bcCWFqUqYI2um1pRN mKA6L12f/8cNgLefrYc1WYaZBoS4LM58hYRwNQUrdPvaweDwsWD1p6XokxUMrZXy md1CfmDnmAW1CK0OgadDOsF63YutqjVIiDuWT4Haxx4DEXEmJ61creIS8la0iCIh m+VN2y5tLBWqA4XdP3zB2ORU5GSCUZm+RgVUYMYwgG0Z8jIsmnqU/dYsde/Z9i4n 3HIZgigi5Nn9N7dmbeW6kbt+N9OPQEkBEtNkP+5/muhuBlIi6byu5k5uL9WxGtV0 D6oAAX/ePGnQ0690J725ecxifg3/6Bw= -----END CERTIFICATE-----Generated at Sat Aug 23 14:56:27 2025 by rpki-client