$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1f022b-ce05-30fe-b484-459ca589c774.roa File: 5a1f022b-ce05-30fe-b484-459ca589c774.roa (raw, json) Hash identifier: PXcnEa8iWFo9Ta55Ycvg3gNQiI/jojqlCgcTJV/xNDM= Subject key identifier: A3:CD:BC:91:66:7A:24:92:D1:38:B8:E7:9B:37:88:6D:2F:D1:2F:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF0F150138E351B950C287F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1f022b-ce05-30fe-b484-459ca589c774.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 104.74.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:50:13:8e:35:1b:95:0c:28:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=5dd34504-6fc3-4e9f-a1e4-05a453d833bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:46:64:79:21:e3:c2:e1:f6:ab:f5:24:72: 93:b2:5a:21:cf:11:cb:4a:3f:91:40:44:23:b9:9e: 87:df:5b:f7:11:1f:6b:b2:2f:56:4d:87:7c:93:92: f6:ea:a1:b6:52:e7:a2:17:e8:27:9e:20:fb:c3:fc: 12:f4:2c:6c:05:b5:e7:5e:e4:06:05:2b:38:86:0b: 01:de:a6:7d:73:72:ef:32:a3:a9:b6:4b:14:0a:30: e5:cb:f8:bb:3a:51:ab:db:f4:af:7c:40:f1:ad:db: ae:e5:7e:b3:ea:d9:1e:80:72:4b:b1:9f:15:d5:b5: f4:85:85:a1:34:43:5b:f6:a4:05:63:14:00:ab:3e: 39:44:75:3a:d1:51:16:c9:84:ca:c7:d9:28:7b:75: 0d:70:e1:53:8b:9b:33:35:3d:8c:30:be:6d:34:76: 18:2e:29:c1:80:de:2f:af:33:68:40:1a:ba:da:d5: 66:6d:d3:f1:a9:ae:3a:5f:51:ba:5d:59:bd:1c:73: 61:4c:ef:d0:bd:40:cd:4d:b6:ca:c1:23:4f:d9:8e: 65:d3:bb:5d:49:df:da:35:e8:0b:7d:4d:f1:8b:64: 1d:5e:65:7e:dc:ff:02:05:50:80:7f:7d:05:7e:98: 21:35:92:8f:5c:08:34:c1:0b:21:2b:d7:9d:e7:46: 2a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:CD:BC:91:66:7A:24:92:D1:38:B8:E7:9B:37:88:6D:2F:D1:2F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5a1f022b-ce05-30fe-b484-459ca589c774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.74.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d3:22:fd:34:80:0d:5e:97:c1:33:7f:0c:d6:98:63:14:78: 66:80:dc:4d:3d:26:29:a8:b2:17:34:48:6e:f7:9d:2d:e4:e4: 80:5b:a6:90:38:40:f0:88:e7:13:83:1a:43:bd:ed:65:86:f2: d8:66:8e:b8:11:54:49:54:03:ca:fc:f2:f1:e2:ab:17:af:50: 97:52:e0:ee:2a:20:75:6f:7d:3b:a2:51:ce:2f:fb:41:00:49: 4c:12:ba:c3:a2:91:66:9e:4a:0d:42:dc:08:46:16:07:34:1f: 29:6e:e3:e8:63:21:70:72:2c:53:7f:a6:05:2c:4c:1d:d3:08: a9:bf:e2:eb:5c:c0:81:3a:80:71:12:02:39:0c:6b:ee:f1:f4: fd:ef:73:5b:b4:03:be:d2:5b:e8:f5:56:91:3c:52:a9:35:d3: db:bc:41:9a:a7:fd:83:b0:ee:2d:aa:95:4a:1e:b9:f9:a6:86: 22:3d:8d:3c:7d:d0:cd:bc:92:74:98:12:67:86:91:3f:de:70: 3a:4f:5f:b5:50:df:13:02:5d:fa:29:ff:13:91:64:58:ee:8b: d2:57:7b:48:f0:16:ad:65:cd:9f:30:2b:74:9b:9a:ab:b9:24: 6a:87:31:4a:92:07:20:f4:f9:b1:90:83:5b:81:4e:48:b7:10: 5d:28:9e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8VATjjUblQwofwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NWRkMzQ1MDQtNmZjMy00ZTlmLWExZTQtMDVhNDUzZDgzM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMJGZHkh48Lh9qv1JHKTslohzxHLSj+RQEQj uZ6H31v3ER9rsi9WTYd8k5L26qG2UueiF+gnniD7w/wS9CxsBbXnXuQGBSs4hgsB 3qZ9c3LvMqOptksUCjDly/i7OlGr2/SvfEDxrduu5X6z6tkegHJLsZ8V1bX0hYWh NENb9qQFYxQAqz45RHU60VEWyYTKx9koe3UNcOFTi5szNT2MML5tNHYYLinBgN4v rzNoQBq62tVmbdPxqa46X1G6XVm9HHNhTO/QvUDNTbbKwSNP2Y5l07tdSd/aNegL fU3xi2QdXmV+3P8CBVCAf30FfpghNZKPXAg0wQshK9ed50YqJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPNvJFmeiSS0Ti455s3iG0v0S9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWExZjAyMmItY2UwNS0z MGZlLWI0ODQtNDU5Y2E1ODljNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaEqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADTIv00gA1el8EzfwzWmGMUeGaA3E09Jimoshc0SG73nS3k5IBbppA4 QPCI5xODGkO97WWG8thmjrgRVElUA8r88vHiqxevUJdS4O4qIHVvfTuiUc4v+0EA SUwSusOikWaeSg1C3AhGFgc0Hylu4+hjIXByLFN/pgUsTB3TCKm/4utcwIE6gHES AjkMa+7x9P3vc1u0A77SW+j1VpE8Uqk109u8QZqn/YOw7i2qlUoeufmmhiI9jTx9 0M28knSYEmeGkT/ecDpPX7VQ3xMCXfop/xORZFjui9JXe0jwFq1lzZ8wK3Sbmqu5 JGqHMUqSByD0+bGQg1uBTki3EF0onmU= -----END CERTIFICATE-----Generated at Sat Aug 23 18:07:32 2025 by rpki-client