$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b1a6820-0591-3b3b-a161-19a0a52dc63a.roa File: 5b1a6820-0591-3b3b-a161-19a0a52dc63a.roa (raw, json) Hash identifier: eZpin7+KR4KX921Ov1RTGV8Yf1L+3VuV0ADVgllSJ6k= Subject key identifier: BC:2B:CA:89:1B:79:6F:95:68:00:9A:31:BD:ED:32:08:EE:5D:BD:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC0162C57E92E420A7BC50440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b1a6820-0591-3b3b-a161-19a0a52dc63a.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 35994 IP address blocks: 104.125.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:2c:57:e9:2e:42:0a:7b:c5:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=23655e5b-99b7-45f4-b974-3123719aa2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d5:b2:e2:71:43:ab:e2:1d:ac:45:de:c9:0a: a3:6f:69:02:eb:9e:a1:30:cc:9d:b4:35:4d:2a:f3: 20:1a:98:c5:d5:2e:54:1e:27:3e:63:35:f3:a6:d6: 1a:58:1d:77:6a:01:51:66:84:9e:ec:75:07:e9:76: 16:d6:de:a8:8a:de:33:25:a0:1c:9b:59:a2:dd:67: f1:05:e9:44:66:1e:0c:40:4a:4a:45:89:3f:39:0d: cb:c6:4a:77:e6:81:ca:50:ab:70:67:08:23:bd:1c: c8:8d:9f:99:5b:74:7c:df:2f:20:e1:c8:91:da:05: c8:28:13:b1:fe:b9:53:e2:71:4b:92:e1:78:72:6e: f3:c0:3d:c8:4c:0c:a7:7d:af:90:69:3b:a1:03:9e: 33:07:83:c5:f4:e1:14:0e:93:8c:87:17:84:35:4b: d4:84:95:48:03:42:5e:6a:49:eb:50:33:bf:46:b1: 39:07:2a:43:d8:10:ad:9c:ea:4d:53:01:86:a3:54: 65:1d:5f:e3:d9:a3:d8:36:d5:97:c6:07:ce:be:3a: c6:07:bf:d7:a1:8e:b2:44:74:a2:bb:90:e2:b1:35: 09:18:49:67:c0:c2:e2:ed:86:72:4e:ec:fa:43:48: 94:10:97:c4:8f:80:ca:0f:76:e3:17:f4:f6:fe:ca: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2B:CA:89:1B:79:6F:95:68:00:9A:31:BD:ED:32:08:EE:5D:BD:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b1a6820-0591-3b3b-a161-19a0a52dc63a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:6d:50:19:f8:a5:67:44:fb:87:1c:c3:8a:7d:df:90:9f:ed: b8:42:d3:b5:8b:00:27:bc:83:28:3a:10:4b:1d:af:5d:5f:3c: 4a:82:82:6b:cb:60:03:48:9e:de:81:0e:c9:08:9a:17:47:38: d5:44:00:28:83:d2:13:49:d7:c0:ad:e0:8b:5c:95:5f:9a:dc: f5:7d:bc:60:32:4c:1a:d2:55:21:21:f2:7a:9d:3a:01:c8:11: 7c:12:3d:c6:31:d0:ec:b9:1c:7a:26:db:82:b6:63:c4:76:ad: f4:46:33:54:64:e7:f6:18:01:bb:59:e4:b1:c0:1e:0a:df:9b: dd:db:0e:7b:85:46:45:0a:94:72:c9:c9:23:52:32:67:89:28: d4:ca:c8:ec:9f:09:fc:b4:0c:da:86:05:f7:10:82:84:84:23: a4:7e:e4:49:24:a6:67:8a:da:56:55:48:9f:1e:71:43:88:86: 3c:8a:10:1e:e0:c7:6f:4d:bb:8e:6a:b1:34:3e:36:9a:07:58: e0:9a:c3:fd:3f:33:52:88:fc:ef:f0:f5:74:3e:cf:81:58:28: e8:52:d6:e4:1a:1f:b3:f7:fb:03:1b:c9:db:14:55:34:ae:2a: 97:68:df:4b:e8:54:17:d6:5b:9c:78:53:7a:ca:4c:85:12:d4: e7:62:32:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFixX6S5CCnvFBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MjM2NTVlNWItOTliNy00NWY0LWI5NzQtMzEyMzcxOWFhMmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9Wy4nFDq+IdrEXeyQqjb2kC656hMMydtDVN KvMgGpjF1S5UHic+YzXzptYaWB13agFRZoSe7HUH6XYW1t6oit4zJaAcm1mi3Wfx BelEZh4MQEpKRYk/OQ3Lxkp35oHKUKtwZwgjvRzIjZ+ZW3R83y8g4ciR2gXIKBOx /rlT4nFLkuF4cm7zwD3ITAynfa+QaTuhA54zB4PF9OEUDpOMhxeENUvUhJVIA0Je aknrUDO/RrE5BypD2BCtnOpNUwGGo1RlHV/j2aPYNtWXxgfOvjrGB7/XoY6yRHSi u5DisTUJGElnwMLi7YZyTuz6Q0iUEJfEj4DKD3bjF/T2/soMAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwryokbeW+VaACaMb3tMgjuXb1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWIxYTY4MjAtMDU5MS0z YjNiLWExNjEtMTlhMGE1MmRjNjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGltUBn4pWdE+4ccw4p935Cf7bhC07WLACe8gyg6EEsdr11fPEqCgmvL YANInt6BDskImhdHONVEACiD0hNJ18Ct4ItclV+a3PV9vGAyTBrSVSEh8nqdOgHI EXwSPcYx0Oy5HHom24K2Y8R2rfRGM1Rk5/YYAbtZ5LHAHgrfm93bDnuFRkUKlHLJ ySNSMmeJKNTKyOyfCfy0DNqGBfcQgoSEI6R+5EkkpmeK2lZVSJ8ecUOIhjyKEB7g x29Nu45qsTQ+NpoHWOCaw/0/M1KI/O/w9XQ+z4FYKOhS1uQaH7P3+wMbydsUVTSu Kpdo30voVBfWW5x4U3rKTIUS1OdiMrc= -----END CERTIFICATE-----Generated at Sat Aug 23 16:59:34 2025 by rpki-client