$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa File: 856e770f-696e-3e92-989e-4ad87cdfde06.roa (raw, json) Hash identifier: yJlcba9BrYDT0dlb5ck/FOBOVMOBCWDDar2QcFqQneo= Subject key identifier: 2C:88:AF:76:D5:50:4A:EA:94:47:CC:F1:39:A5:4C:1F:3D:1A:57:D1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569E0A370956C98095A400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.77.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9e:0a:37:09:56:c9:80:95:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=3c7c199f-4061-4e56-b5bb-aec288ef10a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:41:35:03:00:f8:e0:c7:f8:a0:5d:be:67: a7:e4:0e:32:d0:28:3c:b3:11:81:9f:b3:59:ad:60: 72:24:2d:28:54:34:bc:5b:03:03:e4:fa:d0:05:59: 91:d7:51:a8:b0:6f:fa:86:f5:4b:e3:f3:46:62:23: 85:f2:dc:7a:e8:84:59:3d:e6:e4:3c:44:a0:36:b4: d9:9a:1a:87:e9:47:80:b8:a5:5c:c1:88:4b:45:73: 15:8e:55:2e:0e:7d:a2:3a:e8:d4:56:a1:07:e6:d8: f0:fe:86:f8:e1:5b:6c:3f:ba:8c:85:a5:d9:4b:66: a3:21:6c:d3:a3:14:ab:40:5f:f6:19:85:bb:a1:62: 8e:51:ef:db:95:69:29:9f:2b:f0:7e:ba:7f:2f:31: ec:e5:6a:ed:80:db:bc:f3:50:01:6c:ee:b7:42:b3: 8b:f0:3b:a5:c0:dc:10:b2:49:d2:a8:b9:85:fb:8b: f7:72:65:e6:c3:04:36:9b:72:e6:e5:b2:e9:0a:cf: e7:d3:b3:82:cb:fe:22:7d:6c:29:c0:39:28:dc:08: 97:e0:1d:02:c5:71:ab:1e:07:d8:2b:e4:bd:7b:7b: 0f:16:72:c5:56:49:6e:a0:8c:46:6c:31:74:50:16: 11:c2:8c:1a:3b:8a:7f:a3:88:ac:27:33:02:3e:91: a0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:88:AF:76:D5:50:4A:EA:94:47:CC:F1:39:A5:4C:1F:3D:1A:57:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/856e770f-696e-3e92-989e-4ad87cdfde06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f0:06:0c:9f:c6:e4:e1:05:3a:27:0a:fd:07:08:f6:58:73: 29:d3:0a:6c:b2:6e:88:50:95:d0:f4:5b:8e:08:48:fe:94:d1: fd:31:31:79:2e:8c:14:e1:76:f8:44:82:3a:52:4d:02:e6:b5: 58:c0:b8:93:72:fe:15:3e:81:fa:26:50:16:55:c7:b7:e8:d4: f3:6d:54:27:51:53:00:1d:c3:db:03:e2:f6:72:77:c6:55:d3: ef:67:5e:ef:3c:17:db:cf:a2:e4:66:7c:aa:fb:0f:5c:29:41: 18:e3:00:db:30:b6:aa:2a:31:47:de:3f:2a:13:01:1c:88:80: 8a:6a:4f:be:b3:6b:9b:f3:e6:2e:30:9f:f9:1d:69:9d:8b:3a: ec:dc:b8:cd:97:13:0a:77:5a:61:e6:42:30:bf:3d:c1:d1:b3: 2e:46:e5:ce:b3:e3:17:71:cb:c5:13:79:cf:59:eb:bb:14:eb: bd:f4:fe:f8:c4:6b:f1:e6:63:3c:2a:08:d3:df:13:84:8a:f0: de:21:68:30:e7:11:f6:5c:cf:c8:3b:6c:75:3d:51:b1:50:75: 15:08:21:20:a4:ba:76:fc:88:6a:3d:23:8c:55:2a:c0:33:6b: 75:d2:16:35:48:3d:ba:c0:80:03:5e:ca:cb:0a:df:ba:70:50: 83:9d:85:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp4KNwlWyYCVpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk M2M3YzE5OWYtNDA2MS00ZTU2LWI1YmItYWVjMjg4ZWYxMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYxBNQMA+ODH+KBdvmen5A4y0Cg8sxGBn7NZ rWByJC0oVDS8WwMD5PrQBVmR11GosG/6hvVL4/NGYiOF8tx66IRZPebkPESgNrTZ mhqH6UeAuKVcwYhLRXMVjlUuDn2iOujUVqEH5tjw/ob44VtsP7qMhaXZS2ajIWzT oxSrQF/2GYW7oWKOUe/blWkpnyvwfrp/LzHs5WrtgNu881ABbO63QrOL8DulwNwQ sknSqLmF+4v3cmXmwwQ2m3Lm5bLpCs/n07OCy/4ifWwpwDko3AiX4B0CxXGrHgfY K+S9e3sPFnLFVkluoIxGbDF0UBYRwowaO4p/o4isJzMCPpGgewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCyIr3bVUErqlEfM8TmlTB89GlfRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU2ZTc3MGYtNjk2ZS0z ZTkyLTk4OWUtNGFkODdjZGZkZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3wBgyfxuThBTonCv0HCPZYcynTCmyybohQldD0W44ISP6U0f0xMXku jBThdvhEgjpSTQLmtVjAuJNy/hU+gfomUBZVx7fo1PNtVCdRUwAdw9sD4vZyd8ZV 0+9nXu88F9vPouRmfKr7D1wpQRjjANswtqoqMUfePyoTARyIgIpqT76za5vz5i4w n/kdaZ2LOuzcuM2XEwp3WmHmQjC/PcHRsy5G5c6z4xdxy8UTec9Z67sU6730/vjE a/HmYzwqCNPfE4SK8N4haDDnEfZcz8g7bHU9UbFQdRUIISCkunb8iGo9I4xVKsAz a3XSFjVIPbrAgANeyssK37pwUIOdhcs= -----END CERTIFICATE-----Generated at Sat Aug 23 13:02:37 2025 by rpki-client