$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa File: 86f10792-ebce-3d34-b619-59f83c89ced3.roa (raw, json) Hash identifier: lJ7P5uY4otr65G8aRWNa9jLXn1mVSxOPj41PBkSWDDw= Subject key identifier: 9F:31:EB:A4:3F:43:37:C1:3F:C3:BE:3C:AA:0A:27:89:E1:CD:6B:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2568913F06D553114FC2FE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.66.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:89:13:f0:6d:55:31:14:fc:2f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=512ff350-fd60-4c6a-b2fc-2ec6fb47cf3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1e:85:bf:2a:1d:ef:92:6b:98:fb:98:5f:f9: 69:05:27:1b:2b:0d:70:a6:9e:af:b3:ee:b1:f3:7d: 92:cd:18:da:18:4c:39:8d:7e:7e:52:69:6a:ec:12: a6:11:6a:6d:d5:6f:7e:26:f9:6d:61:64:96:f0:8c: aa:ce:cf:66:a7:fd:5a:f3:4a:5a:16:4e:f1:e4:46: be:54:6b:95:8b:97:ab:39:c1:f4:f7:23:9a:d4:0f: f6:01:88:58:8d:f3:21:5c:22:67:8b:3d:a2:74:98: 07:61:73:2a:b3:58:7e:88:f0:c0:e3:e1:19:fb:a6: 98:92:35:d2:84:c7:1a:1c:98:5c:86:f0:11:40:b8: 9a:de:7c:c9:20:f4:00:95:9d:2e:91:23:9e:8b:d4: e0:58:ba:5d:ad:8a:69:76:6f:ed:5f:cf:50:4f:7d: cd:6a:76:72:6b:0d:97:ee:d8:b2:ae:ae:41:65:f6: a4:0f:aa:4e:01:e3:39:cf:72:61:ba:22:d0:b3:b8: cd:9d:d5:5b:8c:a9:26:c0:6f:1e:be:79:a1:1d:73: 6d:7b:68:6f:1a:b9:36:b6:d6:9b:f3:11:1c:c5:86: 25:58:3f:1f:25:65:02:0d:f1:2c:c0:17:53:a7:60: 6b:cc:4e:a7:9f:f7:b9:56:b9:46:e1:fc:c6:8c:21: b9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:31:EB:A4:3F:43:37:C1:3F:C3:BE:3C:AA:0A:27:89:E1:CD:6B:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86f10792-ebce-3d34-b619-59f83c89ced3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.66.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:03:8b:74:be:90:f5:2d:7b:fe:d8:99:e4:17:a1:2f:33:ee: be:a7:e6:0c:6a:1e:78:87:20:2f:0d:65:59:d0:98:fe:c0:0e: a9:3d:ff:f6:67:69:9c:b8:cb:36:7c:e4:05:da:07:1d:b4:44: a3:d7:2e:05:88:3a:8c:01:bb:13:02:5c:bb:39:13:56:ed:07: 70:f5:bb:fa:3c:9f:43:bf:7c:9e:bf:38:e1:2b:d6:a7:de:b8: 8c:e1:61:87:d3:79:33:a5:1c:1d:6d:84:cc:1a:d8:a3:61:f4: d1:b1:f4:18:8d:05:c6:ce:92:6b:0b:3c:d7:07:33:15:fc:81: ce:8a:57:5a:e7:ab:3d:44:23:04:5e:b8:b6:b3:f1:6d:1e:d2: e2:e2:16:4e:54:97:19:d9:cb:4f:33:cf:15:7d:da:8a:37:bd: 7f:21:0d:d6:77:21:fd:b5:aa:1d:f4:ed:87:b7:67:ed:38:21: 3d:a0:c7:72:27:62:83:b0:08:64:dc:8d:f8:c2:69:6a:19:49: 59:81:fb:16:09:e7:fa:79:2c:73:16:99:a8:df:5e:3b:01:96: f7:08:9e:25:d3:95:d4:c0:23:45:fd:30:22:5a:ad:99:d3:66: 41:21:99:b1:4b:74:32:12:55:33:19:96:d9:26:47:15:20:51: 95:f7:6b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVokT8G1VMRT8L+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTEyZmYzNTAtZmQ2MC00YzZhLWIyZmMtMmVjNmZiNDdjZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAph6Fvyod75JrmPuYX/lpBScbKw1wpp6vs+6x 832SzRjaGEw5jX5+Umlq7BKmEWpt1W9+JvltYWSW8Iyqzs9mp/1a80paFk7x5Ea+ VGuVi5erOcH09yOa1A/2AYhYjfMhXCJniz2idJgHYXMqs1h+iPDA4+EZ+6aYkjXS hMcaHJhchvARQLia3nzJIPQAlZ0ukSOei9TgWLpdrYppdm/tX89QT33NanZyaw2X 7tiyrq5BZfakD6pOAeM5z3JhuiLQs7jNndVbjKkmwG8evnmhHXNte2hvGrk2ttab 8xEcxYYlWD8fJWUCDfEswBdTp2BrzE6nn/e5VrlG4fzGjCG5YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8x66Q/QzfBP8O+PKoKJ4nhzWs6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZmMTA3OTItZWJjZS0z ZDM0LWI2MTktNTlmODNjODljZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Di3S+kPUte/7YmeQXoS8z7r6n5gxqHniHIC8NZVnQmP7ADqk9//Zn aZy4yzZ85AXaBx20RKPXLgWIOowBuxMCXLs5E1btB3D1u/o8n0O/fJ6/OOEr1qfe uIzhYYfTeTOlHB1thMwa2KNh9NGx9BiNBcbOkmsLPNcHMxX8gc6KV1rnqz1EIwRe uLaz8W0e0uLiFk5UlxnZy08zzxV92oo3vX8hDdZ3If21qh307Ye3Z+04IT2gx3In YoOwCGTcjfjCaWoZSVmB+xYJ5/p5LHMWmajfXjsBlvcIniXTldTAI0X9MCJarZnT ZkEhmbFLdDISVTMZltkmRxUgUZX3a+U= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:24 2025 by rpki-client