$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa File: 8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa (raw, json) Hash identifier: fhbibCD/7/Lwa9jrMdQmXn2FkJBZLY2M4j2PZFEperM= Subject key identifier: 03:33:F0:70:32:F4:BC:93:1C:83:04:30:5E:65:45:94:31:EA:71:0E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9514F038B95ADA5260CA8C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 20940 IP address blocks: 104.125.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4f:03:8b:95:ad:a5:26:0c:a8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=984ed5a2-8622-49db-bd0a-0d18dd622271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:8e:ab:d9:b3:3d:91:d6:b9:a2:f9:90:7f: bb:5e:69:bb:65:1c:64:4d:df:ad:5b:9c:c1:d9:b1: cd:ea:79:40:e2:86:8d:72:b9:69:50:f7:4d:e0:db: 97:b1:29:64:62:d6:54:f4:ed:6c:db:c9:a4:4a:7e: 9e:03:c3:73:69:cf:02:d3:e3:87:3a:e2:2f:9c:c8: 42:cb:66:e5:91:04:dc:78:bf:8f:d5:fd:12:7b:53: 99:96:5b:9e:32:78:43:58:ad:6d:3d:51:0f:32:33: 54:72:6f:3e:5a:fb:9e:0b:01:0d:ab:e5:c3:41:6a: fa:64:b0:0b:05:e3:23:83:4d:01:8d:90:43:d0:db: 56:a1:66:94:05:b1:6d:f5:c0:39:9f:aa:d5:98:a4: e1:0b:c3:3e:dd:f8:a8:b9:c4:42:52:86:26:7e:26: d5:03:44:2b:86:c2:33:4a:a5:21:31:9d:5b:a7:97: 1f:7e:03:2d:7b:7b:7f:c6:3c:4b:de:7b:de:ff:65: 2b:6d:79:70:21:f3:34:ec:25:35:be:a0:b5:20:33: 0e:51:d6:bb:84:39:e8:a6:ab:a3:e9:3c:c7:00:ae: aa:c7:e8:c0:5b:12:8d:9e:43:71:45:b9:0f:8a:b1: 1a:9c:d5:fb:57:42:b2:00:49:4c:4b:29:bb:5d:c9: ed:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:33:F0:70:32:F4:BC:93:1C:83:04:30:5E:65:45:94:31:EA:71:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c2dd224-3249-33f5-9159-c1694c4f1ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:16:1f:3e:a7:db:c6:20:3a:21:f1:99:37:48:d6:68:f6:44: cc:07:33:bc:ff:a5:3b:fa:91:84:ff:a4:26:e6:d6:0b:eb:f0: aa:f9:94:b0:44:11:44:30:4f:99:54:90:9d:3d:79:5c:69:24: 3e:68:d6:51:ca:c9:32:1e:2d:53:91:45:e9:5c:7f:bb:81:ef: c5:4a:0c:95:49:9d:77:5a:de:97:6d:9e:e3:b1:23:6e:7a:9f: 91:99:f3:4c:1c:6f:ba:13:a6:83:30:4a:c9:5e:53:06:fe:30: 95:7e:3c:44:34:0f:6d:ba:e4:8c:1b:69:e2:a9:ba:c6:ff:39: b1:95:cc:fa:54:43:c0:1e:cf:76:33:33:7e:63:91:e2:0a:06: 45:1d:b4:22:45:3f:1a:fc:35:0c:4c:ed:0e:c5:f6:23:bd:25: 2d:3d:63:54:5a:35:63:93:8c:2d:a4:76:e8:62:e8:89:7b:06: 94:44:d5:b7:8d:04:26:10:70:17:85:e6:2c:cb:7b:f3:24:db: 7c:d6:d7:d7:ba:03:de:36:ee:8b:a1:c7:44:2e:3a:01:4d:09: 67:02:aa:93:a4:76:a7:08:8b:c6:ad:11:91:1c:66:6a:ca:f9: f2:ac:9b:2b:ca:a6:0f:99:f3:84:af:d5:a2:49:c0:13:47:11: 55:13:d9:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU8Di5WtpSYMqMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OTg0ZWQ1YTItODYyMi00OWRiLWJkMGEtMGQxOGRkNjIyMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CWOq9mzPZHWuaL5kH+7Xmm7ZRxkTd+tW5zB 2bHN6nlA4oaNcrlpUPdN4NuXsSlkYtZU9O1s28mkSn6eA8Nzac8C0+OHOuIvnMhC y2blkQTceL+P1f0Se1OZllueMnhDWK1tPVEPMjNUcm8+WvueCwENq+XDQWr6ZLAL BeMjg00BjZBD0NtWoWaUBbFt9cA5n6rVmKThC8M+3fioucRCUoYmfibVA0QrhsIz SqUhMZ1bp5cffgMte3t/xjxL3nve/2UrbXlwIfM07CU1vqC1IDMOUda7hDnopquj 6TzHAK6qx+jAWxKNnkNxRbkPirEanNX7V0KyAElMSym7XcntLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMz8HAy9LyTHIMEMF5lRZQx6nEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMyZGQyMjQtMzI0OS0z M2Y1LTkxNTktYzE2OTRjNGYxY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaH1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcWHz6n28YgOiHxmTdI1mj2RMwHM7z/pTv6kYT/pCbm1gvr8Kr5lLBE EUQwT5lUkJ09eVxpJD5o1lHKyTIeLVORRelcf7uB78VKDJVJnXda3pdtnuOxI256 n5GZ80wcb7oTpoMwSsleUwb+MJV+PEQ0D2265IwbaeKpusb/ObGVzPpUQ8Aez3Yz M35jkeIKBkUdtCJFPxr8NQxM7Q7F9iO9JS09Y1RaNWOTjC2kduhi6Il7BpRE1beN BCYQcBeF5izLe/Mk23zW19e6A9427ouhx0QuOgFNCWcCqpOkdqcIi8atEZEcZmrK +fKsmyvKpg+Z84Sv1aJJwBNHEVUT2cg= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:58 2025 by rpki-client