$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa File: bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa (raw, json) Hash identifier: uGWkdDkwJXHOvl6tdR8uuo6lqBIEoSG7pnacSeitOHc= Subject key identifier: B3:BA:59:0C:91:95:3C:6E:4A:FA:DD:97:31:0C:56:FA:46:EE:12:CE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE89142D4078003E765105380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.80.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:42:d4:07:80:03:e7:65:10:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=3552cda9-f8f2-461c-99cb-112425aafc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:ac:fa:93:8e:90:3d:d4:fa:1f:c0:e5:68: 1a:42:f4:b5:5d:3d:9d:7e:96:1c:ed:12:ca:6a:7d: e0:4c:d9:15:35:7a:59:e0:20:fd:88:f2:9d:a5:5a: f2:e4:e3:41:cb:7b:73:e4:8f:f4:1a:ef:f7:00:ec: 38:6a:70:da:ec:7b:42:8e:be:60:05:46:3e:8c:a2: 0d:01:4e:22:f6:16:5a:2a:49:32:2b:21:7e:bd:94: 60:90:a9:0f:7b:4e:7b:b1:4e:ef:a7:06:5a:a8:73: 94:01:30:b3:75:7b:f7:13:77:1d:b3:a7:35:1e:3f: 8e:32:f7:a6:7d:3f:e9:69:22:cb:8d:4f:96:55:11: f2:7f:c5:aa:31:65:d3:9f:88:7e:4e:ea:a5:e3:a7: 58:87:15:df:1a:5c:b8:ae:01:90:d3:4b:5f:a5:57: fd:54:34:ae:47:6a:19:a2:c6:46:f6:6e:d1:9e:1b: d5:c7:e9:56:f3:67:d4:d5:92:3f:aa:ab:93:44:a3: 8c:59:f3:f8:8d:e3:58:1c:06:88:8b:25:40:b6:59: 2d:4b:cc:54:6b:7f:75:7f:c9:e2:d6:2e:cd:d1:e8: 16:11:d3:3c:2b:f4:bb:4c:06:8f:9c:23:f5:99:7b: 6e:02:17:f2:7c:de:21:6a:30:0b:72:e2:4c:33:a7: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:BA:59:0C:91:95:3C:6E:4A:FA:DD:97:31:0C:56:FA:46:EE:12:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bb3e7998-2dc0-31d9-8712-582b6a29bef2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.80.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:40:b4:0e:c5:f8:0c:3a:6b:f8:5a:c2:5d:be:72:f5:c6:a3: 86:2b:e3:38:c6:6f:3f:13:43:5d:6e:22:f5:6f:2a:80:93:1f: e0:64:f9:22:8c:f9:ed:4e:63:04:ad:c5:a9:be:9f:81:de:4d: 59:ad:b7:ca:d2:eb:41:e9:7b:ff:ec:2d:6d:17:eb:ed:09:aa: c6:ca:83:c0:49:a2:64:13:de:f2:fa:b3:71:bc:c5:52:a8:1a: 1d:ef:03:5d:ad:89:b1:21:26:49:b0:d2:09:da:3b:34:f0:ed: 45:dd:33:9e:0f:d8:b5:70:fe:da:3f:9b:3d:4e:22:60:a8:5c: 70:78:61:eb:c0:8b:ab:87:99:46:2b:29:56:47:1f:8f:79:97: c0:d4:39:41:c3:1d:59:6e:bb:0e:c9:14:ba:db:a2:70:5f:5a: 70:d0:c4:39:b9:b1:14:08:65:a6:3f:13:86:01:f7:48:38:66: f4:34:49:de:23:cd:dc:f3:bf:be:37:89:28:e5:9a:39:57:0f: 51:81:d6:d0:e0:b9:6a:2b:29:a7:95:58:5d:99:8c:67:57:5b: 57:e1:e2:d7:21:b4:97:bf:d4:2d:00:b1:d8:fa:00:46:e4:54: 34:f0:05:65:2a:b2:9f:5c:b2:60:46:18:33:9c:80:e9:c3:24: b9:c9:fd:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokULUB4AD52UQU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk MzU1MmNkYTktZjhmMi00NjFjLTk5Y2ItMTEyNDI1YWFmYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg2s+pOOkD3U+h/A5WgaQvS1XT2dfpYc7RLK an3gTNkVNXpZ4CD9iPKdpVry5ONBy3tz5I/0Gu/3AOw4anDa7HtCjr5gBUY+jKIN AU4i9hZaKkkyKyF+vZRgkKkPe057sU7vpwZaqHOUATCzdXv3E3cds6c1Hj+OMvem fT/paSLLjU+WVRHyf8WqMWXTn4h+Tuql46dYhxXfGly4rgGQ00tfpVf9VDSuR2oZ osZG9m7RnhvVx+lW82fU1ZI/qquTRKOMWfP4jeNYHAaIiyVAtlktS8xUa391f8ni 1i7N0egWEdM8K/S7TAaPnCP1mXtuAhfyfN4hajALcuJMM6fCvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO6WQyRlTxuSvrdlzEMVvpG7hLOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmIzZTc5OTgtMmRjMC0z MWQ5LTg3MTItNTgyYjZhMjliZWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJAtA7F+Aw6a/hawl2+cvXGo4Yr4zjGbz8TQ11uIvVvKoCTH+Bk+SKM +e1OYwStxam+n4HeTVmtt8rS60Hpe//sLW0X6+0JqsbKg8BJomQT3vL6s3G8xVKo Gh3vA12tibEhJkmw0gnaOzTw7UXdM54P2LVw/to/mz1OImCoXHB4YevAi6uHmUYr KVZHH495l8DUOUHDHVluuw7JFLrbonBfWnDQxDm5sRQIZaY/E4YB90g4ZvQ0Sd4j zdzzv743iSjlmjlXD1GB1tDguWorKaeVWF2ZjGdXW1fh4tchtJe/1C0Asdj6AEbk VDTwBWUqsp9csmBGGDOcgOnDJLnJ/V8= -----END CERTIFICATE-----Generated at Sat Aug 23 13:13:30 2025 by rpki-client