$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa File: bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa (raw, json) Hash identifier: 0Md0azavs2Aj5aiN9+3g9Smkx0OSbui6Gz6sFIif5PM= Subject key identifier: E0:C7:30:4A:9A:BD:7F:8E:1C:65:63:5D:F2:0F:0E:D8:69:04:6E:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC0162C412B1C71CE6CCAD180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 35994 IP address blocks: 104.120.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:2c:41:2b:1c:71:ce:6c:ca:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=b52edbce-384d-4347-8a95-afae3521d9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ba:80:a5:22:7a:c2:83:15:67:bc:91:df:a6: d3:c2:ad:0f:f6:20:21:64:43:eb:ec:e7:a5:1d:cc: 07:fd:5b:cc:a9:ce:20:fc:5b:53:78:95:5f:7c:0f: 8a:8c:63:35:06:32:b0:8a:14:68:3f:d3:9b:d9:51: fa:eb:98:0c:f1:b0:96:22:fb:ba:fc:d4:76:be:4e: 47:51:57:dc:7d:b5:e1:16:92:24:b1:cb:cd:d4:3f: a1:c7:7d:9c:59:d4:8d:43:17:4e:2a:05:43:d8:dc: a5:6e:59:d2:0a:a7:d9:53:79:f2:0e:80:b8:a4:23: 3f:a5:9b:6b:90:21:14:83:57:13:69:06:0e:53:5f: 0c:d5:52:1a:db:61:19:fd:76:01:67:e3:e0:9a:f3: 3d:f8:0a:76:e5:04:d7:8b:13:e6:9d:05:9c:5e:bd: c9:d7:48:fa:ac:2a:8c:41:91:08:45:92:7d:c6:94: 33:1e:26:5d:ec:6f:5c:dc:a4:67:22:e3:0a:5b:bc: 86:6e:81:93:34:b1:4b:10:99:cd:3e:04:24:50:bc: eb:a6:59:f6:54:4e:67:a4:40:67:9b:d8:a7:5d:57: e3:3a:e8:33:b6:ad:56:ce:01:3c:1d:79:0e:d4:14: 66:a0:97:f6:ed:f3:5e:e6:1c:3d:bb:33:76:93:49: f2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C7:30:4A:9A:BD:7F:8E:1C:65:63:5D:F2:0F:0E:D8:69:04:6E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bca8ccab-4f73-3dd3-abc1-d8a3783670b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:13:ea:b0:0d:78:a8:2b:a5:70:f9:1d:69:7a:d2:d4:30:ac: 3e:6f:31:65:9e:40:42:93:ed:70:93:4e:d0:b6:5a:da:57:20: 5b:53:5a:2e:e9:83:c5:e4:76:9b:d9:36:62:cd:63:53:b8:95: e2:cf:6f:b0:9e:b6:94:35:b3:fc:d5:7b:19:e0:f6:95:11:ef: 79:79:30:24:28:5d:00:c0:fc:48:d1:9f:c7:d5:ec:9f:92:34: 8d:91:86:66:a3:03:a2:30:3a:2f:8a:e9:8c:48:95:c9:df:56: 1c:ed:a3:82:96:97:91:50:d1:15:8f:62:2f:b3:92:ee:e7:97: c3:40:cc:be:2e:bd:16:f7:fe:fd:7f:59:3c:f9:2d:01:65:3e: 22:66:ad:c5:a1:99:c1:e1:57:88:43:81:ca:3c:38:05:76:3f: 99:b7:43:7e:4e:b1:23:a7:f9:a7:d3:f5:bf:c3:e3:7e:4b:ce: 90:4e:62:ab:51:8a:b3:ed:8a:91:74:02:f7:0c:42:f3:f4:55: 21:9f:93:1d:ec:c6:8a:3f:f6:67:ca:22:a3:04:3d:a7:89:70: df:b6:40:e7:83:3d:2b:13:0c:1f:01:aa:53:6d:22:80:ee:b6: bb:be:7a:60:d5:62:12:c3:aa:1d:2e:15:ea:12:fe:1c:e7:cb: 75:aa:16:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFixBKxxxzmzK0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjUyZWRiY2UtMzg0ZC00MzQ3LThhOTUtYWZhZTM1MjFkOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbqApSJ6woMVZ7yR36bTwq0P9iAhZEPr7Oel HcwH/VvMqc4g/FtTeJVffA+KjGM1BjKwihRoP9Ob2VH665gM8bCWIvu6/NR2vk5H UVfcfbXhFpIkscvN1D+hx32cWdSNQxdOKgVD2NylblnSCqfZU3nyDoC4pCM/pZtr kCEUg1cTaQYOU18M1VIa22EZ/XYBZ+PgmvM9+Ap25QTXixPmnQWcXr3J10j6rCqM QZEIRZJ9xpQzHiZd7G9c3KRnIuMKW7yGboGTNLFLEJnNPgQkULzrpln2VE5npEBn m9inXVfjOugztq1WzgE8HXkO1BRmoJf27fNe5hw9uzN2k0nyTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODHMEqavX+OHGVjXfIPDthpBG4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmNhOGNjYWItNGY3My0z ZGQzLWFiYzEtZDhhMzc4MzY3MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcT6rANeKgrpXD5HWl60tQwrD5vMWWeQEKT7XCTTtC2WtpXIFtTWi7p g8XkdpvZNmLNY1O4leLPb7CetpQ1s/zVexng9pUR73l5MCQoXQDA/EjRn8fV7J+S NI2RhmajA6IwOi+K6YxIlcnfVhzto4KWl5FQ0RWPYi+zku7nl8NAzL4uvRb3/v1/ WTz5LQFlPiJmrcWhmcHhV4hDgco8OAV2P5m3Q35OsSOn+afT9b/D435LzpBOYqtR irPtipF0AvcMQvP0VSGfkx3sxoo/9mfKIqMEPaeJcN+2QOeDPSsTDB8BqlNtIoDu tru+emDVYhLDqh0uFeoS/hzny3WqFug= -----END CERTIFICATE-----Generated at Sat Aug 23 12:53:16 2025 by rpki-client