$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa File: d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa (raw, json) Hash identifier: ST7oQSCON3wUN12n2FzumyRUVpdfQlbqcUWEnm2NaYk= Subject key identifier: 0E:18:9E:C7:DA:28:BE:00:7A:21:79:37:72:F8:25:84:EE:E8:8B:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE5C6801E1BEFC35B083A9800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 104.114.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:80:1e:1b:ef:c3:5b:08:3a:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=b336ace0-0ddd-42a7-8fc1-f24a4ff66b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:31:16:37:9f:b8:15:85:1a:21:77:ef:40: 8f:12:d5:a9:be:86:db:6d:7c:2d:72:14:60:54:22: ef:be:e3:87:d1:56:ee:da:eb:53:ae:f5:46:5b:a7: 7a:23:d1:bd:71:25:1e:ab:0b:d3:aa:5f:ba:09:e0: 41:26:e2:37:c4:62:27:26:3c:91:4a:d1:01:50:c2: 65:eb:a7:0b:65:81:7d:42:3e:7b:2b:62:3e:21:dd: e0:6e:d4:04:aa:d5:bd:6a:c7:30:c2:f4:7f:aa:45: 4a:2c:66:20:ba:5c:3f:75:1d:b4:62:0b:a6:f8:6d: da:e1:92:1b:d6:53:af:1d:e5:d9:e1:a8:7f:31:4f: 78:97:b4:c9:d3:af:f1:e9:46:31:5f:d9:a7:de:ec: ef:a4:76:c0:94:d1:d0:5b:1f:70:51:c1:1d:62:a9: d4:fa:b1:35:34:e5:9a:9c:ec:4d:ba:f6:da:5a:2a: 23:ce:42:59:46:17:e9:b1:6c:29:7f:38:6b:7c:79: 9e:93:78:67:86:ad:64:a8:0c:c4:88:cf:b1:4a:3a: 11:fd:f9:26:a9:4c:2f:e3:a5:ed:f6:79:89:60:68: 8c:2c:9a:21:ab:bb:1d:c7:fc:35:ab:b1:05:d1:dc: 52:d0:8e:0b:8f:8f:75:07:9e:a4:04:57:5e:f5:06: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:18:9E:C7:DA:28:BE:00:7A:21:79:37:72:F8:25:84:EE:E8:8B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d1b36903-206e-3aec-83d6-bd2d95bb8a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.114.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:75:62:47:8b:8d:d4:94:7e:38:b2:76:83:d7:48:1b:45:81: 2c:4a:6a:c1:ac:d4:7d:f3:c9:c2:13:e5:8a:b1:9f:f6:16:35: 1d:e0:9f:71:d8:9f:a1:cd:bd:00:46:e4:4a:9b:8a:18:10:11: fd:af:96:51:f8:85:9e:3b:79:4e:f0:04:72:ab:bb:f5:6f:0f: 6b:4d:73:c6:aa:ef:01:ec:ae:64:f8:57:d4:22:3b:23:2f:17: d6:85:fb:38:ba:51:18:38:f3:e7:1e:72:f3:92:1d:00:ed:42: df:b0:d6:03:75:cd:2c:9d:2e:fa:f7:ca:b3:8e:be:cd:73:1c: dd:fc:4b:d4:6b:4f:c5:f4:4d:48:5a:9c:17:01:79:67:7f:fc: 8e:a2:cc:35:3a:7a:17:02:a0:2d:11:c2:55:4a:dd:4e:4c:20: c7:df:5a:87:15:3d:df:9f:9c:c6:99:28:44:2b:ef:95:87:fe: b9:f4:3c:bd:13:b7:98:10:38:56:40:a8:18:f6:43:7c:49:72: 9a:a7:ba:c1:21:25:50:27:28:d0:6a:8a:58:c0:0c:c9:0d:4f: e1:28:3d:b3:5b:90:71:f5:ae:4d:24:fb:75:95:d2:0a:ba:4f: d0:8f:18:4a:19:1c:f7:08:0f:54:ba:15:16:a6:ac:97:5f:c1: 10:1a:8b:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxoAeG+/DWwg6mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk YjMzNmFjZTAtMGRkZC00MmE3LThmYzEtZjI0YTRmZjY2YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzMxFjefuBWFGiF370CPEtWpvobbbXwtchRg VCLvvuOH0Vbu2utTrvVGW6d6I9G9cSUeqwvTql+6CeBBJuI3xGInJjyRStEBUMJl 66cLZYF9Qj57K2I+Id3gbtQEqtW9ascwwvR/qkVKLGYgulw/dR20Ygum+G3a4ZIb 1lOvHeXZ4ah/MU94l7TJ06/x6UYxX9mn3uzvpHbAlNHQWx9wUcEdYqnU+rE1NOWa nOxNuvbaWiojzkJZRhfpsWwpfzhrfHmek3hnhq1kqAzEiM+xSjoR/fkmqUwv46Xt 9nmJYGiMLJohq7sdx/w1q7EF0dxS0I4Lj491B56kBFde9QZCzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4YnsfaKL4AeiF5N3L4JYTu6IuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDFiMzY5MDMtMjA2ZS0z YWVjLTgzZDYtYmQyZDk1YmI4YTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR1YkeLjdSUfjiydoPXSBtFgSxKasGs1H3zycIT5Yqxn/YWNR3gn3HY n6HNvQBG5EqbihgQEf2vllH4hZ47eU7wBHKru/VvD2tNc8aq7wHsrmT4V9QiOyMv F9aF+zi6URg48+cecvOSHQDtQt+w1gN1zSydLvr3yrOOvs1zHN38S9RrT8X0TUha nBcBeWd//I6izDU6ehcCoC0RwlVK3U5MIMffWocVPd+fnMaZKEQr75WH/rn0PL0T t5gQOFZAqBj2Q3xJcpqnusEhJVAnKNBqiljADMkNT+EoPbNbkHH1rk0k+3WV0gq6 T9CPGEoZHPcID1S6FRamrJdfwRAai3U= -----END CERTIFICATE-----Generated at Sat Aug 23 14:46:46 2025 by rpki-client