$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa File: db217d05-2151-337c-981c-de867fa6c103.roa (raw, json) Hash identifier: D0gLBFS/2RlP/NDhz+zuGXzfnD8KAjOONMAEphOJWV8= Subject key identifier: 93:8C:23:C6:61:C8:43:CE:AC:DE:AA:D7:AB:68:20:C8:FF:CD:D7:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF951581787EC7285E8E5D040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 20940 IP address blocks: 104.120.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:58:17:87:ec:72:85:e8:e5:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=f5baabda-064a-4c04-8e17-eb865fdbc694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:72:97:3e:19:9a:a1:73:0d:07:32:50:b8: 92:14:73:b0:61:77:e9:c3:b0:1f:fc:1c:41:45:3e: 79:0d:6d:80:57:91:46:2d:dc:45:00:10:78:32:87: 57:67:89:e1:39:14:22:e5:a8:44:fc:14:44:eb:d5: be:64:4b:a4:e4:c0:5f:97:e5:ca:0f:50:eb:cc:23: d4:29:ea:83:01:b7:3b:b3:6f:2d:af:c7:9d:a0:e8: 72:56:34:7c:ce:63:eb:ff:b7:f4:73:59:40:df:22: a1:23:bd:7e:0f:55:66:9a:74:ce:4a:73:40:44:8f: dd:18:66:45:15:80:b7:a9:b6:59:de:fa:e4:32:07: 3c:0a:49:20:be:ef:04:9a:01:a1:05:62:25:5e:58: be:00:ff:78:ed:00:ff:ee:18:40:8a:81:3f:ce:61: c1:eb:eb:b9:c9:8d:56:12:d5:bc:99:7b:91:b0:39: de:54:11:d0:74:af:4d:a0:a4:6a:e4:c7:c9:1b:47: 88:a6:e7:e6:52:2f:95:40:9e:18:d5:3d:03:0a:a9: 0a:10:42:04:0a:0c:a7:75:3a:16:77:fb:63:ef:54: 0d:43:c8:82:bd:9f:37:5a:a6:47:20:50:4a:13:9a: d2:84:b9:33:15:60:67:bc:68:f8:28:1a:e9:a0:66: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8C:23:C6:61:C8:43:CE:AC:DE:AA:D7:AB:68:20:C8:FF:CD:D7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/db217d05-2151-337c-981c-de867fa6c103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.120.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:07:d4:20:51:02:27:6a:f2:2e:ae:ee:93:e4:1c:f5:ac:43: 57:89:5d:c5:c7:fd:3c:55:ff:55:7d:62:a8:b2:41:39:9e:41: cc:ea:38:09:f1:65:37:3e:6b:0a:b5:7d:95:7c:bc:19:2e:b7: 7a:ce:48:64:6d:97:46:23:f6:f5:3c:b6:1c:67:3b:5f:7e:4e: 71:a7:7b:f0:5f:0d:95:27:e6:7d:c2:cd:5f:33:50:95:f2:f0: 68:21:68:ff:73:94:3f:9c:ac:27:b6:63:77:37:f4:41:b6:45: e8:d7:61:b4:fe:28:30:e8:32:db:1f:5f:16:84:6c:19:6b:23: 9a:c4:cd:0c:27:ff:28:63:29:2c:af:75:18:aa:49:bc:de:98: dd:71:49:54:3a:6f:8e:ac:83:f6:52:45:64:fa:3f:57:e6:b4: 6a:e7:fd:fd:ab:a5:ba:d2:df:36:cb:73:7e:a4:78:17:3c:8b: 6c:96:89:6a:51:42:9c:8c:c2:1e:94:3d:bf:1a:af:25:aa:6e: e1:b2:ce:ec:a3:9b:bc:69:c5:02:ef:07:c8:73:29:b6:7a:ac: b3:97:d9:6e:96:08:3e:06:80:bd:45:00:b6:a2:9c:10:33:ce: 9e:85:68:05:89:ff:4c:a6:6c:18:38:96:59:52:ed:f4:b3:03: e7:52:34:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVgXh+xyhejl0EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjViYWFiZGEtMDY0YS00YzA0LThlMTctZWI4NjVmZGJjNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVdylz4ZmqFzDQcyULiSFHOwYXfpw7Af/BxB RT55DW2AV5FGLdxFABB4ModXZ4nhORQi5ahE/BRE69W+ZEuk5MBfl+XKD1DrzCPU KeqDAbc7s28tr8edoOhyVjR8zmPr/7f0c1lA3yKhI71+D1VmmnTOSnNARI/dGGZF FYC3qbZZ3vrkMgc8Ckkgvu8EmgGhBWIlXli+AP947QD/7hhAioE/zmHB6+u5yY1W EtW8mXuRsDneVBHQdK9NoKRq5MfJG0eIpufmUi+VQJ4Y1T0DCqkKEEIECgyndToW d/tj71QNQ8iCvZ83WqZHIFBKE5rShLkzFWBnvGj4KBrpoGZYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJOMI8ZhyEPOrN6q16toIMj/zddDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGIyMTdkMDUtMjE1MS0z MzdjLTk4MWMtZGU4NjdmYTZjMTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYH1CBRAidq8i6u7pPkHPWsQ1eJXcXH/TxV/1V9YqiyQTmeQczqOAnx ZTc+awq1fZV8vBkut3rOSGRtl0Yj9vU8thxnO19+TnGne/BfDZUn5n3CzV8zUJXy 8GghaP9zlD+crCe2Y3c39EG2RejXYbT+KDDoMtsfXxaEbBlrI5rEzQwn/yhjKSyv dRiqSbzemN1xSVQ6b46sg/ZSRWT6P1fmtGrn/f2rpbrS3zbLc36keBc8i2yWiWpR QpyMwh6UPb8aryWqbuGyzuyjm7xpxQLvB8hzKbZ6rLOX2W6WCD4GgL1FALainBAz zp6FaAWJ/0ymbBg4lllS7fSzA+dSNPw= -----END CERTIFICATE-----Generated at Mon Oct 20 04:55:02 2025 by rpki-client