$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dde1a59e-e4ca-3165-aaa0-739c1f618e11.roa File: dde1a59e-e4ca-3165-aaa0-739c1f618e11.roa (raw, json) Hash identifier: Wv8taXbblWUcSKXE1fYAsApiHVAyOrJeFu6LoP01iwI= Subject key identifier: 58:43:F2:4B:A4:B1:79:DA:9B:5A:93:80:96:BF:75:9F:F0:12:28:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569D034E7285164A864D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dde1a59e-e4ca-3165-aaa0-739c1f618e11.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.75.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9d:03:4e:72:85:16:4a:86:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=31896d2d-3229-41d7-8541-3e1806b7c3de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:bc:bc:88:63:e3:e0:16:94:6d:e5:65:7b:36: b0:bc:92:3e:7f:ec:71:b6:29:61:e0:01:2c:46:a5: c5:1e:d4:f2:c8:d5:44:50:f9:35:69:77:72:43:15: 59:08:bf:22:a9:c0:34:54:0f:d5:68:5f:70:dc:46: 22:a5:8a:ac:80:ed:b4:c7:95:5a:15:90:26:2e:34: fc:a6:a1:fe:de:a2:d8:f2:36:ca:7c:f8:51:9a:f7: 28:a1:e4:41:06:ab:7b:8a:7f:0f:6f:87:03:29:66: 66:8f:2b:dd:c0:ae:d0:a3:5e:89:1d:77:ac:59:07: 85:b9:c4:57:2c:cb:29:71:4d:7e:74:e3:e8:3b:2d: c7:34:79:07:0d:48:c0:1a:ff:62:af:cc:c2:58:92: c8:39:00:94:fb:71:95:4e:71:68:d2:51:4d:32:b9: 70:11:38:cd:79:61:31:23:be:94:b0:65:e5:6a:e3: a1:37:ed:a2:62:cd:df:e1:fb:dd:8c:9e:da:61:33: cf:14:3b:62:58:28:e3:b0:fa:56:6a:fb:62:f3:18: 8a:f2:2f:a6:42:ea:33:db:27:d1:cf:9a:1c:7a:a4: c1:67:3c:00:25:73:42:66:4d:21:1a:c0:5e:b7:c0: c0:84:a5:5e:0c:0f:29:b4:ac:e2:0c:08:b6:c9:3b: bf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:43:F2:4B:A4:B1:79:DA:9B:5A:93:80:96:BF:75:9F:F0:12:28:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dde1a59e-e4ca-3165-aaa0-739c1f618e11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.75.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:38:3c:dd:2b:49:01:1a:44:45:16:8d:cc:a7:02:23:cc:fb: 65:f1:c8:fe:d1:cc:96:b3:32:51:b6:a4:78:8a:96:7d:53:9d: ee:76:dd:c0:03:8b:24:63:b1:6d:a5:8d:85:76:05:f4:9c:71: 05:13:d3:52:16:88:c0:8f:23:7a:d8:20:15:f4:bf:e3:8f:8f: 7f:73:f6:12:75:93:42:f7:1c:de:4e:7b:39:ad:72:de:0c:b5: 91:37:5e:2a:f8:cc:90:66:5a:42:9a:c7:98:e4:97:50:72:6f: 34:8f:2c:f3:4a:5d:66:6f:cc:28:be:15:4e:93:9a:1b:2d:a3: 5d:8a:0b:d4:b7:79:e1:c7:77:b5:ff:57:38:9e:e8:f0:b4:3b: 12:51:0f:d4:e0:cc:cf:d0:63:7e:97:30:e8:20:98:56:d1:ab: bf:28:c1:b5:dc:79:60:a7:a2:e0:8b:a8:46:6b:19:2a:11:c3: 68:ec:40:c9:5c:2a:47:01:db:a0:64:61:6a:09:72:18:b9:9e: a7:f3:6c:a9:6f:a8:9d:03:38:e2:53:c2:9c:ed:01:51:ba:57: 18:7b:ca:8e:12:4d:84:76:52:4f:b5:48:c8:5f:01:bb:6b:87: be:0c:dd:6b:2d:57:67:4f:df:4d:47:84:59:3c:68:e0:53:21: a1:4c:ac:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp0DTnKFFkqGTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzE4OTZkMmQtMzIyOS00MWQ3LTg1NDEtM2UxODA2YjdjM2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6by8iGPj4BaUbeVlezawvJI+f+xxtilh4AEs RqXFHtTyyNVEUPk1aXdyQxVZCL8iqcA0VA/VaF9w3EYipYqsgO20x5VaFZAmLjT8 pqH+3qLY8jbKfPhRmvcooeRBBqt7in8Pb4cDKWZmjyvdwK7Qo16JHXesWQeFucRX LMspcU1+dOPoOy3HNHkHDUjAGv9ir8zCWJLIOQCU+3GVTnFo0lFNMrlwETjNeWEx I76UsGXlauOhN+2iYs3f4fvdjJ7aYTPPFDtiWCjjsPpWavti8xiK8i+mQuoz2yfR z5oceqTBZzwAJXNCZk0hGsBet8DAhKVeDA8ptKziDAi2yTu/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhD8kuksXnam1qTgJa/dZ/wEijFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGRlMWE1OWUtZTRjYS0z MTY1LWFhYTAtNzM5YzFmNjE4ZTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaEuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACs4PN0rSQEaREUWjcynAiPM+2XxyP7RzJazMlG2pHiKln1Tne523cAD iyRjsW2ljYV2BfSccQUT01IWiMCPI3rYIBX0v+OPj39z9hJ1k0L3HN5Oezmtct4M tZE3Xir4zJBmWkKax5jkl1BybzSPLPNKXWZvzCi+FU6Tmhsto12KC9S3eeHHd7X/ Vzie6PC0OxJRD9TgzM/QY36XMOggmFbRq78owbXceWCnouCLqEZrGSoRw2jsQMlc KkcB26BkYWoJchi5nqfzbKlvqJ0DOOJTwpztAVG6Vxh7yo4STYR2Uk+1SMhfAbtr h74M3WstV2dP301HhFk8aOBTIaFMrMc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:04 2025 by rpki-client