$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0f5df80-7f78-3181-9425-35bb6afb0a44.roa File: e0f5df80-7f78-3181-9425-35bb6afb0a44.roa (raw, json) Hash identifier: yCqDh8R4+jFBYCSUKR7ZPoyAIQt4HoQd4Q8as/k6Kco= Subject key identifier: 64:64:EC:FA:D7:2C:17:18:E8:5A:4D:3D:C7:0A:3F:AD:6C:FA:9E:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE5C67FCAA365D5997BFF4380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0f5df80-7f78-3181-9425-35bb6afb0a44.roa Signing time: Mon 18 Aug 2025 13:00:41 +0000 ROA not before: Mon 18 Aug 2025 13:00:41 +0000 ROA not after: Sun 16 Nov 2025 14:00:41 +0000 asID: 16625 IP address blocks: 104.104.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e5:c6:7f:ca:a3:65:d5:99:7b:ff:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 18 13:00:41 2025 GMT Not After : Nov 16 14:00:41 2025 GMT Subject: CN=e835caba-7118-48aa-871f-ac989676e3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:5b:d1:54:dd:c0:17:06:06:41:c0:5b:dc: 39:1c:76:1b:ed:b9:eb:1a:d7:b7:8c:7f:bc:a3:12: 08:4e:cd:12:45:9f:36:f6:e7:03:c6:ac:aa:14:a3: b3:52:de:71:7b:5e:54:a5:cf:13:33:e9:02:05:9c: cb:2d:44:8d:a2:bb:86:20:a9:93:36:ec:63:1f:65: 81:7d:f5:81:23:49:fb:4b:ba:f7:5f:c9:b9:64:34: 6e:b4:d5:b6:8d:27:f8:dd:ae:e8:1b:e1:2d:f0:7c: 3d:55:fa:67:64:4c:b6:bd:a0:52:4c:42:36:8e:6f: ec:26:20:26:42:9f:1e:0b:89:5c:b5:96:e1:2d:cc: 65:5e:c1:56:e3:b0:68:23:bc:fd:9d:c8:58:7f:e8: 6c:b9:9a:58:2d:c7:6a:e2:c1:bb:cc:9c:3a:3d:d4: 6d:21:ac:1e:2a:89:d2:e9:21:d0:cc:0f:af:a3:32: 2b:30:1b:49:e2:e1:02:6d:27:a5:95:b0:da:53:73: 11:04:d0:b1:70:24:2f:63:c9:5b:df:0c:93:57:bb: 74:c1:5b:e0:e7:ad:61:62:d5:5a:4b:40:2b:76:11: 20:48:20:00:50:f6:df:23:3f:c5:cb:ec:34:5f:94: 52:a9:c4:e1:56:5d:58:ce:33:6e:0a:fe:45:c0:6e: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:64:EC:FA:D7:2C:17:18:E8:5A:4D:3D:C7:0A:3F:AD:6C:FA:9E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e0f5df80-7f78-3181-9425-35bb6afb0a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:51:6e:a3:ee:c3:97:85:a6:72:8d:22:44:54:9b:86:21:86: 01:2d:7e:bf:4b:48:d9:26:65:93:ab:ce:70:eb:f2:25:12:e7: 59:11:8a:4c:0c:98:dd:b7:4e:dd:69:41:c0:54:f3:0a:91:04: 6d:8a:95:50:c5:b1:bc:3b:fe:2f:6e:e9:98:ab:11:50:0e:a6: 7b:12:59:f6:83:6e:b6:0b:82:db:dd:f3:6d:aa:a4:42:3c:9a: 22:78:52:ff:83:c2:52:18:e6:cf:48:36:5f:83:93:87:e7:7c: 6a:2d:7c:48:1f:39:c1:fa:10:31:ee:3a:13:07:f4:b4:90:69: c9:74:e8:cb:23:f1:8f:f6:54:ad:c3:3d:a8:1c:6f:26:d3:19: 83:f8:09:12:49:33:69:55:00:cb:5d:c4:6f:24:b2:6d:db:7c: ee:69:ec:2b:70:44:3a:86:52:12:5b:05:76:16:17:09:4d:7d: ff:ac:80:6b:e0:81:b5:f1:eb:41:6e:6f:e0:9c:4b:a0:c1:1e: 38:91:ce:14:45:25:3f:a8:3f:5a:2e:c5:96:0e:79:a4:20:fa: 6e:93:17:83:f1:e9:62:37:53:f9:f7:a6:63:c9:84:3a:a1:fb: 47:77:76:58:fc:7a:dc:0d:52:3d:4a:48:cf:43:94:36:2a:a2: 3e:e0:50:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxn/Ko2XVmXv/Q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk ZTgzNWNhYmEtNzExOC00OGFhLTg3MWYtYWM5ODk2NzZlM2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4Nb0VTdwBcGBkHAW9w5HHYb7bnrGte3jH+8 oxIITs0SRZ829ucDxqyqFKOzUt5xe15Upc8TM+kCBZzLLUSNoruGIKmTNuxjH2WB ffWBI0n7S7r3X8m5ZDRutNW2jSf43a7oG+Et8Hw9VfpnZEy2vaBSTEI2jm/sJiAm Qp8eC4lctZbhLcxlXsFW47BoI7z9nchYf+hsuZpYLcdq4sG7zJw6PdRtIaweKonS 6SHQzA+vozIrMBtJ4uECbSellbDaU3MRBNCxcCQvY8lb3wyTV7t0wVvg561hYtVa S0ArdhEgSCAAUPbfIz/Fy+w0X5RSqcThVl1YzjNuCv5FwG4MpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRk7PrXLBcY6FpNPccKP61s+p45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTBmNWRmODAtN2Y3OC0z MTgxLTk0MjUtMzViYjZhZmIwYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJRbqPuw5eFpnKNIkRUm4YhhgEtfr9LSNkmZZOrznDr8iUS51kRikwM mN23Tt1pQcBU8wqRBG2KlVDFsbw7/i9u6ZirEVAOpnsSWfaDbrYLgtvd822qpEI8 miJ4Uv+DwlIY5s9INl+Dk4fnfGotfEgfOcH6EDHuOhMH9LSQacl06Msj8Y/2VK3D PagcbybTGYP4CRJJM2lVAMtdxG8ksm3bfO5p7CtwRDqGUhJbBXYWFwlNff+sgGvg gbXx60Fub+CcS6DBHjiRzhRFJT+oP1ouxZYOeaQg+m6TF4Px6WI3U/n3pmPJhDqh +0d3dlj8etwNUj1KSM9DlDYqoj7gUDM= -----END CERTIFICATE-----Generated at Sat Aug 23 22:05:07 2025 by rpki-client