$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecfd1951-e01a-30de-bf22-e1d774146963.roa File: ecfd1951-e01a-30de-bf22-e1d774146963.roa (raw, json) Hash identifier: a1Beom6hJX4KJZFgbO1BmD9PC5oF2xTRBj/Uk3pncSw= Subject key identifier: B6:1D:FB:FA:98:34:6C:E1:E2:4A:13:87:7F:BD:98:27:28:C9:EC:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569CDF838F23431416AA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecfd1951-e01a-30de-bf22-e1d774146963.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.75.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9c:df:83:8f:23:43:14:16:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=af7522bf-d97c-4951-8a36-2903d7c6ec53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7e:6c:dc:a9:84:1a:8e:d9:6a:dc:93:ea:cb: 10:4d:f5:72:22:42:51:16:8c:e8:12:71:f4:f7:86: f7:50:fa:bb:61:ec:43:87:33:1b:20:0b:e8:7b:7c: 52:64:51:df:9d:33:51:a9:56:c8:8b:cb:2d:e1:62: 8b:ea:bf:13:76:6c:8a:f9:03:97:a7:22:51:bb:fe: 61:59:ac:33:06:c6:9a:8a:97:06:db:49:2b:cb:c4: 54:8e:e5:8f:e5:bf:39:1f:08:a5:cd:b9:09:0e:9b: a3:50:2f:6b:3c:c5:79:9e:cc:80:11:b3:b3:4e:3f: af:b2:08:21:ff:1e:45:dd:0d:52:26:cf:ad:d2:39: f8:7a:c9:97:54:3c:3b:b9:7a:14:d2:ec:5a:e9:ed: c2:9d:79:19:34:be:77:33:82:d1:7e:2c:fd:a5:a7: 65:08:51:4e:43:07:1c:36:be:f5:f2:c6:94:64:21: 78:1e:4e:7f:bb:3f:20:38:9b:e6:ef:5c:96:4e:eb: 90:b1:00:64:af:cc:9b:80:67:42:ba:42:8d:5c:8c: b8:4c:d5:f9:0d:45:42:67:bc:1e:69:3f:16:d6:40: ec:7c:09:0c:ef:8f:7f:49:f6:91:fd:71:c0:c5:61: 64:0f:9e:7b:4d:bb:a1:e3:3a:26:9f:c6:f4:3f:9a: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:FB:FA:98:34:6C:E1:E2:4A:13:87:7F:BD:98:27:28:C9:EC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ecfd1951-e01a-30de-bf22-e1d774146963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.75.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e9:a0:94:ee:d6:e3:7b:25:b8:77:d7:d3:30:07:15:d3:e8: 77:69:3c:ae:7e:f8:0b:57:54:59:8e:bd:43:10:f9:56:da:31: 95:e6:6a:e5:c1:4d:7d:99:93:2c:4f:62:7d:81:01:6d:ad:33: 28:56:76:be:04:e7:25:42:9c:27:4f:a7:ba:bf:5f:e9:8c:ca: 25:6f:ba:d6:16:dc:6a:c0:a4:50:7f:dc:40:30:61:19:8e:fa: 40:de:f9:1c:a0:f5:2b:03:6e:16:df:e6:3c:57:76:9b:20:14: 0a:ab:27:64:18:cf:2c:9e:31:cb:29:1e:ba:fc:6b:09:f4:8c: 0d:b3:9b:a4:f1:9b:ab:c9:6f:92:db:8a:85:a9:35:a9:21:3f: 53:ca:d1:4c:e6:54:7f:66:68:60:6c:39:af:df:ea:2e:35:92: d6:3a:1b:93:77:fd:85:55:06:e6:45:44:2c:47:55:16:48:9b: 36:7b:37:74:1b:c9:25:00:88:96:9d:5c:8d:96:52:17:b4:2d: 51:c9:ba:1f:2e:4c:00:72:03:28:d6:8b:c3:97:bd:1f:24:8d: 8e:83:47:b9:2e:89:25:76:57:53:f3:f7:e5:52:28:1e:d2:1f: 9c:1d:1e:b9:4e:c7:9c:34:f1:e5:e0:d6:8a:49:89:8d:93:31: b0:ec:8b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpzfg48jQxQWqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWY3NTIyYmYtZDk3Yy00OTUxLThhMzYtMjkwM2Q3YzZlYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH5s3KmEGo7ZatyT6ssQTfVyIkJRFozoEnH0 94b3UPq7YexDhzMbIAvoe3xSZFHfnTNRqVbIi8st4WKL6r8TdmyK+QOXpyJRu/5h WawzBsaaipcG20kry8RUjuWP5b85HwilzbkJDpujUC9rPMV5nsyAEbOzTj+vsggh /x5F3Q1SJs+t0jn4esmXVDw7uXoU0uxa6e3CnXkZNL53M4LRfiz9padlCFFOQwcc Nr718saUZCF4Hk5/uz8gOJvm71yWTuuQsQBkr8ybgGdCukKNXIy4TNX5DUVCZ7we aT8W1kDsfAkM749/SfaR/XHAxWFkD557Tbuh4zomn8b0P5o5fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYd+/qYNGzh4koTh3+9mCcoyeyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWNmZDE5NTEtZTAxYS0z MGRlLWJmMjItZTFkNzc0MTQ2OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEujMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrpoJTu1uN7Jbh319MwBxXT6HdpPK5++AtXVFmOvUMQ+VbaMZXmauXB TX2ZkyxPYn2BAW2tMyhWdr4E5yVCnCdPp7q/X+mMyiVvutYW3GrApFB/3EAwYRmO +kDe+Ryg9SsDbhbf5jxXdpsgFAqrJ2QYzyyeMcspHrr8awn0jA2zm6Txm6vJb5Lb ioWpNakhP1PK0UzmVH9maGBsOa/f6i41ktY6G5N3/YVVBuZFRCxHVRZImzZ7N3Qb ySUAiJadXI2WUhe0LVHJuh8uTAByAyjWi8OXvR8kjY6DR7kuiSV2V1Pz9+VSKB7S H5wdHrlOx5w08eXg1opJiY2TMbDsixM= -----END CERTIFICATE-----Generated at Sat Aug 23 13:08:50 2025 by rpki-client