$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef3243f7-1748-34ab-a69c-80c3771d8037.roa File: ef3243f7-1748-34ab-a69c-80c3771d8037.roa (raw, json) Hash identifier: nE3y4E8u1kRK8nMmp6sSdFyu+1tij6VySwAStNZCNYk= Subject key identifier: F5:02:E7:B2:D2:45:03:65:3C:95:F2:20:52:A2:3D:15:C3:EE:69:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2568E593F046589CF64AF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef3243f7-1748-34ab-a69c-80c3771d8037.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 8551 IP address blocks: 104.79.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:8e:59:3f:04:65:89:cf:64:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=a0c23f68-86fb-48d5-a3ee-f2213e00dd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b8:9d:ce:97:2d:fb:6f:56:34:57:64:33:ad: c6:a1:b2:bb:ae:0b:ff:e7:f8:9e:08:41:3d:6c:31: e4:28:7a:15:7d:2a:49:b2:9a:6d:dc:1b:6b:20:bd: 16:9e:d2:bc:07:f2:68:bc:b2:33:9c:a6:54:a9:f6: 88:7e:64:0d:90:4d:a3:92:e5:0f:5f:a5:64:17:a2: 7b:f2:8a:1c:c4:fc:4d:3d:49:eb:bf:14:ac:26:bd: 60:c5:77:a0:2d:77:dd:d5:25:39:78:09:b7:2e:1f: 79:58:1b:04:c8:a7:b6:c7:1c:47:b4:55:cc:3d:aa: 4e:cf:5e:34:a6:f9:08:dc:8c:c7:58:ea:99:b9:21: 67:32:4f:80:a7:69:a6:a5:65:73:58:a8:79:f4:08: 97:7c:0d:53:fc:d4:51:69:b8:f5:8e:9e:b2:dc:7b: 66:81:9c:d1:32:d7:7a:f0:e9:a5:99:98:ef:12:39: c4:42:16:4d:24:45:39:1b:82:73:66:d9:1a:03:58: ee:5c:4c:b2:9b:89:87:4b:8a:62:78:4c:e1:cc:9e: fa:c9:a2:36:c0:67:99:4e:e7:66:29:e5:60:ae:07: 23:65:86:18:36:58:5c:c7:e5:d0:99:05:68:58:0a: 1d:1b:c2:92:a0:85:e2:87:7f:b7:fb:e6:5b:20:71: b1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:02:E7:B2:D2:45:03:65:3C:95:F2:20:52:A2:3D:15:C3:EE:69:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef3243f7-1748-34ab-a69c-80c3771d8037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.79.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7e:18:55:ab:59:4e:f2:91:7d:c2:ba:6a:dd:47:46:ea:a6: eb:42:16:cd:d7:a4:e6:c1:05:09:02:ab:38:46:52:7c:34:fe: 6f:2e:55:90:4c:a2:42:29:71:10:d4:06:d7:2e:3e:75:44:9f: 8b:dd:00:f3:0b:7a:30:8f:cc:9d:f2:d5:8e:df:1e:69:d7:9a: 1a:27:2a:2e:e7:af:84:94:bd:16:3d:78:2a:93:9d:56:fd:e3: f1:2f:4d:88:40:a0:2b:3f:cd:99:47:b3:fb:2a:c6:fb:c7:f9: be:eb:da:f7:d1:d7:3e:06:c4:f2:52:c9:a8:95:b9:0d:fb:bc: 1a:d9:de:55:a4:05:d3:22:dd:b1:7a:2f:5d:aa:d6:22:90:8c: 5a:f7:48:12:8b:4c:af:5a:91:a8:db:20:c1:e1:5e:0f:8a:03: 0d:fd:de:57:b6:78:6c:c2:a6:0d:1f:45:5b:11:4c:7e:2a:e4: 91:e9:60:e4:01:37:ca:f1:58:69:5a:91:ca:7e:34:05:5b:45: 22:b3:eb:17:6f:89:96:c2:02:01:4a:94:ae:fc:c6:ed:9a:35: e1:66:50:d8:54:99:3f:7a:68:0d:22:68:2b:cf:f8:61:db:d9: ef:df:ea:bd:5e:a5:23:38:cc:db:3f:4b:d5:d3:5d:a1:5b:da: 0e:fd:a0:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVo5ZPwRlic9kr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YTBjMjNmNjgtODZmYi00OGQ1LWEzZWUtZjIyMTNlMDBkZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiridzpct+29WNFdkM63GobK7rgv/5/ieCEE9 bDHkKHoVfSpJsppt3BtrIL0WntK8B/JovLIznKZUqfaIfmQNkE2jkuUPX6VkF6J7 8oocxPxNPUnrvxSsJr1gxXegLXfd1SU5eAm3Lh95WBsEyKe2xxxHtFXMPapOz140 pvkI3IzHWOqZuSFnMk+Ap2mmpWVzWKh59AiXfA1T/NRRabj1jp6y3HtmgZzRMtd6 8OmlmZjvEjnEQhZNJEU5G4JzZtkaA1juXEyym4mHS4pieEzhzJ76yaI2wGeZTudm KeVgrgcjZYYYNlhcx+XQmQVoWAodG8KSoIXih3+3++ZbIHGxfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUC57LSRQNlPJXyIFKiPRXD7mlHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWYzMjQzZjctMTc0OC0z NGFiLWE2OWMtODBjMzc3MWQ4MDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp+GFWrWU7ykX3CumrdR0bqputCFs3XpObBBQkCqzhGUnw0/m8uVZBM okIpcRDUBtcuPnVEn4vdAPMLejCPzJ3y1Y7fHmnXmhonKi7nr4SUvRY9eCqTnVb9 4/EvTYhAoCs/zZlHs/sqxvvH+b7r2vfR1z4GxPJSyaiVuQ37vBrZ3lWkBdMi3bF6 L12q1iKQjFr3SBKLTK9akajbIMHhXg+KAw393le2eGzCpg0fRVsRTH4q5JHpYOQB N8rxWGlakcp+NAVbRSKz6xdviZbCAgFKlK78xu2aNeFmUNhUmT96aA0iaCvP+GHb 2e/f6r1epSM4zNs/S9XTXaFb2g79oBk= -----END CERTIFICATE-----Generated at Sat Aug 23 14:47:52 2025 by rpki-client