$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3394475-b2d6-3d41-abc2-fe48cdaaa91c.roa File: f3394475-b2d6-3d41-abc2-fe48cdaaa91c.roa (raw, json) Hash identifier: QAY+lUdM1Ux8snuCmLJNmxpVMiyV3jVH2b/u6d4fjwE= Subject key identifier: 46:A0:B4:77:AF:63:36:22:43:19:C2:D0:C8:8C:C4:16:7A:D1:80:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569D9156CC183E5571D100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3394475-b2d6-3d41-abc2-fe48cdaaa91c.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.76.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9d:91:56:cc:18:3e:55:71:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=ae36b31a-6387-4a80-be85-a4fbc83a5ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:67:52:86:34:22:86:b2:26:b2:8b:43:dd:59: f2:dd:85:1b:82:22:cb:29:59:58:91:72:c8:33:99: b3:2e:9e:46:b8:39:81:ee:5c:f7:08:14:c2:0f:76: 41:7d:b6:e3:ed:9d:ba:5e:04:0a:58:61:09:ea:bc: 65:f6:62:d8:c6:62:6a:d0:ba:31:3c:d3:77:0a:c3: 79:d7:13:64:07:35:32:c1:f5:0a:8f:a6:ea:f6:2a: bf:a6:d5:2e:74:ec:fa:41:7a:b3:bb:d8:0d:df:aa: a1:05:fa:6c:81:41:b4:d6:24:ee:bb:7d:f4:30:41: e6:0d:b3:a0:40:24:20:b5:dc:26:2e:98:98:50:4b: a0:c7:21:83:6c:c2:ea:16:41:2e:3e:7e:bb:f1:4e: 44:0b:48:72:67:50:85:89:fd:3b:a3:f6:45:ca:ff: f0:6f:36:5e:1d:be:48:b2:29:87:00:37:52:7f:70: aa:de:9f:99:46:69:7d:8c:ca:1d:ad:d9:3c:2d:36: 66:2e:67:3d:b7:5a:ad:4d:c4:f2:21:33:f3:b2:35: fb:b8:5a:44:cf:56:f8:93:47:82:f5:21:15:6e:52: ca:b7:ad:fe:5f:f4:67:2a:7a:26:ea:28:1e:8f:ec: b1:58:b0:05:1f:37:32:58:d6:68:fe:2a:24:f9:b7: 08:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:A0:B4:77:AF:63:36:22:43:19:C2:D0:C8:8C:C4:16:7A:D1:80:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f3394475-b2d6-3d41-abc2-fe48cdaaa91c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:06:63:dd:07:f4:f6:07:cc:af:42:b5:94:e5:79:56:1b:95: b8:3e:5f:3b:d7:ce:b0:2b:a8:cc:7c:cc:35:21:c5:f2:19:f7: 0b:04:7e:75:50:d8:16:eb:46:d8:85:c7:48:43:5b:5d:8f:d8: b2:12:ba:bc:1e:5b:2d:5e:bd:b8:07:49:ed:64:34:69:31:0a: be:98:34:42:27:40:e8:70:b3:37:e1:95:88:93:be:03:52:d2: 52:ef:f0:e5:68:90:83:40:17:15:e6:e3:ac:76:a3:da:4a:f2: 80:f0:6c:ae:68:5e:c2:8f:3b:75:52:0f:0a:a6:b2:89:8d:fb: 92:bb:5a:18:3a:6f:70:56:13:e0:6a:75:73:dc:3b:11:44:65: 87:24:bf:cc:69:78:4a:b7:bc:0c:00:09:25:d3:03:8f:39:b5: 6f:4e:72:46:0a:96:2b:90:83:c8:f3:76:22:05:c3:e3:86:3b: 3a:4f:64:a4:e8:44:10:0d:e2:e6:09:a0:d9:2c:f3:00:f3:ec: 19:a6:4b:7e:4c:b7:b0:4a:54:1b:ac:c9:fe:30:ce:06:3b:be: 15:8e:52:ae:52:7b:8e:04:ee:8a:05:ce:06:d7:b1:c4:7b:69: 6f:90:64:34:5c:3f:61:1c:41:d4:cc:ba:cf:e0:c7:ec:56:80: 54:cd:5c:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp2RVswYPlVx0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YWUzNmIzMWEtNjM4Ny00YTgwLWJlODUtYTRmYmM4M2E1ZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGdShjQihrImsotD3Vny3YUbgiLLKVlYkXLI M5mzLp5GuDmB7lz3CBTCD3ZBfbbj7Z26XgQKWGEJ6rxl9mLYxmJq0LoxPNN3CsN5 1xNkBzUywfUKj6bq9iq/ptUudOz6QXqzu9gN36qhBfpsgUG01iTuu330MEHmDbOg QCQgtdwmLpiYUEugxyGDbMLqFkEuPn678U5EC0hyZ1CFif07o/ZFyv/wbzZeHb5I simHADdSf3Cq3p+ZRml9jModrdk8LTZmLmc9t1qtTcTyITPzsjX7uFpEz1b4k0eC 9SEVblLKt63+X/RnKnom6igej+yxWLAFHzcyWNZo/iok+bcIOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEagtHevYzYiQxnC0MiMxBZ60YDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjMzOTQ0NzUtYjJkNi0z ZDQxLWFiYzItZmU0OGNkYWFhOTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0GY90H9PYHzK9CtZTleVYblbg+XzvXzrArqMx8zDUhxfIZ9wsEfnVQ 2BbrRtiFx0hDW12P2LISurweWy1evbgHSe1kNGkxCr6YNEInQOhwszfhlYiTvgNS 0lLv8OVokINAFxXm46x2o9pK8oDwbK5oXsKPO3VSDwqmsomN+5K7Whg6b3BWE+Bq dXPcOxFEZYckv8xpeEq3vAwACSXTA485tW9OckYKliuQg8jzdiIFw+OGOzpPZKTo RBAN4uYJoNks8wDz7BmmS35Mt7BKVBusyf4wzgY7vhWOUq5Se44E7ooFzgbXscR7 aW+QZDRcP2EcQdTMus/gx+xWgFTNXP0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:56:17 2025 by rpki-client