$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa File: 77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa (raw, json) Hash identifier: k8L5A0as6ZkW7NhFQYyxSAappi9gyIFsBeyvXm6YSJU= Subject key identifier: C2:A8:77:70:CA:96:49:DA:53:45:B6:8E:30:6C:EE:42:D3:F8:61:7A Certificate issuer: /CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Certificate serial: 010D0C9F4328584B296956E537DE6CB000522280 Authority key identifier: 97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 22423 IP address blocks: 104.192.208.0/21 maxlen: 21 108.175.128.0/20 maxlen: 20 199.189.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:69:56:e5:37:de:6c:b0:00:52:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abf1f0ec-0f56-4356-9ce5-9c637405f386 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=31cc01e7-70a9-4617-b8a4-86f2ff6bfb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0a:40:38:9d:86:16:c6:da:ed:b1:b9:6b:5c: 82:e0:60:a5:a2:c2:0d:05:2c:0b:97:25:69:56:4c: a9:2d:a1:66:3d:82:0f:2c:cc:a2:3d:9b:cb:b0:a4: 02:59:f9:ee:c4:cf:d2:6d:53:54:34:bd:2e:c5:f0: f6:25:1d:70:54:28:0b:79:3e:b7:88:26:ab:f9:45: ae:76:c7:f2:87:04:6c:66:6c:ba:c5:77:17:72:1d: 37:d0:cc:7b:2b:e8:4b:ef:64:7b:97:49:7d:b6:ed: e7:83:c3:2a:fa:6a:2e:4d:48:16:a0:77:ad:50:8e: 07:63:20:46:f8:f4:fc:a3:65:70:9d:66:8c:d5:5d: 00:59:fe:71:b6:cb:5e:bf:38:75:9a:ab:c0:a6:be: 28:55:4f:e0:a4:3f:69:bc:dd:56:3a:33:dc:27:40: 01:80:34:92:0d:39:54:16:55:d5:5e:34:17:51:cd: 14:81:ee:d3:89:ed:05:69:b9:31:49:fb:3a:89:7f: e0:aa:51:e9:af:ea:12:44:36:4d:67:70:f6:8c:ec: 59:d4:06:46:96:c9:8c:d6:43:f5:f1:5d:c7:b7:e8: 10:7b:97:7a:eb:a0:d5:3a:62:f0:b7:92:8a:a6:7f: 95:57:c9:1d:5a:d9:3f:93:1b:a9:52:af:f2:02:17: a0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:77:70:CA:96:49:DA:53:45:B6:8E:30:6C:EE:42:D3:F8:61:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/77c0857d-3bfa-32b1-b717-3067e6a61ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386/abf1f0ec-0f56-4356-9ce5-9c637405f386.crl X509v3 Authority Key Identifier: keyid:97:4B:C9:47:24:F4:DD:06:50:DF:1D:2A:91:89:75:26:29:90:DA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/abf1f0ec-0f56-4356-9ce5-9c637405f386.cer sbgp-ipAddrBlock: critical IPv4: 104.192.208.0/21 108.175.128.0/20 199.189.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:7d:a6:44:38:ae:d0:32:4c:04:6b:a5:b7:54:83:8e:24:e4: 93:fb:8c:d1:36:c6:23:60:77:53:5e:cd:25:2b:d5:69:98:9c: 27:f4:f0:e5:80:70:df:9e:70:ff:32:83:98:7e:31:0a:72:a2: 2e:a8:f8:0a:27:c6:f9:dd:e8:fa:68:34:16:97:6d:8f:cf:9b: 13:50:50:00:c7:42:86:94:46:e9:a6:01:79:93:02:37:26:98: 1e:a6:d4:cc:fc:4b:4e:22:66:69:4e:79:37:41:ea:a7:cb:77: 63:cb:ca:72:91:fb:e8:df:f7:0d:e5:ec:11:08:40:fd:b6:60: 0e:78:94:02:e4:8e:f0:87:7e:a4:59:af:f4:f9:b2:84:eb:74: 23:ad:fe:a7:aa:a2:66:d4:53:66:a0:0b:92:5a:37:2e:4e:e2: 91:f9:3b:66:c9:61:6f:73:9c:00:67:a5:26:45:f4:37:e1:c4: 93:08:72:72:b0:53:98:60:15:9a:a6:4a:02:a7:1b:59:e2:15: e1:53:de:69:ce:f6:91:69:16:f3:90:65:cb:c9:e0:91:c1:26: 73:21:9c:47:7b:17:4a:81:b1:8c:c5:37:13:94:1a:66:fb:a3: 50:42:5d:a3:da:fd:81:32:23:5b:c4:69:ed:f2:2b:4f:74:b8: d6:be:9c:e4 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEspaVblN95ssABSIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJmMWYwZWMtMGY1Ni00MzU2LTljZTUtOWM2Mzc0MDVm Mzg2MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MzFjYzAxZTctNzBhOS00NjE3LWI4YTQtODZmMmZmNmJmYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQpAOJ2GFsba7bG5a1yC4GClosINBSwLlyVp VkypLaFmPYIPLMyiPZvLsKQCWfnuxM/SbVNUNL0uxfD2JR1wVCgLeT63iCar+UWu dsfyhwRsZmy6xXcXch030Mx7K+hL72R7l0l9tu3ng8Mq+mouTUgWoHetUI4HYyBG +PT8o2VwnWaM1V0AWf5xtstevzh1mqvApr4oVU/gpD9pvN1WOjPcJ0ABgDSSDTlU FlXVXjQXUc0Uge7Tie0FabkxSfs6iX/gqlHpr+oSRDZNZ3D2jOxZ1AZGlsmM1kP1 8V3Ht+gQe5d666DVOmLwt5KKpn+VV8kdWtk/kxupUq/yAhegtQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFMKod3DKlknaU0W2jjBs7kLT+GF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYx ZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYzNzQwNWYzODYvNzdjMDg1N2QtM2JmYS0z MmIxLWI3MTctMzA2N2U2YTYxZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWJmMWYwZWMtMGY1Ni00MzU2LTlj ZTUtOWM2Mzc0MDVmMzg2L2FiZjFmMGVjLTBmNTYtNDM1Ni05Y2U1LTljNjM3NDA1 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUl0vJRyT03QZQ3x0qkYl1JimQ2r4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYmYxZjBlYy0wZjU2LTQzNTYtOWNlNS05YzYz NzQwNWYzODYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDaMDQAwQE bK+AAwQBx72kMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEx9pkQ4rtAyTARrpbdUg44k5JP7jNE2xiNgd1Ne zSUr1WmYnCf08OWAcN+ecP8yg5h+MQpyoi6o+Aonxvnd6PpoNBaXbY/PmxNQUADH QoaURummAXmTAjcmmB6m1Mz8S04iZmlOeTdB6qfLd2PLynKR++jf9w3l7BEIQP22 YA54lALkjvCHfqRZr/T5soTrdCOt/qeqombUU2agC5JaNy5O4pH5O2bJYW9znABn pSZF9DfhxJMIcnKwU5hgFZqmSgKnG1niFeFT3mnO9pFpFvOQZcvJ4JHBJnMhnEd7 F0qBsYzFNxOUGmb7o1BCXaPa/YEyI1vEae3yK090uNa+nOQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:07:33 2025 by rpki-client