$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d923cf2-4931-35f6-8fec-ca08b72bfa0b.roa File: 1d923cf2-4931-35f6-8fec-ca08b72bfa0b.roa (raw, json) Hash identifier: uc2nG/8nhj492S5UTBEm3f7n1cvMQl9sj+/dck+iVys= Subject key identifier: F9:F3:09:E4:D8:A6:29:EA:E7:9A:58:61:7F:1D:A9:54:B4:22:FB:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF7EBE336ACA3086D461B5DA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d923cf2-4931-35f6-8fec-ca08b72bfa0b.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.108.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e3:36:ac:a3:08:6d:46:1b:5d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=4757b710-6634-4f29-a805-7a92eed813cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:78:4f:c9:e7:68:b3:d8:77:e9:02:84:3e:ba: bb:85:1e:d6:12:c9:59:79:7f:cf:b5:39:01:ec:fa: 3d:08:21:91:84:05:89:c4:9d:56:d1:78:9f:cd:c8: 37:5c:b7:d7:b8:47:4c:f5:e2:7b:14:1a:e2:af:f1: 8f:ef:aa:88:bc:bd:4d:74:65:a5:87:3c:04:4a:34: ba:61:c4:88:96:ba:9c:43:8f:bf:60:7b:6c:65:84: b2:36:80:c0:94:d0:97:cc:3b:42:30:b0:c6:b6:9f: 28:9c:14:79:cf:e3:62:1b:1e:b4:8f:0c:9a:78:4a: 60:cf:d9:9d:bb:48:f2:c4:02:e8:38:14:cd:96:58: 40:04:e7:56:ff:a9:86:50:5f:f7:4d:e1:e5:b4:34: 68:aa:ca:b6:32:83:50:17:5b:41:7e:c7:da:e4:97: 44:04:5a:3e:2e:db:84:4d:50:70:9b:d5:be:34:82: 07:6d:0a:82:6f:74:f1:05:61:45:d2:f8:bd:e4:e7: c5:2f:43:f0:e8:c3:f3:52:0f:1a:52:b3:cc:44:d6: 25:13:88:ef:ea:2b:e8:8e:dd:0b:c2:c1:a7:37:95: ce:fc:c8:21:99:90:2f:76:e8:31:83:29:bc:2e:b6: c7:ff:3a:ad:75:ad:76:cc:45:7d:86:88:7b:ff:47: dd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F3:09:E4:D8:A6:29:EA:E7:9A:58:61:7F:1D:A9:54:B4:22:FB:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1d923cf2-4931-35f6-8fec-ca08b72bfa0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.108.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:60:a3:5a:2e:de:a8:85:8e:3e:e2:0d:f3:08:8a:f9:3d:0e: 97:14:34:bf:76:e7:ac:83:8b:c5:d0:d4:b7:85:da:83:18:12: 90:18:1a:5e:0c:19:d9:32:10:97:b3:be:e2:52:10:78:07:58: 87:64:79:ea:c7:66:ee:58:46:dd:e8:26:06:36:55:1d:39:c8: 90:be:ab:f5:ba:29:92:4a:a3:1a:36:58:b8:ad:c4:c1:d7:92: e9:0b:27:61:48:70:e0:06:df:9b:85:27:6a:e4:e0:6c:45:00: 26:0c:16:4d:8b:6e:8f:bc:64:6d:d5:c6:c3:0c:f6:e4:81:c6: 4f:69:97:24:e0:94:59:ba:33:17:93:db:c9:a4:79:6e:e4:06: 16:41:d9:67:76:e7:d9:0f:50:96:6e:05:0c:c9:83:8e:bb:92: 70:db:3e:7d:5a:18:86:ae:8d:d1:2d:00:be:a1:40:d4:d2:cf: f3:4d:09:da:8f:99:46:a2:a2:27:1c:30:f8:e4:62:86:85:64: cf:7d:48:cd:0c:a7:ef:de:6c:02:8a:fb:95:d6:77:2c:13:8c: ee:1e:29:40:35:7d:32:dd:c9:fa:d8:2a:52:91:34:19:b7:bd: 0a:9f:3f:22:3e:2e:de:a8:db:8f:87:19:7a:f1:d0:25:e2:e4: 9f:23:57:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+M2rKMIbUYbXaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NDc1N2I3MTAtNjYzNC00ZjI5LWE4MDUtN2E5MmVlZDgxM2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nhPyedos9h36QKEPrq7hR7WEslZeX/PtTkB 7Po9CCGRhAWJxJ1W0Xifzcg3XLfXuEdM9eJ7FBrir/GP76qIvL1NdGWlhzwESjS6 YcSIlrqcQ4+/YHtsZYSyNoDAlNCXzDtCMLDGtp8onBR5z+NiGx60jwyaeEpgz9md u0jyxALoOBTNllhABOdW/6mGUF/3TeHltDRoqsq2MoNQF1tBfsfa5JdEBFo+LtuE TVBwm9W+NIIHbQqCb3TxBWFF0vi95OfFL0Pw6MPzUg8aUrPMRNYlE4jv6ivojt0L wsGnN5XO/MghmZAvdugxgym8LrbH/zqtda12zEV9hoh7/0fd+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnzCeTYpinq55pYYX8dqVS0IvtnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWQ5MjNjZjItNDkzMS0z NWY2LThmZWMtY2EwOGI3MmJmYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtgo1ou3qiFjj7iDfMIivk9DpcUNL9256yDi8XQ1LeF2oMYEpAYGl4M GdkyEJezvuJSEHgHWIdkeerHZu5YRt3oJgY2VR05yJC+q/W6KZJKoxo2WLitxMHX kukLJ2FIcOAG35uFJ2rk4GxFACYMFk2Lbo+8ZG3VxsMM9uSBxk9plyTglFm6MxeT 28mkeW7kBhZB2Wd259kPUJZuBQzJg467knDbPn1aGIaujdEtAL6hQNTSz/NNCdqP mUaioiccMPjkYoaFZM99SM0Mp+/ebAKK+5XWdywTjO4eKUA1fTLdyfrYKlKRNBm3 vQqfPyI+Lt6o24+HGXrx0CXi5J8jV84= -----END CERTIFICATE-----Generated at Sat Sep 6 05:22:21 2025 by rpki-client