$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/226103e7-2eac-3a95-bbad-f3ceda7db977.roa File: 226103e7-2eac-3a95-bbad-f3ceda7db977.roa (raw, json) Hash identifier: ovcisz1GxTiXy96ANyvGS1nn/ch4y/CX2rwFyfevkGY= Subject key identifier: 45:57:81:48:66:13:1F:34:40:E9:2E:48:9A:72:A6:ED:A6:8F:EF:D5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9514B9BDABB0E17BE165380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/226103e7-2eac-3a95-bbad-f3ceda7db977.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.116.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4b:9b:da:bb:0e:17:be:16:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=f4250bde-b989-42de-9050-6d4ab5981c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:79:a6:06:5c:1f:d5:a5:c6:0d:47:bc:2a: d2:42:bd:e3:96:e5:36:17:80:8f:20:1c:f5:2c:78: 80:27:75:9a:41:72:78:64:2e:9b:1e:b3:b5:0f:8c: b8:7f:53:37:0c:a7:00:f2:2b:50:c6:50:c0:84:bc: b6:f8:47:d2:cf:cd:b7:c6:82:0b:af:8b:d7:29:0a: d1:6b:a8:fd:34:48:95:34:da:6c:fe:9d:58:66:e8: a8:6c:85:b4:36:43:f8:2f:2b:39:ef:76:29:3d:d4: eb:26:7c:57:64:21:75:55:f7:ed:be:c9:84:3f:cb: eb:1b:70:c3:9e:f2:78:95:c5:68:4e:c4:29:0a:9f: 10:7d:e0:4f:83:7b:28:24:18:7e:3a:1c:bc:d6:34: b6:a5:61:2c:e5:06:a9:f7:59:72:20:41:52:59:b1: d3:72:6c:21:0e:c9:e2:a5:96:ae:75:84:b0:20:44: fe:84:35:39:62:62:a9:bd:c6:59:e0:ee:9e:4c:dc: 18:d9:d8:48:68:ec:77:9f:8c:10:9f:11:80:69:2c: 6f:ad:53:85:00:24:f4:b7:67:8b:6c:ef:07:95:aa: 37:b3:42:e2:75:bd:2e:89:5f:5e:4e:fc:ec:bb:11: ed:b7:53:10:5c:39:a2:c7:87:07:85:a3:69:90:bc: 9b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:57:81:48:66:13:1F:34:40:E9:2E:48:9A:72:A6:ED:A6:8F:EF:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/226103e7-2eac-3a95-bbad-f3ceda7db977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.116.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:b9:b2:3c:1d:1d:03:68:6b:57:70:f9:b6:45:19:ed:fd:7a: 86:58:d4:ce:7f:d1:0b:82:fa:8b:7e:37:05:17:9a:10:36:9c: 62:b6:4c:22:16:ad:83:6b:3c:58:0f:0a:25:c9:49:f2:a1:de: 9d:2a:5e:11:3a:60:3d:30:69:55:1f:48:b4:88:69:13:7f:ee: 95:38:9c:9d:e8:8e:ee:95:7f:af:f2:a6:62:2e:b2:a5:2d:bc: 89:02:70:4f:a9:91:c2:0d:d8:9f:11:8d:bd:55:57:49:a9:73: be:4b:ce:8e:20:07:5f:09:67:93:84:7f:14:57:5b:fb:f0:31: 5b:3c:61:a6:4b:67:f4:83:76:ff:57:1f:6c:81:38:69:7c:a9: db:b9:b1:fa:3d:5a:58:d5:50:b4:48:b1:ec:2c:40:8a:49:01: 38:17:09:d9:37:62:e0:37:5d:68:39:a9:ba:01:08:dc:6a:23: 47:86:ef:c8:b1:37:0d:65:1c:09:8b:4d:20:55:b8:24:da:bd: 2b:a5:78:0a:64:bd:37:53:1e:c5:8c:ff:d2:3a:1d:fa:04:6d: a1:68:bb:b3:df:34:a8:f4:36:bf:f5:78:0d:ac:74:18:c3:62: 8e:e1:c0:af:fe:dc:29:f5:5d:b0:45:a1:c0:07:37:76:64:fe: cf:78:a4:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUub2rsOF74WU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjQyNTBiZGUtYjk4OS00MmRlLTkwNTAtNmQ0YWI1OTgxYzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDZ5pgZcH9Wlxg1HvCrSQr3jluU2F4CPIBz1 LHiAJ3WaQXJ4ZC6bHrO1D4y4f1M3DKcA8itQxlDAhLy2+EfSz823xoILr4vXKQrR a6j9NEiVNNps/p1YZuiobIW0NkP4Lys573YpPdTrJnxXZCF1VfftvsmEP8vrG3DD nvJ4lcVoTsQpCp8QfeBPg3soJBh+Ohy81jS2pWEs5Qap91lyIEFSWbHTcmwhDsni pZaudYSwIET+hDU5YmKpvcZZ4O6eTNwY2dhIaOx3n4wQnxGAaSxvrVOFACT0t2eL bO8Hlao3s0Lidb0uiV9eTvzsuxHtt1MQXDmix4cHhaNpkLybeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVXgUhmEx80QOkuSJpypu2mj+/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjI2MTAzZTctMmVhYy0z YTk1LWJiYWQtZjNjZWRhN2RiOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABG5sjwdHQNoa1dw+bZFGe39eoZY1M5/0QuC+ot+NwUXmhA2nGK2TCIW rYNrPFgPCiXJSfKh3p0qXhE6YD0waVUfSLSIaRN/7pU4nJ3oju6Vf6/ypmIusqUt vIkCcE+pkcIN2J8Rjb1VV0mpc75Lzo4gB18JZ5OEfxRXW/vwMVs8YaZLZ/SDdv9X H2yBOGl8qdu5sfo9WljVULRIsewsQIpJATgXCdk3YuA3XWg5qboBCNxqI0eG78ix Nw1lHAmLTSBVuCTavSuleApkvTdTHsWM/9I6HfoEbaFou7PfNKj0Nr/1eA2sdBjD Yo7hwK/+3Cn1XbBFocAHN3Zk/s94pAg= -----END CERTIFICATE-----Generated at Sat Sep 6 05:13:53 2025 by rpki-client