$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdc2c7c-a11a-3c6c-be6e-744be296c788.roa File: 3bdc2c7c-a11a-3c6c-be6e-744be296c788.roa (raw, json) Hash identifier: mk32ZbZjPcxXWL/B4OMJM5DqVvncOF1IKMrFqvUmiPE= Subject key identifier: C8:D4:CF:E0:7E:29:E0:32:3B:4C:BF:8A:E6:9B:39:23:5E:02:8D:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216958868CAF257A421A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdc2c7c-a11a-3c6c-be6e-744be296c788.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 34164 IP address blocks: 104.91.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:69:58:86:8c:af:25:7a:42:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=3f36d0e8-bfb7-43bb-9758-0f9ea75f73fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:17:4d:ae:b7:c4:dc:46:59:a1:28:15:45: 43:c0:87:b8:99:5c:3c:40:ab:bf:1a:5b:f8:90:13: 7d:b0:bc:31:26:90:48:b4:e8:63:a7:e5:92:a7:51: d4:06:ff:5b:11:27:31:e2:27:d1:c3:34:77:66:49: 85:d8:cc:eb:5b:49:79:e4:55:3e:b3:7e:b7:77:48: e1:a6:8e:b9:f0:67:ca:af:2f:db:96:9c:60:60:b8: 7e:bb:d2:9f:57:23:88:cc:f5:18:a9:e0:75:11:d5: f2:16:8f:39:41:3a:f4:50:85:f8:6d:47:10:c2:2b: 78:3e:ed:6b:c4:38:69:5f:a0:40:db:62:16:54:b9: 60:cd:20:f6:84:e2:47:57:b7:10:d5:37:f3:a3:ac: b0:7e:0a:57:42:d3:66:b1:07:1b:59:2e:74:c5:42: e4:04:de:88:fe:13:7e:f3:5b:5e:fe:20:b3:a3:ce: 8e:33:31:77:aa:f6:8f:83:e1:80:94:c2:be:c7:eb: 30:30:55:cf:ab:1e:1a:2d:b1:79:ac:09:da:6d:a5: aa:e1:05:fa:c9:fd:7d:9c:cd:64:8a:62:62:27:4e: 14:94:17:08:1c:3b:00:6d:e5:30:1b:aa:4c:5e:75: 4b:ba:ba:2f:ab:50:23:0d:21:35:d0:5d:37:e6:28: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:D4:CF:E0:7E:29:E0:32:3B:4C:BF:8A:E6:9B:39:23:5E:02:8D:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bdc2c7c-a11a-3c6c-be6e-744be296c788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.91.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f5:5c:47:d5:e7:8d:21:a9:88:37:1d:79:97:f2:55:c9:9a: 2a:2a:ff:43:59:e0:ef:38:48:63:dc:10:b4:ac:2e:99:ac:fb: 5b:02:f8:ff:18:44:f1:06:fd:c6:3f:54:dc:8a:6f:0c:5d:e2: cf:76:80:d1:92:97:54:1e:d6:2a:f4:24:c6:67:1e:79:50:9e: 66:2a:fc:72:33:1c:bd:6f:18:4e:07:ba:be:24:ee:34:d5:d3: 28:bd:26:5c:67:49:59:e0:0f:8d:98:56:66:6f:b8:b0:91:e9: b8:47:eb:5a:59:ee:68:e5:0c:14:7e:e7:c8:c6:0d:a3:5d:e2: 76:5d:c5:d8:06:5b:ba:df:84:2a:2e:bf:6c:8b:02:89:28:e4: a2:f4:35:ce:89:de:61:76:e1:35:c5:6c:52:75:c1:e1:75:27: a4:56:83:09:cf:0a:a3:09:21:70:23:b1:2c:3d:b2:f6:b2:8f: ec:05:37:53:97:0c:e3:73:97:fe:a4:2a:68:91:11:a0:da:1c: 78:58:83:1f:13:c8:83:de:d9:d6:0c:24:31:15:4c:26:19:d6: 36:9d:8c:03:a5:72:1a:fe:e3:54:e9:a9:54:96:86:96:2c:09: d7:3a:fa:8b:a5:5a:04:ea:83:0e:a3:ed:82:d9:91:cf:62:dd: 00:a0:34:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWlYhoyvJXpCGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk M2YzNmQwZTgtYmZiNy00M2JiLTk3NTgtMGY5ZWE3NWY3M2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRIXTa63xNxGWaEoFUVDwIe4mVw8QKu/Glv4 kBN9sLwxJpBItOhjp+WSp1HUBv9bEScx4ifRwzR3ZkmF2MzrW0l55FU+s363d0jh po658GfKry/blpxgYLh+u9KfVyOIzPUYqeB1EdXyFo85QTr0UIX4bUcQwit4Pu1r xDhpX6BA22IWVLlgzSD2hOJHV7cQ1Tfzo6ywfgpXQtNmsQcbWS50xULkBN6I/hN+ 81te/iCzo86OMzF3qvaPg+GAlMK+x+swMFXPqx4aLbF5rAnabaWq4QX6yf19nM1k imJiJ04UlBcIHDsAbeUwG6pMXnVLurovq1AjDSE10F035ijNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjUz+B+KeAyO0y/iuabOSNeAo0iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2JkYzJjN2MtYTExYS0z YzZjLWJlNmUtNzQ0YmUyOTZjNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX1XEfV540hqYg3HXmX8lXJmioq/0NZ4O84SGPcELSsLpms+1sC+P8Y RPEG/cY/VNyKbwxd4s92gNGSl1Qe1ir0JMZnHnlQnmYq/HIzHL1vGE4Hur4k7jTV 0yi9JlxnSVngD42YVmZvuLCR6bhH61pZ7mjlDBR+58jGDaNd4nZdxdgGW7rfhCou v2yLAoko5KL0Nc6J3mF24TXFbFJ1weF1J6RWgwnPCqMJIXAjsSw9svayj+wFN1OX DONzl/6kKmiREaDaHHhYgx8TyIPe2dYMJDEVTCYZ1jadjAOlchr+41TpqVSWhpYs Cdc6+oulWgTqgw6j7YLZkc9i3QCgNAo= -----END CERTIFICATE-----Generated at Sat Sep 6 05:05:24 2025 by rpki-client