$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa File: 4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa (raw, json) Hash identifier: qO6f0dOVpDdF8DX100rHkXbQ67OPZDiWCTsxjSOUTw8= Subject key identifier: A5:DE:BA:7A:72:5A:55:5F:3E:99:2B:55:B5:EF:EC:B2:04:C5:06:85 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF7EBE38885A6209AEC8223D8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.109.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e3:88:85:a6:20:9a:ec:82:23:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=b80aa46d-9450-49f7-bf33-9576ef9b03c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:2d:79:84:04:17:a7:30:72:22:fc:66:19: 93:61:f7:2f:f1:d8:2a:d0:35:88:2d:1c:27:17:ec: a1:27:8e:b8:5a:f8:06:84:68:a1:99:59:f0:db:24: 4c:ac:a9:39:c3:8c:00:85:42:f2:4d:92:86:37:86: 32:41:86:e6:2b:c8:17:69:d6:dc:17:1a:f0:fb:8d: b6:d8:20:a0:50:d5:bb:39:d2:f3:c0:15:ce:b7:43: db:b7:87:11:11:bb:17:c2:b5:ae:f4:a0:9d:df:7e: b6:ce:f4:e7:a6:b4:26:e1:b6:bd:94:2d:ef:bb:5a: c3:51:10:3e:95:2b:90:09:4c:cd:d0:24:f2:9d:61: 59:8a:1c:ad:c6:8f:b2:6d:af:87:5c:60:78:21:ea: 13:51:41:7b:a6:24:fe:5d:80:a9:3e:fd:ba:68:f1: 13:62:e6:ae:24:a4:7f:0f:3e:e4:db:04:99:fb:2c: 1d:88:90:c9:93:65:3b:bf:9f:43:55:92:bb:8b:d5: ea:f9:49:fa:04:0a:98:18:5d:b4:20:dd:b5:3c:85: a6:5b:b2:e2:31:f8:cd:62:a7:00:73:21:74:28:e0: 96:5a:09:0c:eb:2a:dd:25:0e:91:df:2c:19:c2:73: 36:cf:78:01:1d:17:01:b9:36:99:1d:6b:2b:99:51: e5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:BA:7A:72:5A:55:5F:3E:99:2B:55:B5:EF:EC:B2:04:C5:06:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2071bf-73c4-3482-af04-cc6dcbd38cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.109.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:52:4b:5b:76:e2:62:25:db:43:86:a6:6d:db:03:d2:9b:57: 7e:ba:c4:d5:bf:3d:1e:43:3f:93:d5:f0:ed:23:2c:ed:53:8a: 46:0f:f2:2c:65:9b:d0:dc:64:5f:55:5e:3e:d6:81:71:2e:cd: 3a:f7:33:87:c0:0a:89:4f:bf:67:1e:30:bb:58:1e:65:df:ed: b4:40:d2:e1:9c:8c:c8:b3:48:ee:59:a4:03:46:72:f2:18:36: bb:1b:60:37:65:45:90:15:08:0d:8f:7b:54:95:c4:c0:c2:52: bd:75:98:92:07:62:a3:69:e6:34:f9:3c:52:4a:a1:19:9f:53: dd:17:07:8a:9c:5b:c8:57:e0:ef:5c:46:80:c6:0a:54:e2:71: c6:42:39:90:b2:28:bd:a6:78:5f:50:3c:4a:19:c4:7d:7b:c7: ab:e2:84:d7:1e:db:cc:42:88:33:f0:97:71:3c:d4:a3:fe:f5: cf:9c:b8:74:7e:91:07:8e:42:5a:0c:ff:c2:58:d3:08:c9:26: 41:5f:13:61:b0:72:f7:ec:70:fb:8f:86:04:ea:21:45:00:9e: 26:80:7c:d9:f4:21:b4:05:66:83:34:0d:83:06:6c:8b:2d:b9: 41:3d:9c:c7:5e:de:cc:74:76:8a:08:1a:76:35:5d:90:01:0f: fc:10:f9:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+OIhaYgmuyCI9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk YjgwYWE0NmQtOTQ1MC00OWY3LWJmMzMtOTU3NmVmOWIwM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7AteYQEF6cwciL8ZhmTYfcv8dgq0DWILRwn F+yhJ464WvgGhGihmVnw2yRMrKk5w4wAhULyTZKGN4YyQYbmK8gXadbcFxrw+422 2CCgUNW7OdLzwBXOt0Pbt4cREbsXwrWu9KCd3362zvTnprQm4ba9lC3vu1rDURA+ lSuQCUzN0CTynWFZihytxo+yba+HXGB4IeoTUUF7piT+XYCpPv26aPETYuauJKR/ Dz7k2wSZ+ywdiJDJk2U7v59DVZK7i9Xq+Un6BAqYGF20IN21PIWmW7LiMfjNYqcA cyF0KOCWWgkM6yrdJQ6R3ywZwnM2z3gBHRcBuTaZHWsrmVHl5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXeunpyWlVfPpkrVbXv7LIExQaFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGEyMDcxYmYtNzNjNC0z NDgyLWFmMDQtY2M2ZGNiZDM4Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaG01MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJSS1t24mIl20OGpm3bA9KbV366xNW/PR5DP5PV8O0jLO1TikYP8ixl m9DcZF9VXj7WgXEuzTr3M4fAColPv2ceMLtYHmXf7bRA0uGcjMizSO5ZpANGcvIY NrsbYDdlRZAVCA2Pe1SVxMDCUr11mJIHYqNp5jT5PFJKoRmfU90XB4qcW8hX4O9c RoDGClTiccZCOZCyKL2meF9QPEoZxH17x6vihNce28xCiDPwl3E81KP+9c+cuHR+ kQeOQloM/8JY0wjJJkFfE2GwcvfscPuPhgTqIUUAniaAfNn0IbQFZoM0DYMGbIst uUE9nMde3sx0dooIGnY1XZABD/wQ+WQ= -----END CERTIFICATE-----Generated at Sat Sep 6 05:09:45 2025 by rpki-client