$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/673affd0-aaf8-380d-b72b-e659be8cc540.roa File: 673affd0-aaf8-380d-b72b-e659be8cc540.roa (raw, json) Hash identifier: K1mxaeEz9r9ZJenCIAQJFbaiOW4PcLHI4X/f13bDpO8= Subject key identifier: E0:AD:10:0D:F5:3C:D2:99:37:B1:70:C4:62:96:2F:6E:9E:67:8B:51 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF7EBE2DFF4B07F6E82AAD340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/673affd0-aaf8-380d-b72b-e659be8cc540.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.107.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e2:df:f4:b0:7f:6e:82:aa:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=39f1d771-f715-47c4-90e6-a3cc89eb2b35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ef:a3:a7:50:40:b4:bd:8b:17:11:df:e8:49: 09:f7:52:b6:d2:81:15:1f:69:32:11:27:34:aa:c0: 93:d6:c4:f0:c0:58:8b:7a:4d:cb:a9:62:76:a0:44: 82:28:2a:cc:ed:ac:40:b8:15:c4:0f:21:2c:23:ff: 52:00:00:3a:73:01:56:c7:f2:d1:01:53:ef:ac:0b: c2:c5:0d:1d:18:29:7e:25:03:66:2d:75:c7:4b:36: ed:1c:6f:96:a6:c2:fe:a3:27:7f:49:37:e7:54:55: 62:a8:1a:73:82:15:21:e0:2c:32:01:75:7f:25:67: bd:a8:a0:2a:a6:0b:ed:c6:9c:ac:99:9a:eb:3d:04: 7e:c7:42:31:f6:26:70:18:dd:a9:0b:17:f9:53:ad: 4a:9e:c7:ba:87:b5:9a:47:ab:21:9e:34:b1:26:59: 72:e9:e0:fe:ac:58:d7:bc:8e:22:a8:f7:9d:06:40: d4:e9:d1:59:67:05:c3:02:c0:0e:b4:11:60:28:82: 9b:ea:a2:94:99:e1:f7:a2:fb:a7:53:cf:b5:2a:78: 93:7e:ef:f9:52:13:99:67:60:68:e6:26:49:ab:a0: fc:8d:2d:0c:45:aa:7d:7b:cd:8a:20:38:ea:3e:46: 05:dd:a2:cf:9a:dc:14:38:6b:d0:cd:9f:ce:96:f5: 50:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:AD:10:0D:F5:3C:D2:99:37:B1:70:C4:62:96:2F:6E:9E:67:8B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/673affd0-aaf8-380d-b72b-e659be8cc540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.107.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:43:9f:9d:f6:34:e3:86:d9:9e:40:04:39:c8:d0:dd:a0:a3: 9f:31:19:f7:ab:2d:e7:d0:9d:c6:e6:90:20:61:22:ba:54:fb: 2e:aa:d6:b7:4b:c0:05:90:2c:73:46:d9:81:0f:fd:a4:c8:ac: eb:a7:10:01:55:0d:05:ff:d8:d3:25:b2:bc:35:8d:94:27:9f: c2:21:9c:2d:f5:54:1a:26:82:35:d5:eb:91:35:cc:02:47:a4: af:f9:09:ca:06:76:4d:e2:3d:e7:ae:53:fe:b7:a0:60:d5:e0: 7f:e9:5d:3f:25:4c:d1:3b:eb:59:57:af:c9:b0:62:25:8a:e0: 3c:97:89:1d:a5:e7:8a:2c:97:97:c3:e7:63:b9:2d:2b:d4:f4: ba:54:cb:56:48:fe:71:a9:43:4e:db:60:eb:14:e0:11:d0:90: 00:bd:0e:b3:ae:20:fe:a6:eb:75:c7:9b:15:40:b8:58:9a:e8: 11:63:4c:2f:94:a7:f7:47:cd:5c:b8:ab:dd:01:a6:f9:c2:f4: 7f:fb:22:40:b7:4a:3c:de:97:27:17:67:9e:eb:e5:64:f0:08: 41:d8:84:ce:b1:45:ac:50:29:6d:f3:86:d7:ab:11:b2:80:55: c9:3a:1d:e3:d3:d5:a4:96:83:c2:bb:e4:64:49:dd:94:e9:19: 9f:f4:26:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+Lf9LB/boKq00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk MzlmMWQ3NzEtZjcxNS00N2M0LTkwZTYtYTNjYzg5ZWIyYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw++jp1BAtL2LFxHf6EkJ91K20oEVH2kyESc0 qsCT1sTwwFiLek3LqWJ2oESCKCrM7axAuBXEDyEsI/9SAAA6cwFWx/LRAVPvrAvC xQ0dGCl+JQNmLXXHSzbtHG+WpsL+oyd/STfnVFViqBpzghUh4CwyAXV/JWe9qKAq pgvtxpysmZrrPQR+x0Ix9iZwGN2pCxf5U61Knse6h7WaR6shnjSxJlly6eD+rFjX vI4iqPedBkDU6dFZZwXDAsAOtBFgKIKb6qKUmeH3ovunU8+1KniTfu/5UhOZZ2Bo 5iZJq6D8jS0MRap9e82KIDjqPkYF3aLPmtwUOGvQzZ/OlvVQyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCtEA31PNKZN7FwxGKWL26eZ4tRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjczYWZmZDAtYWFmOC0z ODBkLWI3MmItZTY1OWJlOGNjNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxDn532NOOG2Z5ABDnI0N2go58xGferLefQncbmkCBhIrpU+y6q1rdL wAWQLHNG2YEP/aTIrOunEAFVDQX/2NMlsrw1jZQnn8IhnC31VBomgjXV65E1zAJH pK/5CcoGdk3iPeeuU/63oGDV4H/pXT8lTNE761lXr8mwYiWK4DyXiR2l54osl5fD 52O5LSvU9LpUy1ZI/nGpQ07bYOsU4BHQkAC9DrOuIP6m63XHmxVAuFia6BFjTC+U p/dHzVy4q90BpvnC9H/7IkC3SjzelycXZ57r5WTwCEHYhM6xRaxQKW3zhterEbKA Vck6HePT1aSWg8K75GRJ3ZTpGZ/0JiY= -----END CERTIFICATE-----Generated at Sat Sep 6 05:19:14 2025 by rpki-client