$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ba6a65-0bde-3a63-b070-52f8a919d956.roa File: 72ba6a65-0bde-3a63-b070-52f8a919d956.roa (raw, json) Hash identifier: S78EBhShDUoBiS/cPGVx6MdyHKaHybnwJ6dT3aZXIh8= Subject key identifier: 67:E8:04:38:94:50:69:3F:06:BA:6E:69:71:47:EA:0F:1B:7F:BE:8B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF951561377F152F896EC6180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ba6a65-0bde-3a63-b070-52f8a919d956.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 24319 IP address blocks: 104.117.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:56:13:77:f1:52:f8:96:ec:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=98c4dd17-97f4-4517-896f-9856724dae06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d3:a8:6b:cb:14:d5:a0:94:1c:80:bf:f9:da: 62:d2:66:a0:c0:09:d8:0b:2c:e2:a5:a9:d7:f5:e6: 23:df:7f:24:da:19:f5:14:9c:8d:8d:b8:f8:b6:09: 54:b8:a7:be:2d:53:cc:95:e6:b6:e9:d6:3e:c6:67: 54:cf:e5:ff:d3:cd:30:00:44:d9:77:81:99:2b:45: 5d:c1:23:c5:8a:bf:36:79:c2:8f:a7:df:f5:d0:20: ab:49:73:80:4c:53:05:f5:c4:d0:02:f1:6b:79:f2: 5f:a8:ec:98:15:be:6a:9b:61:54:39:19:3f:04:3a: 33:70:6f:55:57:04:5d:cb:10:01:86:63:6a:e2:11: 9b:bd:7a:70:85:49:49:df:ba:b3:66:2d:d6:48:c5: 6c:42:37:41:ff:8e:ba:4e:b7:58:97:d1:f9:a1:66: 9d:e6:0b:bb:ed:f6:28:d4:00:f8:b7:ee:d9:38:7e: cb:da:eb:8b:71:c3:2d:de:45:70:5a:ee:06:a9:01: b1:89:21:d2:6b:c9:b5:d5:a9:5e:c4:ae:41:ad:60: 0f:61:75:a0:40:98:23:13:e9:c1:11:90:37:21:b5: 1b:34:80:18:fc:02:2c:0b:7a:68:35:4d:52:86:cf: 45:81:e7:2b:7c:f5:2f:09:9a:3c:6b:71:d8:00:c6: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E8:04:38:94:50:69:3F:06:BA:6E:69:71:47:EA:0F:1B:7F:BE:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/72ba6a65-0bde-3a63-b070-52f8a919d956.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.117.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:b2:6b:0f:7a:45:a0:49:2a:e3:4a:14:77:22:7d:bd:15:74: d5:b9:d2:88:39:23:3c:d8:1a:83:0e:0a:5a:06:03:10:74:95: 52:40:b1:b8:d2:0c:46:6c:e3:9f:62:36:01:b9:19:3a:25:34: db:9a:f7:68:88:a8:78:38:11:8b:9c:69:38:93:48:e6:dc:af: 5b:4c:dc:8b:34:82:35:b9:79:73:7e:de:60:12:6d:56:8d:c5: 00:e9:9c:ef:1c:d7:a6:89:b3:b1:95:16:c4:97:22:26:57:f0: 64:3f:c4:e6:0a:e4:66:1b:b5:28:f4:66:56:d0:e9:95:c4:81: a6:a6:76:c7:0f:13:e4:19:0b:cf:27:7e:68:7e:4b:a2:68:24: b0:86:f7:f8:ca:4c:29:4c:12:f6:98:ac:6d:6e:aa:cf:2c:30: 35:ad:39:21:bd:0e:e7:52:c2:33:fb:52:c3:46:2b:66:f5:5e: 30:50:79:b0:47:58:c9:1b:26:80:25:f7:12:08:ad:44:f6:60: 12:26:c8:66:9e:b6:17:35:26:eb:59:0f:eb:99:0b:0d:0a:db: 81:88:6f:f9:92:00:9e:83:68:2a:f4:1c:5d:52:03:78:68:94: b8:15:66:e6:7b:05:0f:52:47:79:90:6e:e3:2e:de:fc:af:ce: 2b:8a:2c:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVYTd/FS+JbsYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk OThjNGRkMTctOTdmNC00NTE3LTg5NmYtOTg1NjcyNGRhZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9Ooa8sU1aCUHIC/+dpi0magwAnYCyzipanX 9eYj338k2hn1FJyNjbj4tglUuKe+LVPMlea26dY+xmdUz+X/080wAETZd4GZK0Vd wSPFir82ecKPp9/10CCrSXOATFMF9cTQAvFrefJfqOyYFb5qm2FUORk/BDozcG9V VwRdyxABhmNq4hGbvXpwhUlJ37qzZi3WSMVsQjdB/466TrdYl9H5oWad5gu77fYo 1AD4t+7ZOH7L2uuLccMt3kVwWu4GqQGxiSHSa8m11alexK5BrWAPYXWgQJgjE+nB EZA3IbUbNIAY/AIsC3poNU1Shs9FgecrfPUvCZo8a3HYAMbAFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfoBDiUUGk/BrpuaXFH6g8bf76LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzJiYTZhNjUtMGJkZS0z YTYzLWIwNzAtNTJmOGE5MTlkOTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHVDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2yaw96RaBJKuNKFHcifb0VdNW50og5IzzYGoMOCloGAxB0lVJAsbjS DEZs459iNgG5GTolNNua92iIqHg4EYucaTiTSObcr1tM3Is0gjW5eXN+3mASbVaN xQDpnO8c16aJs7GVFsSXIiZX8GQ/xOYK5GYbtSj0ZlbQ6ZXEgaamdscPE+QZC88n fmh+S6JoJLCG9/jKTClMEvaYrG1uqs8sMDWtOSG9DudSwjP7UsNGK2b1XjBQebBH WMkbJoAl9xIIrUT2YBImyGaethc1JutZD+uZCw0K24GIb/mSAJ6DaCr0HF1SA3ho lLgVZuZ7BQ9SR3mQbuMu3vyvziuKLDs= -----END CERTIFICATE-----Generated at Sat Sep 6 05:14:31 2025 by rpki-client