$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7385b9a9-24a5-3857-84df-7b9c5c61356c.roa File: 7385b9a9-24a5-3857-84df-7b9c5c61356c.roa (raw, json) Hash identifier: Z8B/+gnT+3g91iNQfO25mn/veHS6dTorovt/xywH1xQ= Subject key identifier: A5:9F:DF:F4:8A:4B:D8:01:D6:4C:76:67:99:70:F9:72:E1:96:72:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52160A9E4703868CD8B6340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7385b9a9-24a5-3857-84df-7b9c5c61356c.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.96.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:60:a9:e4:70:38:68:cd:8b:63:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=8c6b77e2-f8ec-408a-8c88-75b7854672ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2c:30:1c:87:ac:c2:fd:5b:37:e1:ca:08:96: aa:1d:f7:3f:49:20:8b:fc:36:9b:5d:ad:a0:84:77: 93:5d:5a:b8:39:b4:e5:04:34:83:f0:e9:15:f2:84: ac:cd:35:fa:13:8c:5d:16:94:e3:bb:b0:b0:e7:37: 42:38:73:01:15:e1:43:9b:1c:55:2e:88:0e:ad:4c: 43:ce:de:40:3f:c3:fc:08:83:69:a9:1d:20:2a:a7: 3b:63:14:51:6e:38:00:3b:fd:1d:ef:ba:70:dc:05: c0:47:1c:ce:fe:8e:e8:92:f0:b7:88:80:31:01:7b: c3:7a:cf:05:b3:07:71:99:ab:9e:db:4c:86:1f:7e: f8:16:60:c5:f0:5b:df:eb:a6:01:c6:d1:36:55:93: 7f:fd:c1:df:5d:fc:fc:de:3a:be:f2:fd:eb:a2:0c: da:ea:d8:30:66:22:ac:22:f6:95:8d:4f:da:de:b0: d1:f4:6a:f3:1f:fd:34:80:99:92:d1:b0:d8:19:2a: 14:bf:9a:10:d6:5f:0b:3b:09:a2:10:2a:81:61:40: d7:f1:f4:d5:28:82:2c:0d:b4:46:7a:0c:e3:dd:7f: 44:ab:8f:18:e5:28:fd:12:b9:a0:36:b6:71:a9:2b: d1:d8:25:0b:6f:43:7d:f2:7c:7f:ab:88:87:09:c7: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9F:DF:F4:8A:4B:D8:01:D6:4C:76:67:99:70:F9:72:E1:96:72:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7385b9a9-24a5-3857-84df-7b9c5c61356c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a5:25:71:f9:75:7f:56:81:f3:de:c8:61:08:0d:88:53:de: b1:aa:c5:75:30:2f:f8:29:48:0a:1a:8e:2b:41:85:77:e2:b9: 1c:41:8b:57:54:82:4d:c8:6e:40:48:a7:f2:7d:50:ab:9f:78: c8:16:92:f2:52:cb:ce:98:aa:d3:e9:3b:c3:4f:4c:c9:28:d6: 47:32:5c:38:2f:78:9d:44:32:f8:1a:35:5d:64:47:1c:bb:b9: 97:73:d7:b9:1e:c5:c6:57:21:cd:64:1d:e1:36:b3:ec:c6:26: c9:e0:17:9a:cd:8d:ff:f1:63:95:81:b8:90:f9:f7:4c:7f:22: 53:8b:5e:ea:42:64:41:16:d4:69:66:6d:8b:c3:a8:8b:43:4c: 67:bc:c3:1f:f0:53:7a:6e:cb:16:07:85:40:5a:de:5c:47:5f: 0e:ab:e0:60:2b:e4:38:80:90:25:e3:db:fe:ce:62:a1:4c:93: c3:03:19:63:13:08:a2:d0:45:bf:47:bd:31:d1:0f:4b:e6:95: 08:d6:f5:f1:f1:f6:a2:7a:ab:89:91:84:f0:e2:03:94:db:38: d6:80:df:fd:4b:5a:d6:c0:97:e7:dc:46:fe:01:d8:6a:c0:7f: 5c:89:94:d8:28:59:ad:6b:29:6c:08:11:aa:b3:2c:fd:5e:a5: c9:5a:b1:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWCp5HA4aM2LY0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGM2Yjc3ZTItZjhlYy00MDhhLThjODgtNzViNzg1NDY3MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgywwHIeswv1bN+HKCJaqHfc/SSCL/DabXa2g hHeTXVq4ObTlBDSD8OkV8oSszTX6E4xdFpTju7Cw5zdCOHMBFeFDmxxVLogOrUxD zt5AP8P8CINpqR0gKqc7YxRRbjgAO/0d77pw3AXARxzO/o7okvC3iIAxAXvDes8F swdxmaue20yGH374FmDF8Fvf66YBxtE2VZN//cHfXfz83jq+8v3rogza6tgwZiKs IvaVjU/a3rDR9GrzH/00gJmS0bDYGSoUv5oQ1l8LOwmiECqBYUDX8fTVKIIsDbRG egzj3X9Eq48Y5Sj9ErmgNrZxqSvR2CULb0N98nx/q4iHCccyOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWf3/SKS9gB1kx2Z5lw+XLhlnLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzM4NWI5YTktMjRhNS0z ODU3LTg0ZGYtN2I5YzVjNjEzNTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGDJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHylJXH5dX9WgfPeyGEIDYhT3rGqxXUwL/gpSAoajitBhXfiuRxBi1dU gk3IbkBIp/J9UKufeMgWkvJSy86YqtPpO8NPTMko1kcyXDgveJ1EMvgaNV1kRxy7 uZdz17kexcZXIc1kHeE2s+zGJsngF5rNjf/xY5WBuJD590x/IlOLXupCZEEW1Glm bYvDqItDTGe8wx/wU3puyxYHhUBa3lxHXw6r4GAr5DiAkCXj2/7OYqFMk8MDGWMT CKLQRb9HvTHRD0vmlQjW9fHx9qJ6q4mRhPDiA5TbONaA3/1LWtbAl+fcRv4B2GrA f1yJlNgoWa1rKWwIEaqzLP1epclasf4= -----END CERTIFICATE-----Generated at Sat Sep 6 05:22:44 2025 by rpki-client