$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a096191-e9dd-3db6-b126-ca8f60fea2b6.roa File: 8a096191-e9dd-3db6-b126-ca8f60fea2b6.roa (raw, json) Hash identifier: LgEF82S0CKj/d0tEh/mO2KfjYakwO+N0HXHbGvXuiW8= Subject key identifier: F7:8B:2D:AB:36:DF:B0:39:BC:07:CF:C0:64:78:13:8D:23:94:72:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216D8FD0F3F4CFDA944420 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a096191-e9dd-3db6-b126-ca8f60fea2b6.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.102.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6d:8f:d0:f3:f4:cf:da:94:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=5e94268c-ab6f-4855-bcbe-9bf74d099076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b1:24:41:8b:aa:21:29:b3:73:fc:6c:d1:03: f6:2b:22:f8:e7:77:82:ca:da:76:9f:9d:3c:d7:5e: bb:9e:70:e4:9e:42:47:bf:9d:70:e7:98:b9:75:44: a6:b0:86:82:da:1f:4c:dc:3f:66:40:d5:2b:20:e2: c3:d6:41:70:05:ce:6a:41:a1:ab:8b:80:8f:dd:fc: 1c:00:70:d2:cf:c8:bf:ae:d5:84:4b:a3:9a:47:86: b8:de:4d:c1:ef:ba:73:cf:16:b8:9e:60:15:37:d1: bc:43:15:4f:50:59:65:91:be:db:bb:55:42:88:fd: e4:35:86:bc:a3:39:66:d4:29:1a:95:02:42:df:0b: 2a:84:f3:5c:ed:fe:3b:48:f7:cb:79:33:a0:7c:35: 28:dc:6c:f0:ca:f4:aa:70:63:f3:6d:9a:f8:a4:ba: cc:00:95:63:11:06:94:f9:f8:60:91:9a:de:8f:73: 58:8b:ac:7f:ac:8e:45:32:44:25:80:bf:6d:30:87: 54:f5:48:74:66:7b:ae:03:c0:cd:09:52:6a:d5:ef: ce:1a:d9:56:ac:bc:c0:8b:8d:20:da:80:d7:4f:94: 24:11:89:89:f3:5c:32:34:9b:7c:cf:d0:4b:4b:87: b6:ee:2b:29:cf:e9:d7:5e:54:94:5c:15:da:2d:ea: f3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:8B:2D:AB:36:DF:B0:39:BC:07:CF:C0:64:78:13:8D:23:94:72:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a096191-e9dd-3db6-b126-ca8f60fea2b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.102.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e9:f8:a9:c6:47:d7:3f:ec:91:41:9c:ec:d2:80:f8:13:e5: d7:3e:c1:c4:35:04:3d:3a:1b:11:ee:c4:85:90:88:01:07:50: 2a:b8:f7:1d:2a:59:a2:4a:3e:c0:b8:77:b1:bb:42:2e:0f:82: 62:f3:7d:49:a4:11:c5:20:45:8f:ce:fc:f5:d5:df:62:6c:e7: 0b:a5:d0:7b:25:a1:dc:e3:4d:38:9d:a6:bd:27:63:3a:b2:af: 39:9f:82:16:bc:89:b5:39:97:5e:93:08:d7:fb:e2:5e:d6:ea: b1:ea:a7:c8:fd:5e:8e:66:04:0b:bf:70:6c:2e:e3:f8:3a:85: 5a:44:fd:2f:27:58:b7:c0:60:9a:a5:20:f3:d7:f5:7d:09:da: b4:58:f2:f5:7a:19:01:88:7d:e2:cc:f0:6d:b9:ff:fd:36:8a: 91:5a:c4:34:4b:c0:45:d8:99:70:6b:77:7c:62:24:04:c6:e9: 94:b9:d6:ff:a8:62:da:51:f8:d3:98:4c:49:d6:ab:74:97:94: 36:29:5a:5c:d1:1f:2e:9b:57:a1:ab:d9:56:64:25:ae:28:1a: 1f:08:8d:95:5f:7d:44:3c:67:0b:a6:85:52:69:c8:aa:45:94: 91:b7:e0:b3:b6:16:3e:87:29:a4:4c:ee:cf:51:2a:40:f7:24: c6:79:50:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IW2P0PP0z9qURCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWU5NDI2OGMtYWI2Zi00ODU1LWJjYmUtOWJmNzRkMDk5MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLEkQYuqISmzc/xs0QP2KyL453eCytp2n508 1167nnDknkJHv51w55i5dUSmsIaC2h9M3D9mQNUrIOLD1kFwBc5qQaGri4CP3fwc AHDSz8i/rtWES6OaR4a43k3B77pzzxa4nmAVN9G8QxVPUFllkb7bu1VCiP3kNYa8 ozlm1CkalQJC3wsqhPNc7f47SPfLeTOgfDUo3GzwyvSqcGPzbZr4pLrMAJVjEQaU +fhgkZrej3NYi6x/rI5FMkQlgL9tMIdU9Uh0ZnuuA8DNCVJq1e/OGtlWrLzAi40g 2oDXT5QkEYmJ81wyNJt8z9BLS4e27ispz+nXXlSUXBXaLerz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeLLas237A5vAfPwGR4E40jlHKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGEwOTYxOTEtZTlkZC0z ZGI2LWIxMjYtY2E4ZjYwZmVhMmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvp+KnGR9c/7JFBnOzSgPgT5dc+wcQ1BD06GxHuxIWQiAEHUCq49x0q WaJKPsC4d7G7Qi4PgmLzfUmkEcUgRY/O/PXV32Js5wul0HslodzjTTidpr0nYzqy rzmfgha8ibU5l16TCNf74l7W6rHqp8j9Xo5mBAu/cGwu4/g6hVpE/S8nWLfAYJql IPPX9X0J2rRY8vV6GQGIfeLM8G25//02ipFaxDRLwEXYmXBrd3xiJATG6ZS51v+o YtpR+NOYTEnWq3SXlDYpWlzRHy6bV6Gr2VZkJa4oGh8IjZVffUQ8ZwumhVJpyKpF lJG34LO2Fj6HKaRM7s9RKkD3JMZ5UNg= -----END CERTIFICATE-----Generated at Sat Sep 6 05:07:49 2025 by rpki-client