$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c324551-70b3-3b77-9c9e-5eb591671dcb.roa File: 8c324551-70b3-3b77-9c9e-5eb591671dcb.roa (raw, json) Hash identifier: nxigZcpAqIx2Vvk59fUAJspbm+BLfN26xY5zEENZhHY= Subject key identifier: F4:47:AD:33:50:A3:7E:22:4D:69:38:6B:B9:22:6A:92:19:EB:D0:FF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9514D8449AA836DB39E0F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c324551-70b3-3b77-9c9e-5eb591671dcb.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.123.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4d:84:49:aa:83:6d:b3:9e:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=5770d63f-3701-41eb-a7fe-3f9c12328859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4c:c8:35:3d:ce:75:4c:b4:b3:b2:24:57:92: 00:b6:31:ee:56:41:c0:ee:d3:f6:83:6e:ee:9f:5b: a1:38:56:a0:86:2f:e9:23:a1:27:1d:64:2a:0a:c9: 4c:cf:ae:a7:f0:18:72:74:1e:c9:64:25:7c:9c:fd: 0b:26:58:12:95:e0:b8:f5:89:4f:aa:6d:15:32:e3: 8a:4a:67:9f:2a:7f:76:be:a0:e2:58:1d:bc:52:96: 38:0a:bd:dd:c8:d3:45:7d:a1:39:83:e4:b8:3a:7a: 14:b2:ee:08:63:fa:95:f5:17:5c:a7:2d:da:b9:bf: 5e:85:22:8f:d1:f5:02:7f:a6:89:d7:05:2e:40:cd: c9:68:93:9e:9c:65:7e:68:39:e3:99:80:11:b9:82: f7:2c:af:aa:e5:0d:63:87:0d:9f:a5:f5:2c:87:00: a2:c0:b3:c5:20:30:b3:91:84:e8:3a:3f:04:e0:c9: 8b:05:13:26:08:7b:5b:dd:59:c0:a6:21:82:b0:b1: e4:52:e7:35:a4:4d:26:a5:8a:c2:00:de:54:b4:89: 7f:73:16:cb:2f:1a:c0:e3:3e:60:8d:ce:70:88:6c: d2:7a:02:dc:e9:2a:a5:7e:f8:8d:2a:4d:e2:ac:9e: 99:98:e8:32:f2:2a:40:6e:56:76:26:dc:60:df:b9: bf:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:47:AD:33:50:A3:7E:22:4D:69:38:6B:B9:22:6A:92:19:EB:D0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8c324551-70b3-3b77-9c9e-5eb591671dcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:54:a9:0f:ee:fa:8d:a4:2a:dd:91:f3:69:a7:85:36:66:83: a4:86:b2:ae:06:e0:3d:04:99:fe:b1:42:fa:f3:bf:fd:26:e2: 7f:16:cb:49:c6:f1:e3:49:77:28:cb:34:53:22:0a:e6:f6:50: d6:37:68:b4:e0:6b:97:c2:21:78:0a:27:bb:c4:37:10:fc:4c: bb:a6:83:5d:6b:c0:0f:66:90:e4:55:08:be:92:bc:38:af:08: cc:86:b2:92:46:b6:5f:8d:91:31:79:70:41:4b:52:b4:51:7f: e5:5e:9b:91:a8:ba:21:55:74:59:47:57:e2:9f:1a:5f:e6:17: e8:70:d2:29:16:07:9f:32:12:91:26:76:0c:19:19:99:75:05: 70:bc:1f:f6:35:0b:c4:1d:f5:a5:85:53:c9:82:19:f8:b3:cc: 8f:f2:39:24:84:5b:dd:ef:df:65:bd:51:bb:0a:42:4a:9a:a7: 4b:c2:fd:b7:64:fa:94:07:30:a0:40:e7:d4:dd:ba:7c:f4:29: 60:8e:28:09:94:c5:56:16:c9:a7:71:81:2c:ed:7f:04:76:19: 69:2e:8f:cc:a1:a9:af:85:45:40:43:fc:64:53:cf:c6:10:ef: ed:55:c2:54:ff:cd:bf:6e:c4:5a:04:c8:4b:b4:6c:87:87:b9: fa:e2:e6:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU2ESaqDbbOeDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTc3MGQ2M2YtMzcwMS00MWViLWE3ZmUtM2Y5YzEyMzI4ODU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEzINT3OdUy0s7IkV5IAtjHuVkHA7tP2g27u n1uhOFaghi/pI6EnHWQqCslMz66n8BhydB7JZCV8nP0LJlgSleC49YlPqm0VMuOK SmefKn92vqDiWB28UpY4Cr3dyNNFfaE5g+S4OnoUsu4IY/qV9Rdcpy3aub9ehSKP 0fUCf6aJ1wUuQM3JaJOenGV+aDnjmYARuYL3LK+q5Q1jhw2fpfUshwCiwLPFIDCz kYToOj8E4MmLBRMmCHtb3VnApiGCsLHkUuc1pE0mpYrCAN5UtIl/cxbLLxrA4z5g jc5wiGzSegLc6SqlfviNKk3irJ6ZmOgy8ipAblZ2Jtxg37m/LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRHrTNQo34iTWk4a7kiapIZ69D/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGMzMjQ1NTEtNzBiMy0z Yjc3LTljOWUtNWViNTkxNjcxZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRUqQ/u+o2kKt2R82mnhTZmg6SGsq4G4D0Emf6xQvrzv/0m4n8Wy0nG 8eNJdyjLNFMiCub2UNY3aLTga5fCIXgKJ7vENxD8TLumg11rwA9mkORVCL6SvDiv CMyGspJGtl+NkTF5cEFLUrRRf+Vem5GouiFVdFlHV+KfGl/mF+hw0ikWB58yEpEm dgwZGZl1BXC8H/Y1C8Qd9aWFU8mCGfizzI/yOSSEW93v32W9UbsKQkqap0vC/bdk +pQHMKBA59Tdunz0KWCOKAmUxVYWyadxgSztfwR2GWkuj8yhqa+FRUBD/GRTz8YQ 7+1VwlT/zb9uxFoEyEu0bIeHufri5qY= -----END CERTIFICATE-----Generated at Sat Sep 6 05:13:54 2025 by rpki-client