$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c9f9e7f-0640-3a6f-ae09-dc2e83b59d23.roa File: 9c9f9e7f-0640-3a6f-ae09-dc2e83b59d23.roa (raw, json) Hash identifier: niIOcYMiX7ZZCx6NxyK0otGGkiaJ8C/zDCWxzIESA2Q= Subject key identifier: 61:7F:09:F3:BA:F7:38:F0:79:C5:EF:08:B4:B4:6C:D4:86:3A:C7:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF95158E2D079EF92553E69D0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c9f9e7f-0640-3a6f-ae09-dc2e83b59d23.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.122.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:58:e2:d0:79:ef:92:55:3e:69:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=6e429643-a177-4e6a-896c-0b9ca8d83bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:b6:9c:dd:44:fb:b7:b7:45:88:be:95:45: 54:ae:33:b2:9e:66:9d:a6:2d:6d:21:4e:bc:bd:dc: 03:e1:38:a3:59:66:82:dd:f1:97:52:38:96:c0:10: 94:1b:39:28:55:83:2b:2c:97:f0:e8:56:d9:53:6a: e9:55:d5:1f:7f:47:ee:18:d4:ac:73:34:0f:9f:b0: 0b:16:cb:8f:b9:da:d2:60:1e:b6:67:ce:c7:ef:47: b2:bf:39:72:6f:36:36:ee:a2:94:f5:88:3e:8f:ad: ab:42:76:4e:b1:da:e2:82:fd:ee:89:ee:29:c3:ae: 57:5e:c8:24:e3:d6:d0:3e:ff:a8:5c:45:fc:84:f4: 0a:46:c9:60:d7:0a:43:14:a0:cd:6d:6d:f9:e0:61: d6:42:2c:85:27:ee:35:29:ae:6e:4c:7e:2d:84:4d: fd:1e:af:64:ab:b3:2f:80:3f:be:63:63:61:e4:40: f5:fa:ed:1c:35:39:33:4b:e1:91:97:78:93:43:d8: 3a:b8:69:05:41:9a:45:c6:a8:5f:2b:fb:8f:4c:60: 35:a2:59:38:f7:e3:02:9e:18:c0:8d:bb:50:b5:90: ce:40:8e:30:3c:cc:ad:6a:80:ee:fd:77:b9:b1:3e: db:7c:bd:df:a3:cf:36:19:20:5a:c6:40:9e:c6:e6: aa:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:7F:09:F3:BA:F7:38:F0:79:C5:EF:08:B4:B4:6C:D4:86:3A:C7:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9c9f9e7f-0640-3a6f-ae09-dc2e83b59d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.122.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4f:bf:13:50:bb:02:05:aa:d0:2f:63:1a:98:c2:3a:5a:6b: 0b:b5:1c:9b:f3:9c:0e:bb:1c:38:3b:81:72:57:9c:41:50:6f: eb:35:0d:52:77:1f:9d:fc:a3:5f:54:82:e9:1f:61:bf:c1:b1: 47:3f:f3:3f:d2:88:ed:cf:0a:b2:6a:fb:0b:df:00:92:6c:a4: 76:6f:04:31:bd:f2:55:d1:14:6a:18:9a:0d:fc:5f:a5:28:0f: 83:22:75:f5:7d:8a:06:f4:c7:f5:49:39:fb:fe:00:1e:cc:d2: d8:a7:e1:23:87:61:a9:90:8e:2d:de:6b:34:69:90:ab:cc:18: ab:06:3c:63:8f:39:22:9d:8e:1f:3f:01:5a:43:b5:95:74:ce: b8:d3:3a:c8:01:bd:33:41:ca:8a:54:5e:84:79:5f:7c:8b:02: 8b:15:f0:87:17:1a:a9:da:f2:3f:51:8f:7c:3e:c8:1e:2e:71: b1:aa:92:f8:27:97:8e:22:24:d1:ff:22:2c:83:84:df:51:27: 1c:66:8f:44:28:ba:34:66:48:6b:59:73:0b:b5:f5:4b:53:3f: ed:16:6d:f6:ee:dc:f1:f0:de:01:47:08:8d:5c:43:9e:92:c3: 01:c8:75:9e:eb:ac:21:63:75:97:97:fd:47:d1:3c:b6:ce:37: c0:43:70:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVji0HnvklU+adAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmU0Mjk2NDMtYTE3Ny00ZTZhLTg5NmMtMGI5Y2E4ZDgzYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO+2nN1E+7e3RYi+lUVUrjOynmadpi1tIU68 vdwD4TijWWaC3fGXUjiWwBCUGzkoVYMrLJfw6FbZU2rpVdUff0fuGNSsczQPn7AL FsuPudrSYB62Z87H70eyvzlybzY27qKU9Yg+j62rQnZOsdrigv3uie4pw65XXsgk 49bQPv+oXEX8hPQKRslg1wpDFKDNbW354GHWQiyFJ+41Ka5uTH4thE39Hq9kq7Mv gD++Y2Nh5ED1+u0cNTkzS+GRl3iTQ9g6uGkFQZpFxqhfK/uPTGA1olk49+MCnhjA jbtQtZDOQI4wPMytaoDu/Xe5sT7bfL3fo882GSBaxkCexuaqjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF/CfO69zjwecXvCLS0bNSGOscvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWM5ZjllN2YtMDY0MC0z YTZmLWFlMDktZGMyZTgzYjU5ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaHogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNPvxNQuwIFqtAvYxqYwjpaawu1HJvznA67HDg7gXJXnEFQb+s1DVJ3 H538o19UgukfYb/BsUc/8z/SiO3PCrJq+wvfAJJspHZvBDG98lXRFGoYmg38X6Uo D4MidfV9igb0x/VJOfv+AB7M0tin4SOHYamQji3eazRpkKvMGKsGPGOPOSKdjh8/ AVpDtZV0zrjTOsgBvTNByopUXoR5X3yLAosV8IcXGqna8j9Rj3w+yB4ucbGqkvgn l44iJNH/IiyDhN9RJxxmj0QoujRmSGtZcwu19UtTP+0Wbfbu3PHw3gFHCI1cQ56S wwHIdZ7rrCFjdZeX/UfRPLbON8BDcP8= -----END CERTIFICATE-----Generated at Sat Sep 6 05:05:33 2025 by rpki-client