$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa File: a68d256d-85f0-3e19-90ad-5a174eaaf663.roa (raw, json) Hash identifier: QfMIjdQmCY3RD8fGIP8ZAlhy3abKDxwYFfr0eNIU+uo= Subject key identifier: E6:0E:E5:9A:56:12:83:49:E0:81:CD:52:86:82:0C:88:00:2B:5A:7E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216AA67432E329DF5F4D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.95.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6a:a6:74:32:e3:29:df:5f:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=e1b0a088-1b64-4cb0-91c6-84b95012f027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:67:67:5a:c3:fa:58:e0:8e:10:3c:4f:7f: a5:73:5e:d5:a6:0c:ad:02:22:f3:82:1a:5f:9e:df: 0e:cf:7c:e9:21:52:63:25:e3:17:73:6a:b2:21:1e: 1c:82:98:4c:88:36:e0:81:de:67:3c:ba:80:b9:3b: 27:e2:6c:be:05:a9:21:2d:82:34:0a:7e:1f:a6:04: dc:67:13:be:53:dd:88:98:20:a3:96:55:75:c2:59: 84:b2:7b:39:5e:fe:95:ef:a0:d4:34:51:d7:db:63: a1:72:be:2f:51:28:95:cc:e5:e8:79:25:98:b2:d1: db:14:9d:b8:f2:74:68:28:92:c0:4c:0b:99:c9:75: 6a:c3:9d:c6:56:a0:cc:30:b7:09:b9:16:41:31:8b: 29:ba:0b:db:c1:68:7b:0a:98:0b:d5:23:96:0f:fa: 76:64:31:76:ce:f8:2c:d6:25:4f:bc:7c:e3:7a:09: 54:e8:6c:2d:f5:a7:09:28:61:95:5e:40:21:e2:3f: 13:87:5f:b2:4f:62:f4:03:cf:fc:60:4e:65:46:f5: fd:f5:ba:19:ad:08:1b:9a:20:5f:ce:99:94:d1:3c: 33:ba:ae:8f:28:4f:3e:f2:d2:3a:88:92:44:34:fc: c5:eb:2e:c0:79:42:74:3f:35:7e:54:fb:ea:2b:31: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0E:E5:9A:56:12:83:49:E0:81:CD:52:86:82:0C:88:00:2B:5A:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68d256d-85f0-3e19-90ad-5a174eaaf663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.95.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ca:48:f1:c4:ed:fd:d2:d1:9e:7c:b8:cd:bd:c3:be:5c:54: b4:b0:db:71:ae:15:b6:38:99:23:9e:51:71:45:90:4e:c9:98: 07:5f:30:0f:f8:77:23:86:d0:39:68:b1:60:f9:5a:05:cc:8a: 1e:3a:29:39:fe:38:d1:46:cc:a0:68:97:22:70:44:65:26:27: 32:ca:9e:f9:5c:f7:6a:1f:4b:8b:0f:0b:97:4f:eb:4c:c3:52: 8d:84:ac:17:00:8d:a7:e5:2a:eb:a5:be:78:bd:7a:42:06:c9: 62:bb:67:72:b7:20:09:4a:c4:4e:2d:c9:5a:b6:e3:72:46:e0: 12:ba:77:23:2b:42:5f:63:5e:ab:c7:fb:fb:fc:bb:2f:d3:d5: a6:73:29:52:3f:e4:3a:42:19:de:a7:75:f2:98:4d:87:43:be: e3:9b:c8:8c:9f:d1:98:94:8b:70:16:8a:63:8c:c4:37:bd:28: 7e:0e:d0:6c:06:75:34:4c:5c:26:76:90:5e:23:53:5c:6f:28: 47:e0:60:51:29:fb:c2:26:3e:1f:80:de:8f:cd:8e:08:71:55: 5e:f0:0e:70:00:60:30:2f:d3:80:29:82:52:ac:14:e2:f8:6c: 93:64:a0:e9:a0:a2:cc:fd:af:d5:10:29:71:e9:64:ff:44:2d: 03:10:43:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWqmdDLjKd9fTQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTFiMGEwODgtMWI2NC00Y2IwLTkxYzYtODRiOTUwMTJmMDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSNnZ1rD+ljgjhA8T3+lc17VpgytAiLzghpf nt8Oz3zpIVJjJeMXc2qyIR4cgphMiDbggd5nPLqAuTsn4my+BakhLYI0Cn4fpgTc ZxO+U92ImCCjllV1wlmEsns5Xv6V76DUNFHX22Ohcr4vUSiVzOXoeSWYstHbFJ24 8nRoKJLATAuZyXVqw53GVqDMMLcJuRZBMYspugvbwWh7CpgL1SOWD/p2ZDF2zvgs 1iVPvHzjeglU6Gwt9acJKGGVXkAh4j8Th1+yT2L0A8/8YE5lRvX99boZrQgbmiBf zpmU0Twzuq6PKE8+8tI6iJJENPzF6y7AeUJ0PzV+VPvqKzHXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYO5ZpWEoNJ4IHNUoaCDIgAK1p+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTY4ZDI1NmQtODVmMC0z ZTE5LTkwYWQtNWExNzRlYWFmNjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaF/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbKSPHE7f3S0Z58uM29w75cVLSw23GuFbY4mSOeUXFFkE7JmAdfMA/4 dyOG0DlosWD5WgXMih46KTn+ONFGzKBolyJwRGUmJzLKnvlc92ofS4sPC5dP60zD Uo2ErBcAjaflKuulvni9ekIGyWK7Z3K3IAlKxE4tyVq243JG4BK6dyMrQl9jXqvH +/v8uy/T1aZzKVI/5DpCGd6ndfKYTYdDvuObyIyf0ZiUi3AWimOMxDe9KH4O0GwG dTRMXCZ2kF4jU1xvKEfgYFEp+8ImPh+A3o/NjghxVV7wDnAAYDAv04ApglKsFOL4 bJNkoOmgosz9r9UQKXHpZP9ELQMQQ4Q= -----END CERTIFICATE-----Generated at Sat Sep 6 05:09:40 2025 by rpki-client