$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa File: b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa (raw, json) Hash identifier: vI2PiYoP1mP06FLpA+yXmshHV84u2l9ZAXEmfjj0AHk= Subject key identifier: 72:74:79:49:15:8E:8D:7E:67:95:CC:4F:BE:83:D8:A8:3D:15:D1:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52163417113103D373F7B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.103.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:63:41:71:13:10:3d:37:3f:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=5c1aa61e-f732-4c33-afd0-24c785fcc3f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:af:f4:88:30:6f:96:d1:91:5d:3d:ed:c5: 64:6d:f0:e8:33:c8:3c:07:9e:e7:0d:99:b9:83:ed: 15:7a:69:73:0f:74:af:34:36:33:4e:b8:78:60:7f: b0:6e:14:b1:be:fb:6b:de:16:d3:bf:93:4c:65:88: d6:80:ad:71:6d:ab:b2:98:53:76:19:5b:d9:3a:54: 67:9a:04:0f:73:66:c3:58:66:fb:f5:f2:80:9a:93: 1a:0e:93:3e:8f:07:7f:9a:ac:a6:77:dd:95:8a:10: 43:fd:3f:0a:7a:93:78:a3:4a:7c:08:3f:25:0a:a6: f7:6c:59:92:ec:81:ab:9a:3c:df:aa:13:6a:77:74: 93:93:88:64:07:58:13:ce:dc:d1:69:30:69:40:62: c3:0f:44:51:5e:80:7d:15:ea:d2:0f:79:51:02:43: 59:a9:e9:ac:81:66:55:eb:39:af:f0:5b:9f:5e:ab: 1e:4e:b7:ff:c0:29:44:3e:bc:99:39:70:29:c4:a0: 67:70:0d:32:5f:37:7b:26:24:26:bb:4f:09:f0:de: ec:e6:07:f4:6d:27:e1:6a:32:bb:ed:d7:ab:d6:2e: c5:55:5d:b2:61:2b:8c:df:8e:bd:01:2f:23:ae:33: d1:63:1a:fb:89:a6:24:7e:7c:87:0b:7c:f5:10:0d: 74:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:74:79:49:15:8E:8D:7E:67:95:CC:4F:BE:83:D8:A8:3D:15:D1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d46ac1-cfe0-31e7-b161-a40a0c881500.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c5:62:dd:d4:1d:0e:85:d0:ba:92:d7:f0:72:db:3c:6f:1d: f5:b5:f3:83:f8:09:3c:1f:b4:69:1d:89:60:40:1b:ea:15:ba: 51:f3:81:4e:f3:c1:33:a8:ec:d2:03:14:b8:3a:fb:33:39:48: f5:4d:ee:e1:4f:58:00:b2:65:11:f5:bb:bd:e8:72:69:cd:83: 53:b2:1c:11:a5:11:f0:4d:84:4b:fb:15:e4:54:4f:06:e3:bc: 2b:58:52:19:00:52:31:42:28:24:56:4c:c4:6e:8e:42:c1:a4: 07:0b:fe:66:cd:65:c1:14:70:fe:de:36:45:3b:2d:1e:15:47: fc:10:25:2d:bc:00:ab:05:eb:2e:6a:ad:b9:77:8e:97:ef:07: a3:69:3b:15:1f:27:a8:67:43:29:7e:56:21:ea:82:03:a1:8f: d6:7e:7b:df:f4:6e:79:80:05:2e:50:8c:2b:6c:25:83:8b:c3: fb:b2:e8:17:0d:1d:ae:93:9d:ac:ff:93:47:a8:d6:08:4a:5e: 3e:97:05:bf:e0:4f:a8:ce:a9:c8:f9:93:29:73:28:10:1d:75: f1:b7:5e:8b:c3:d5:22:0d:da:e8:52:3c:78:62:02:56:c3:6b: f2:2c:92:dc:8c:3b:3b:88:c5:c8:ad:21:04:18:1c:14:da:73: 8a:60:9b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWNBcRMQPTc/e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NWMxYWE2MWUtZjczMi00YzMzLWFmZDAtMjRjNzg1ZmNjM2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA102v9Igwb5bRkV097cVkbfDoM8g8B57nDZm5 g+0VemlzD3SvNDYzTrh4YH+wbhSxvvtr3hbTv5NMZYjWgK1xbauymFN2GVvZOlRn mgQPc2bDWGb79fKAmpMaDpM+jwd/mqymd92VihBD/T8KepN4o0p8CD8lCqb3bFmS 7IGrmjzfqhNqd3STk4hkB1gTztzRaTBpQGLDD0RRXoB9FerSD3lRAkNZqemsgWZV 6zmv8FufXqseTrf/wClEPryZOXApxKBncA0yXzd7JiQmu08J8N7s5gf0bSfhajK7 7der1i7FVV2yYSuM3469AS8jrjPRYxr7iaYkfnyHC3z1EA10mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJ0eUkVjo1+Z5XMT76D2Kg9FdHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNkNDZhYzEtY2ZlMC0z MWU3LWIxNjEtYTQwYTBjODgxNTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTFYt3UHQ6F0LqS1/By2zxvHfW184P4CTwftGkdiWBAG+oVulHzgU7z wTOo7NIDFLg6+zM5SPVN7uFPWACyZRH1u73ocmnNg1OyHBGlEfBNhEv7FeRUTwbj vCtYUhkAUjFCKCRWTMRujkLBpAcL/mbNZcEUcP7eNkU7LR4VR/wQJS28AKsF6y5q rbl3jpfvB6NpOxUfJ6hnQyl+ViHqggOhj9Z+e9/0bnmABS5QjCtsJYOLw/uy6BcN Ha6Tnaz/k0eo1ghKXj6XBb/gT6jOqcj5kylzKBAddfG3XovD1SIN2uhSPHhiAlbD a/IsktyMOzuIxcitIQQYHBTac4pgm80= -----END CERTIFICATE-----Generated at Sat Sep 6 05:17:11 2025 by rpki-client