$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa File: c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa (raw, json) Hash identifier: H1219hqhHU2xrTy4GvvBK2wBOJjCxd0/XwUrfnfa9P0= Subject key identifier: 9C:77:44:0B:87:B4:E0:50:BC:65:E5:DD:A2:7A:EB:F5:7A:EC:CB:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF95159C79B798E882149A980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.123.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:59:c7:9b:79:8e:88:21:49:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=793d6f8e-8550-4ce8-a6b5-9e78aa81c807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:13:3a:e9:8b:b5:cb:9e:f0:c0:54:b4:8e: 1a:2b:f3:1b:31:1e:43:97:8d:75:0e:85:13:8d:ea: e6:7a:e0:f1:ea:87:37:83:df:96:8f:3d:db:a4:d0: 54:dc:bb:94:24:b7:f9:15:4f:e3:b0:ff:19:12:9a: 6c:0f:55:7c:06:dc:42:30:79:52:7e:29:aa:61:de: 2e:3d:71:9c:89:b5:64:26:fb:5f:a7:fe:f1:d2:89: 78:61:a0:7b:e5:85:f4:4f:de:92:70:05:fe:bf:90: 8d:6c:03:7e:41:43:0a:a0:10:12:6c:a2:98:e8:ac: e7:2d:72:e8:9a:2c:5b:d9:62:12:86:8f:38:af:5e: 83:58:b2:0f:a5:75:74:36:4a:29:91:90:d7:6d:46: 1d:ed:d7:e4:88:51:aa:85:15:0b:7b:3c:89:b5:7d: 25:10:5d:57:e0:cd:89:a8:15:0c:5a:c2:30:da:3a: 40:76:6b:2f:bd:34:a2:a0:71:ba:c9:ba:e0:7d:f4: d5:fb:61:51:b2:65:9b:6b:2a:2a:6c:29:bf:e6:67: ea:09:fa:9b:c9:3c:f8:5b:f1:96:f4:d8:6d:4f:58: b0:e5:4b:f6:5b:54:c0:59:71:6c:89:75:f8:e9:e7: 8a:b3:89:f9:03:94:28:c4:71:ea:88:8b:ee:2a:46: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:77:44:0B:87:B4:E0:50:BC:65:E5:DD:A2:7A:EB:F5:7A:EC:CB:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c144d7ca-e5f9-3aca-baeb-e45cbe841855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9b:b1:41:91:30:70:c5:52:f2:7d:0a:61:34:6c:c8:ca:a7: e9:c5:17:29:64:76:cf:b2:e2:43:91:ae:4f:81:8a:45:3d:af: 6e:49:9b:79:d0:05:c2:47:45:94:d3:1e:1b:91:8a:6e:8a:63: 39:b1:d0:b8:e4:55:92:39:82:30:6b:38:42:64:73:61:9d:c9: b9:0f:ae:e8:59:ae:ae:93:87:db:87:ee:db:18:e5:cd:d9:36: 82:74:d3:a6:8e:de:b7:e6:52:eb:e4:54:35:04:c7:59:d5:0a: af:a1:ff:b0:30:9b:62:62:75:c9:90:de:37:e1:63:a3:08:45: 26:04:bd:71:7c:d0:2b:3d:63:d8:f8:4e:35:c0:4d:06:50:ad: 00:46:e4:77:4b:0d:fb:de:be:50:17:8e:33:f8:37:42:22:c7: 93:10:5c:2f:a7:b8:c2:3d:87:66:74:a4:a2:34:e3:3f:48:b8: fd:0e:28:4a:65:ed:b3:08:80:89:50:d2:bc:97:55:41:b9:28: f3:8e:15:f7:24:c7:1e:45:68:98:5b:95:5f:1e:fe:3b:d4:de: e5:ae:a1:d9:41:1c:15:94:57:00:06:cf:de:01:5a:10:29:ce: 33:d3:8f:61:cf:01:48:7c:f2:a8:a4:54:e2:5e:67:fe:4e:c3: e0:1f:67:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVnHm3mOiCFJqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NzkzZDZmOGUtODU1MC00Y2U4LWE2YjUtOWU3OGFhODFjODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLUTOumLtcue8MBUtI4aK/MbMR5Dl411DoUT jermeuDx6oc3g9+Wjz3bpNBU3LuUJLf5FU/jsP8ZEppsD1V8BtxCMHlSfimqYd4u PXGcibVkJvtfp/7x0ol4YaB75YX0T96ScAX+v5CNbAN+QUMKoBASbKKY6KznLXLo mixb2WISho84r16DWLIPpXV0NkopkZDXbUYd7dfkiFGqhRULezyJtX0lEF1X4M2J qBUMWsIw2jpAdmsvvTSioHG6ybrgffTV+2FRsmWbayoqbCm/5mfqCfqbyTz4W/GW 9NhtT1iw5Uv2W1TAWXFsiXX46eeKs4n5A5QoxHHqiIvuKkYzgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJx3RAuHtOBQvGXl3aJ66/V67Mv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzE0NGQ3Y2EtZTVmOS0z YWNhLWJhZWItZTQ1Y2JlODQxODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHtUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACybsUGRMHDFUvJ9CmE0bMjKp+nFFylkds+y4kORrk+BikU9r25Jm3nQ BcJHRZTTHhuRim6KYzmx0LjkVZI5gjBrOEJkc2GdybkPruhZrq6Th9uH7tsY5c3Z NoJ006aO3rfmUuvkVDUEx1nVCq+h/7Awm2JidcmQ3jfhY6MIRSYEvXF80Cs9Y9j4 TjXATQZQrQBG5HdLDfvevlAXjjP4N0Iix5MQXC+nuMI9h2Z0pKI04z9IuP0OKEpl 7bMIgIlQ0ryXVUG5KPOOFfckxx5FaJhblV8e/jvU3uWuodlBHBWUVwAGz94BWhAp zjPTj2HPAUh88qikVOJeZ/5Ow+AfZ9g= -----END CERTIFICATE-----Generated at Sat Sep 6 05:21:24 2025 by rpki-client