$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa File: c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa (raw, json) Hash identifier: +KPDdXJ9XOTJNJ14GyCkQybnAsbyBmW9x0E/HdoFdqM= Subject key identifier: CA:B1:FC:3F:19:29:8E:DE:37:FA:B0:28:F3:F2:8E:38:DA:E3:F2:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9515B67F33BE4FD25067880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.125.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5b:67:f3:3b:e4:fd:25:06:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=0ab8f118-e5e5-43b9-b9f4-1691b8946709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:41:b1:df:ae:c3:9a:be:4e:88:dc:92:01: 6f:11:cf:40:08:ee:05:a9:eb:ce:50:f2:bc:c7:8b: a2:35:4b:2e:14:bf:a8:d2:5f:37:29:db:ea:54:05: 2e:d7:e4:0f:be:f1:94:6b:53:0f:6f:ec:67:71:44: dd:8d:91:bf:6a:0c:37:4e:67:cc:ab:37:44:c9:22: a0:bb:60:ad:89:a8:b5:16:fc:29:0f:f7:45:00:90: e0:8b:46:70:56:e7:55:55:ff:db:76:f1:40:1b:a8: 00:56:4e:f4:e1:bd:1e:79:58:9d:33:bc:ae:7c:79: 81:46:22:d3:e1:2d:d0:72:1f:83:51:42:38:e2:ec: 16:fa:c0:55:2f:21:1c:1e:e9:cc:22:b4:af:7b:b2: 4d:cf:99:54:24:62:cc:85:28:be:71:2b:3b:d9:10: 63:e1:20:2d:48:25:39:f4:cc:8f:54:05:96:36:db: 25:58:c7:aa:ba:9e:02:16:c4:80:6b:93:4f:a1:f8: a5:fd:f1:67:e9:58:f0:27:ab:36:f2:cc:35:29:24: 3c:09:5b:6a:06:91:7c:d0:d5:e0:40:17:42:d3:c2: d1:bf:ad:dc:b4:20:28:66:a6:05:84:a7:ac:53:2c: 52:a5:37:74:95:75:d5:3e:64:15:0d:a5:76:55:be: 31:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:FC:3F:19:29:8E:DE:37:FA:B0:28:F3:F2:8E:38:DA:E3:F2:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1aeb20f-3bff-304a-8815-9792e7c0d8a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.125.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:0e:56:74:46:ce:53:18:68:54:27:2d:5a:a7:ea:3e:a0:82: e8:72:8d:2c:04:98:f6:ae:83:52:4d:61:f4:84:1b:36:e0:42: 79:fd:27:cc:8d:aa:63:ad:4f:ec:34:55:75:7b:26:50:e0:21: 43:6e:c9:0b:97:66:a5:c6:6a:9c:18:82:ae:4d:1d:fa:25:bc: a3:65:bf:87:91:4a:cb:01:52:04:c8:e2:e6:ce:7e:70:05:b5: 93:ab:11:df:c3:90:7c:24:10:e7:ef:16:21:3e:f1:b9:02:ad: f5:1b:07:76:b6:bb:f1:3a:d4:d7:fb:fa:08:d2:60:b2:51:97: 92:2d:55:3a:0b:ec:bf:35:b9:72:78:a3:9b:e2:a0:6c:84:e8: 61:db:8f:9a:37:71:d2:79:7c:0f:c1:b3:55:78:b3:c7:c2:88: 50:e1:04:e9:95:52:9d:ed:bb:02:85:6d:35:76:88:8b:ef:47: 6f:18:47:3a:19:cc:c5:84:b1:24:2a:25:15:b1:1e:8a:14:ba: d9:e1:b4:38:4b:4a:2c:49:17:b7:07:b8:2d:f0:2c:8e:95:d6: a6:d2:3e:81:39:65:c0:26:fd:8e:a8:ad:eb:f7:3d:4b:e1:f5: 69:eb:47:4d:e8:ad:ee:11:7f:cf:e2:9f:92:98:74:f0:87:1c: 06:c3:90:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVtn8zvk/SUGeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MGFiOGYxMTgtZTVlNS00M2I5LWI5ZjQtMTY5MWI4OTQ2NzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBZBsd+uw5q+TojckgFvEc9ACO4FqevOUPK8 x4uiNUsuFL+o0l83KdvqVAUu1+QPvvGUa1MPb+xncUTdjZG/agw3TmfMqzdEySKg u2Ctiai1FvwpD/dFAJDgi0ZwVudVVf/bdvFAG6gAVk704b0eeVidM7yufHmBRiLT 4S3Qch+DUUI44uwW+sBVLyEcHunMIrSve7JNz5lUJGLMhSi+cSs72RBj4SAtSCU5 9MyPVAWWNtslWMequp4CFsSAa5NPofil/fFn6VjwJ6s28sw1KSQ8CVtqBpF80NXg QBdC08LRv63ctCAoZqYFhKesUyxSpTd0lXXVPmQVDaV2Vb4xKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqx/D8ZKY7eN/qwKPPyjjja4/KVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzFhZWIyMGYtM2JmZi0z MDRhLTg4MTUtOTc5MmU3YzBkOGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaH3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIOVnRGzlMYaFQnLVqn6j6gguhyjSwEmPaug1JNYfSEGzbgQnn9J8yN qmOtT+w0VXV7JlDgIUNuyQuXZqXGapwYgq5NHfolvKNlv4eRSssBUgTI4ubOfnAF tZOrEd/DkHwkEOfvFiE+8bkCrfUbB3a2u/E61Nf7+gjSYLJRl5ItVToL7L81uXJ4 o5vioGyE6GHbj5o3cdJ5fA/Bs1V4s8fCiFDhBOmVUp3tuwKFbTV2iIvvR28YRzoZ zMWEsSQqJRWxHooUutnhtDhLSixJF7cHuC3wLI6V1qbSPoE5ZcAm/Y6orev3PUvh 9WnrR03ore4Rf8/in5KYdPCHHAbDkEI= -----END CERTIFICATE-----Generated at Sat Sep 6 05:10:09 2025 by rpki-client