$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa File: c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa (raw, json) Hash identifier: FHXt0vI+2psC6wgbp18AnF+h3nQb7RIrwowSosqJuP0= Subject key identifier: 51:D7:BA:B5:F5:F1:B6:EE:D5:C5:D1:69:E8:3B:F2:2A:56:AF:B8:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF521603A3E9E662C7E9F8400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.95.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:60:3a:3e:9e:66:2c:7e:9f:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=ce4e3fb2-9338-45b0-bc00-122bfd1dd1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1b:da:90:1e:fc:b2:a0:10:62:d1:8d:b3:2b: 98:bb:81:01:0e:35:d0:ff:b6:6f:23:83:57:b8:46: a3:a6:cb:79:08:8f:2e:bc:48:d5:19:ad:85:ec:75: b1:69:28:8b:63:f9:d2:34:4c:74:7b:b8:70:eb:7b: ed:6a:35:79:51:61:69:ec:e1:5b:f7:0c:7f:d0:e9: c7:0e:de:c1:62:03:e8:28:e4:de:eb:c2:31:5d:be: 11:f6:97:d4:6f:f2:a7:91:63:e0:c0:72:16:26:cb: 20:93:4a:5d:28:fc:a2:32:53:0c:bf:0b:55:89:2f: d6:c0:29:08:08:ed:4a:ce:dc:28:f8:a5:d1:6c:8f: 5e:a8:e5:1a:7c:6b:a6:46:70:be:fd:3b:38:0e:c0: 25:93:f0:5a:3c:cc:30:31:93:48:7c:8a:2a:0b:8a: b3:ee:04:7c:a6:53:9f:07:4a:d7:46:59:b3:cd:fc: 72:51:b4:b9:40:10:cd:d7:d2:80:3f:69:70:58:6e: 9b:02:e2:52:76:ee:9d:8e:c6:e3:bd:20:03:25:42: bb:d9:24:34:ba:c6:17:c2:60:f3:42:b3:21:bd:27: 60:45:7c:a3:2f:b9:09:63:92:b9:c7:88:4c:09:98: a3:4e:de:a6:5b:ad:87:82:08:74:80:32:fe:37:a5: 7d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D7:BA:B5:F5:F1:B6:EE:D5:C5:D1:69:E8:3B:F2:2A:56:AF:B8:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3e4cacd-ad2d-348d-8354-f7a0f0dd184b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.95.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ff:cb:89:2f:e9:5d:7e:7f:a1:b4:b3:af:81:62:d7:22:63: fe:c8:32:a3:2c:56:40:aa:fc:69:2d:dc:66:d8:8b:8b:df:ec: f6:b5:2c:2c:9d:66:e5:fe:45:cb:85:f8:0a:3c:a5:b6:05:78: b4:39:29:a8:2d:2c:69:78:df:7a:54:24:72:15:e2:66:3c:1b: 8f:ec:c1:e2:75:bd:c3:91:c6:4b:54:a7:66:99:43:87:59:c9: d8:0e:c6:81:e5:43:b0:1e:47:3f:b6:6b:f0:c6:7e:4d:1a:9d: 10:48:c6:86:bc:63:5b:78:64:7b:cc:42:34:86:47:6a:47:7f: fa:f3:a5:01:3b:50:66:aa:9a:85:ae:92:8b:61:2c:fb:19:30: 46:6a:c2:15:62:93:69:80:5a:c3:32:98:30:d9:da:f5:b8:8d: ef:08:84:a0:3b:65:8c:88:b1:e7:e3:08:18:0a:c3:78:02:a2: a3:7d:f3:23:6e:87:4f:89:c1:01:ca:ad:45:9d:9a:85:9f:66: 44:ae:b4:c2:bb:51:1b:52:60:25:8c:9a:42:7a:3d:92:93:ec: 24:12:e3:a3:41:d4:89:b4:9c:0b:53:89:38:6a:1a:1a:f0:e5: 69:20:cc:a3:c2:7d:d8:2a:1f:12:4b:ac:29:67:6f:7e:58:9f: 24:c0:73:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWA6Pp5mLH6fhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2U0ZTNmYjItOTMzOC00NWIwLWJjMDAtMTIyYmZkMWRkMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBvakB78sqAQYtGNsyuYu4EBDjXQ/7ZvI4NX uEajpst5CI8uvEjVGa2F7HWxaSiLY/nSNEx0e7hw63vtajV5UWFp7OFb9wx/0OnH Dt7BYgPoKOTe68IxXb4R9pfUb/KnkWPgwHIWJssgk0pdKPyiMlMMvwtViS/WwCkI CO1Kztwo+KXRbI9eqOUafGumRnC+/Ts4DsAlk/BaPMwwMZNIfIoqC4qz7gR8plOf B0rXRlmzzfxyUbS5QBDN19KAP2lwWG6bAuJSdu6djsbjvSADJUK72SQ0usYXwmDz QrMhvSdgRXyjL7kJY5K5x4hMCZijTt6mW62Hggh0gDL+N6V9IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHXurX18bbu1cXRaeg78ipWr7iuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNlNGNhY2QtYWQyZC0z NDhkLTgzNTQtZjdhMGYwZGQxODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaF/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFD/y4kv6V1+f6G0s6+BYtciY/7IMqMsVkCq/Gkt3GbYi4vf7Pa1LCyd ZuX+RcuF+Ao8pbYFeLQ5KagtLGl433pUJHIV4mY8G4/sweJ1vcORxktUp2aZQ4dZ ydgOxoHlQ7AeRz+2a/DGfk0anRBIxoa8Y1t4ZHvMQjSGR2pHf/rzpQE7UGaqmoWu kothLPsZMEZqwhVik2mAWsMymDDZ2vW4je8IhKA7ZYyIsefjCBgKw3gCoqN98yNu h0+JwQHKrUWdmoWfZkSutMK7URtSYCWMmkJ6PZKT7CQS46NB1Im0nAtTiThqGhrw 5WkgzKPCfdgqHxJLrClnb35YnyTAczg= -----END CERTIFICATE-----Generated at Sat Sep 6 12:19:59 2025 by rpki-client