$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa File: d17fe32e-8697-3d88-942e-551251da617e.roa (raw, json) Hash identifier: TjhcLvovjlZz26iSn6u89QuOllThfKD0htUWQFb6B7I= Subject key identifier: E6:F5:BE:EE:E4:62:B1:72:4E:A0:4F:2C:2B:66:9F:E3:84:D2:ED:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9515863F6E5432DC437BB20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 9002 IP address blocks: 104.121.66.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:58:63:f6:e5:43:2d:c4:37:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=fe9686d5-eb02-43fd-b395-c221cad1c59e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:12:38:67:bf:0d:5f:da:a6:94:f5:53:70: 58:a4:b3:77:05:ff:57:cf:a5:a9:f7:6b:a1:df:7e: fd:df:6c:87:87:89:a2:97:e2:5a:80:b4:02:3f:53: eb:6e:cd:76:9d:47:80:44:b1:50:29:fe:c2:12:c5: 60:85:94:1a:55:70:ac:9a:f4:0b:13:19:56:9a:f3: 9f:d8:22:52:53:67:38:1d:5b:43:4e:cb:92:1c:3a: 3c:17:4e:8a:ca:83:33:03:bb:bc:75:01:b8:0c:d4: 62:c8:b3:40:7f:c2:9d:27:a1:81:99:31:b1:b2:51: ed:bf:35:09:c5:1a:a4:b3:fb:89:ac:0f:1a:96:37: 59:35:aa:6c:21:73:39:e3:b5:de:9a:a9:03:b0:f8: ba:da:f9:ab:fb:4f:af:70:91:11:db:49:b1:74:b0: 8f:39:b7:51:ac:8f:1f:33:ae:fa:f7:60:e6:a5:7a: eb:6e:3f:bf:17:1f:86:18:7f:63:1f:2a:ff:b2:0b: f0:d0:8e:b0:8f:ef:9c:e8:4e:7a:9e:2f:9c:d6:e3: 2d:71:03:a2:7a:fe:74:fe:5f:a6:e1:a7:9b:bc:66: 5c:0e:6f:d2:04:50:53:e8:f0:df:4b:4a:29:20:7d: 00:cc:29:73:15:19:5d:f9:82:7e:e8:5f:59:71:07: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F5:BE:EE:E4:62:B1:72:4E:A0:4F:2C:2B:66:9F:E3:84:D2:ED:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d17fe32e-8697-3d88-942e-551251da617e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.121.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:33:f9:5f:25:a5:37:38:54:4e:f1:a0:50:ef:6e:49:05:89: 56:12:69:66:7b:a0:e0:38:77:d0:08:98:31:a5:8e:ef:a7:22: 89:60:c1:7c:bf:6c:b0:ac:d0:47:6b:5c:33:b3:81:96:8e:d8: 80:87:b2:db:62:6c:4d:2f:c9:6a:14:4e:64:79:13:c9:14:47: fc:de:8f:fa:cd:84:25:b8:9f:15:19:b1:18:81:16:2c:e3:ca: 50:f1:3c:34:12:58:be:6f:3b:42:19:05:4d:54:f9:d1:bc:da: 36:44:85:32:46:12:13:e9:f4:68:44:07:27:4e:5b:09:2e:7a: 60:49:1a:3c:2a:80:5d:02:f5:bc:a1:79:87:dc:49:73:40:4a: a3:56:2c:22:73:3c:53:5e:df:6c:ba:82:18:11:18:c3:09:59: 23:8e:ff:27:74:48:61:ee:d0:1d:7e:0b:a1:f6:bb:5c:97:5f: 7a:bb:87:47:36:d1:ba:c6:f3:0c:76:a3:d3:77:ae:f1:96:db: 6b:a2:4c:f0:7e:6b:f7:6e:63:7a:9a:6e:40:88:38:ad:f4:d7: b8:f0:10:fb:5e:52:ec:ef:ee:46:c4:e6:57:9c:39:7c:74:db: 3a:c5:fb:8d:dd:18:3b:6d:4c:04:02:d7:02:b0:56:29:4d:b7: af:b1:b3:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVhj9uVDLcQ3uyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZmU5Njg2ZDUtZWIwMi00M2ZkLWIzOTUtYzIyMWNhZDFjNTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopgSOGe/DV/appT1U3BYpLN3Bf9Xz6Wp92uh 337932yHh4mil+JagLQCP1Prbs12nUeARLFQKf7CEsVghZQaVXCsmvQLExlWmvOf 2CJSU2c4HVtDTsuSHDo8F06KyoMzA7u8dQG4DNRiyLNAf8KdJ6GBmTGxslHtvzUJ xRqks/uJrA8aljdZNapsIXM547XemqkDsPi62vmr+0+vcJER20mxdLCPObdRrI8f M67692DmpXrrbj+/Fx+GGH9jHyr/sgvw0I6wj++c6E56ni+c1uMtcQOiev50/l+m 4aebvGZcDm/SBFBT6PDfS0opIH0AzClzFRld+YJ+6F9ZcQdWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOb1vu7kYrFyTqBPLCtmn+OE0u25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDE3ZmUzMmUtODY5Ny0z ZDg4LTk0MmUtNTUxMjUxZGE2MTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaHlCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkz+V8lpTc4VE7xoFDvbkkFiVYSaWZ7oOA4d9AImDGlju+nIolgwXy/ bLCs0EdrXDOzgZaO2ICHsttibE0vyWoUTmR5E8kUR/zej/rNhCW4nxUZsRiBFizj ylDxPDQSWL5vO0IZBU1U+dG82jZEhTJGEhPp9GhEBydOWwkuemBJGjwqgF0C9byh eYfcSXNASqNWLCJzPFNe32y6ghgRGMMJWSOO/yd0SGHu0B1+C6H2u1yXX3q7h0c2 0brG8wx2o9N3rvGW22uiTPB+a/duY3qabkCIOK3017jwEPteUuzv7kbE5lecOXx0 2zrF+43dGDttTAQC1wKwVilNt6+xsz4= -----END CERTIFICATE-----Generated at Sun Sep 7 22:17:58 2025 by rpki-client