$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa File: d521682a-df3e-34d3-ab3e-27bd263e2578.roa (raw, json) Hash identifier: +5vVM4GW+bZaj0TwepLImd0B8PawIDwGI0UohVtxBjE= Subject key identifier: 74:46:3E:63:EA:F3:EB:93:3D:99:83:E5:40:75:AE:D3:C7:DC:E3:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF951587553FAF334DECC43C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 35994 IP address blocks: 104.121.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:58:75:53:fa:f3:34:de:cc:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=69762da9-d85f-4ee4-8c40-499255cdf92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b6:a7:6f:28:2c:fa:55:10:95:f2:08:46:2f: 52:7a:6d:1e:d5:a5:fb:50:21:2f:84:d9:df:52:6a: ee:bf:2d:cc:23:2d:75:67:60:75:a3:6e:73:12:54: 30:71:29:8b:9a:23:8b:36:79:5e:8c:f9:6b:a1:ec: 7b:46:19:5e:c3:65:7c:36:6e:c3:69:64:ea:d1:ea: 04:70:a1:c1:ab:a6:e2:8f:30:78:a7:06:49:2d:d3: b9:14:d6:36:c6:71:8e:b5:35:11:28:ee:6e:45:4d: 1d:2d:ac:b8:1d:09:3f:a0:9b:e9:33:bd:84:4d:41: 73:d8:b3:ef:aa:78:be:83:72:2d:1a:26:7e:ba:2d: a1:3a:55:38:02:e1:6a:19:c5:d4:ae:83:98:1a:2f: f0:13:d0:bf:20:e6:c5:a3:fb:e0:35:da:c9:c2:04: 86:e2:15:a0:71:2d:8f:f5:e0:cd:88:a6:6c:cc:0a: c9:89:56:61:c2:1a:de:d4:f2:aa:db:18:66:2d:ef: ea:4d:f7:79:91:bf:c8:bf:7f:23:16:05:93:ff:5f: 81:55:54:43:3a:62:ed:7c:73:3b:f8:77:46:3d:cb: 79:fe:7b:c3:10:ad:5a:85:4a:54:e5:5d:9c:91:0a: dd:a2:af:f9:5d:ed:54:c9:c5:c4:68:4b:5b:85:44: 66:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:3E:63:EA:F3:EB:93:3D:99:83:E5:40:75:AE:D3:C7:DC:E3:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d521682a-df3e-34d3-ab3e-27bd263e2578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.121.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:b5:99:ea:c4:4c:e4:ca:38:a7:03:27:dc:9c:c6:1f:4b:b0: 20:e4:ae:b0:47:eb:cb:1f:f0:be:0f:51:a9:f0:41:64:43:ea: 42:69:cd:f7:1e:7f:8c:e7:43:3d:da:a0:8f:04:49:f7:33:3b: 58:52:a2:89:59:99:c1:6b:91:9f:e8:1a:00:72:78:d9:78:ea: d5:9e:55:b6:15:22:43:59:2c:ac:2e:19:f6:01:2f:92:33:f4: be:97:fe:da:be:da:3d:14:d3:56:da:66:f5:93:19:6f:90:16: 9d:55:7b:97:b3:bc:a4:5f:89:14:51:fb:e0:46:e0:62:47:09: 76:8c:07:c4:15:80:16:69:d2:bd:f7:9a:13:f9:7b:5a:9f:56: 26:ed:68:15:de:2a:d2:83:ec:1a:15:6b:f7:15:ea:85:b7:c5: 3d:cb:2b:77:f9:91:fa:08:46:93:af:07:aa:58:9a:3e:43:f8: 01:cf:55:a9:5c:9f:ca:1c:0a:98:23:5e:f7:87:b1:ec:2c:e8: 93:0b:8d:f4:00:4a:81:83:e9:db:78:2e:71:bd:94:fb:20:37: 5e:21:e8:6f:8a:3e:e5:d6:26:3e:e3:33:41:a9:29:2d:ea:cf: 81:6e:39:f1:f4:52:2a:c9:5f:c4:a7:62:d0:b6:55:5b:4d:33: 7b:52:a4:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVh1U/rzNN7MQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk Njk3NjJkYTktZDg1Zi00ZWU0LThjNDAtNDk5MjU1Y2RmOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbanbygs+lUQlfIIRi9Sem0e1aX7UCEvhNnf Umruvy3MIy11Z2B1o25zElQwcSmLmiOLNnlejPlroex7Rhlew2V8Nm7DaWTq0eoE cKHBq6bijzB4pwZJLdO5FNY2xnGOtTURKO5uRU0dLay4HQk/oJvpM72ETUFz2LPv qni+g3ItGiZ+ui2hOlU4AuFqGcXUroOYGi/wE9C/IObFo/vgNdrJwgSG4hWgcS2P 9eDNiKZszArJiVZhwhre1PKq2xhmLe/qTfd5kb/Iv38jFgWT/1+BVVRDOmLtfHM7 +HdGPct5/nvDEK1ahUpU5V2ckQrdoq/5Xe1UycXEaEtbhURmbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRGPmPq8+uTPZmD5UB1rtPH3OMNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDUyMTY4MmEtZGYzZS0z NGQzLWFiM2UtMjdiZDI2M2UyNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHlIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi1merETOTKOKcDJ9ycxh9LsCDkrrBH68sf8L4PUanwQWRD6kJpzfce f4znQz3aoI8ESfczO1hSoolZmcFrkZ/oGgByeNl46tWeVbYVIkNZLKwuGfYBL5Iz 9L6X/tq+2j0U01baZvWTGW+QFp1Ve5ezvKRfiRRR++BG4GJHCXaMB8QVgBZp0r33 mhP5e1qfVibtaBXeKtKD7BoVa/cV6oW3xT3LK3f5kfoIRpOvB6pYmj5D+AHPValc n8ocCpgjXveHsews6JMLjfQASoGD6dt4LnG9lPsgN14h6G+KPuXWJj7jM0GpKS3q z4FuOfH0UirJX8SnYtC2VVtNM3tSpIw= -----END CERTIFICATE-----Generated at Sat Sep 6 05:17:43 2025 by rpki-client