$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72d2702-2a40-3976-866a-f169a04fd72f.roa File: f72d2702-2a40-3976-866a-f169a04fd72f.roa (raw, json) Hash identifier: vw7jfm48OZwKQAeygwD10elqRyGP8bNnW1Qsyfm5KQw= Subject key identifier: 91:5C:4C:D3:95:93:9F:1D:FB:FC:DA:C3:76:74:35:11:25:A0:9F:61 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF95159DBA271239CA9DE40C8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72d2702-2a40-3976-866a-f169a04fd72f.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 55836 IP address blocks: 104.123.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:59:db:a2:71:23:9c:a9:de:40:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=d7d30d8c-cfb9-4d0e-985e-3877d8d3bafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:89:17:02:a5:e3:f3:83:9a:b9:81:7e:f2:cd: 83:97:6a:37:27:cb:79:82:e1:70:c2:2b:80:de:59: ad:2c:df:a5:a9:3f:6b:03:ae:b2:a2:99:50:05:6a: 42:a6:c2:0e:d0:8d:71:25:ac:e0:9d:8b:57:66:8e: f6:4e:7b:4c:a9:4b:e0:03:8a:b4:9e:ab:d5:2c:b5: 9f:ba:63:d9:b2:ef:24:c9:9c:f8:07:f8:7a:a6:8d: 9d:30:e5:59:88:04:fe:91:df:f7:e8:53:a5:16:03: c0:19:43:13:9d:e1:4c:56:c8:93:c8:09:81:a1:7e: c7:5b:01:46:20:db:8b:07:42:4b:3e:0c:11:66:fd: f7:4c:77:aa:f2:66:a6:9a:97:a3:7c:25:53:02:6b: 62:ad:dc:de:f8:49:4d:03:f3:47:1a:9e:f7:f9:c5: 21:0d:37:cb:48:47:6c:d0:30:77:5d:5a:06:dd:21: 59:45:7e:30:9f:4c:55:46:49:2a:f1:9c:9d:bb:53: c6:10:aa:18:39:12:59:2e:94:cb:70:1f:52:be:f6: f5:44:3c:40:d9:31:13:ec:3f:21:a4:10:8a:7c:17: 52:f6:09:81:ff:55:49:e5:b0:51:ba:85:23:16:fe: 51:88:50:c8:e5:a8:16:b8:ec:35:bf:b6:78:4a:9c: e2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5C:4C:D3:95:93:9F:1D:FB:FC:DA:C3:76:74:35:11:25:A0:9F:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f72d2702-2a40-3976-866a-f169a04fd72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:63:3c:8f:08:3d:11:11:e0:12:81:4e:56:45:ef:5d:28:c0: 3e:ec:7a:de:d0:b0:0f:a2:09:7c:f3:39:02:7c:f1:04:58:f6: 8f:24:d1:ab:99:c9:8c:71:67:75:00:73:aa:9b:41:47:ce:01: 15:a8:9e:c9:cc:bc:c7:4a:53:f0:12:c8:79:2a:8a:0a:50:89: f3:40:bd:bf:79:73:10:0f:91:e6:8c:d1:7d:da:cf:5a:41:6e: a5:62:d1:f8:3f:35:d4:06:c8:3c:56:17:c8:51:12:73:e1:7f: db:59:71:8c:e9:cc:00:96:8a:88:ef:fb:60:ef:1a:a6:a9:78: 00:3b:fd:4b:82:5c:78:63:1b:78:52:e8:a7:e8:a0:e6:3d:c1: 7f:09:59:ee:47:7f:70:9f:c6:fb:28:64:3e:6e:4c:0a:55:d4: 84:3d:f3:d4:95:c4:05:8c:12:f4:fe:16:5a:70:f8:88:b5:73: 37:24:40:08:b5:7f:a7:25:d3:93:59:8b:78:93:78:3d:bb:7c: 9d:2d:43:7e:97:57:f6:ac:68:1f:da:27:41:0b:1f:d3:0c:a4: 4d:0f:ea:73:9c:19:f5:1c:66:e2:85:b9:0f:d2:6c:74:c0:2c: ba:0c:d0:b1:0e:89:c3:fd:bb:9d:48:65:17:3d:10:c4:bb:8f: 02:83:82:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVnbonEjnKneQMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZDdkMzBkOGMtY2ZiOS00ZDBlLTk4NWUtMzg3N2Q4ZDNiYWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIkXAqXj84OauYF+8s2Dl2o3J8t5guFwwiuA 3lmtLN+lqT9rA66yoplQBWpCpsIO0I1xJazgnYtXZo72TntMqUvgA4q0nqvVLLWf umPZsu8kyZz4B/h6po2dMOVZiAT+kd/36FOlFgPAGUMTneFMVsiTyAmBoX7HWwFG INuLB0JLPgwRZv33THeq8mammpejfCVTAmtirdze+ElNA/NHGp73+cUhDTfLSEds 0DB3XVoG3SFZRX4wn0xVRkkq8Zydu1PGEKoYORJZLpTLcB9Svvb1RDxA2TET7D8h pBCKfBdS9gmB/1VJ5bBRuoUjFv5RiFDI5agWuOw1v7Z4Spzi8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFcTNOVk58d+/zaw3Z0NREloJ9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjcyZDI3MDItMmE0MC0z OTc2LTg2NmEtZjE2OWEwNGZkNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtjPI8IPRER4BKBTlZF710owD7set7QsA+iCXzzOQJ88QRY9o8k0auZ yYxxZ3UAc6qbQUfOARWonsnMvMdKU/ASyHkqigpQifNAvb95cxAPkeaM0X3az1pB bqVi0fg/NdQGyDxWF8hREnPhf9tZcYzpzACWiojv+2DvGqapeAA7/UuCXHhjG3hS 6KfooOY9wX8JWe5Hf3CfxvsoZD5uTApV1IQ989SVxAWMEvT+Flpw+Ii1czckQAi1 f6cl05NZi3iTeD27fJ0tQ36XV/asaB/aJ0ELH9MMpE0P6nOcGfUcZuKFuQ/SbHTA LLoM0LEOicP9u51IZRc9EMS7jwKDgk0= -----END CERTIFICATE-----Generated at Sat Sep 6 09:59:43 2025 by rpki-client