$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0be7383b-f039-3a0e-be05-09237e81c39d.roa File: 0be7383b-f039-3a0e-be05-09237e81c39d.roa (raw, json) Hash identifier: 12vLRzCJIgK4eJtrgZV6ZSmIttC0k/m7j5AEP8AYEr8= Subject key identifier: 73:CC:76:A5:8F:BB:A0:FE:AA:37:7B:BD:F5:2F:5D:68:B3:C7:B0:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9514DF7C60682507C749880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0be7383b-f039-3a0e-be05-09237e81c39d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.123.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4d:f7:c6:06:82:50:7c:74:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=bf885605-01ec-40ed-9b1f-43a20f6f2103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:e4:e4:91:1e:0e:c0:b5:12:c5:9d:0a:8c: c2:29:9a:7c:ac:75:80:41:6d:95:2a:94:9b:91:3a: 88:b4:da:00:ba:a1:e5:cd:8d:e9:47:a6:75:eb:34: 62:d0:6f:12:40:d3:a3:44:b1:01:59:f8:a8:48:7f: 4d:36:dd:65:53:dd:8d:9c:e1:e9:fe:3a:c5:73:32: e0:69:02:64:72:dd:b0:82:0d:7e:36:17:3e:db:66: ea:8b:9e:04:37:3d:80:6b:bc:ee:d3:3e:0e:3a:6d: ae:ee:d8:34:76:ed:14:a0:fc:d9:04:b0:61:82:f5: 3c:87:7e:86:ad:4f:ed:5f:32:16:4a:7b:3d:9c:2e: 20:82:72:aa:17:a8:80:d7:f7:a2:07:44:0f:68:16: cc:7b:2d:a8:61:c6:fb:b3:79:e8:2e:79:ef:4e:8b: e4:c9:d6:0e:aa:87:8a:a1:36:d4:ab:25:f8:5f:72: 43:c4:ec:be:e9:d6:86:04:29:fa:ab:33:14:f6:56: 59:af:66:8e:f1:69:b4:86:86:1e:f0:5d:36:ac:cb: 3b:18:6c:4b:a1:71:fb:da:79:ac:45:36:5a:86:80: 6c:4c:99:f8:78:e3:ec:6a:ca:1b:c1:8c:77:56:f2: 8c:8c:2c:cd:4b:5e:c5:73:6f:0b:8a:9d:10:12:55: d0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CC:76:A5:8F:BB:A0:FE:AA:37:7B:BD:F5:2F:5D:68:B3:C7:B0:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0be7383b-f039-3a0e-be05-09237e81c39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ab:96:0e:27:fe:fa:b9:5a:40:07:76:42:c5:a5:b8:78:d3: a7:c4:1d:66:6f:3f:08:17:09:f8:54:03:55:a7:d4:5f:a1:61: 2b:97:af:c7:c2:cd:ae:55:ee:e8:91:2d:68:13:3c:e6:f7:81: 84:fc:d9:02:83:b6:06:a7:49:7c:2b:65:47:55:7a:0c:1a:76: bd:52:ec:0d:47:b8:ba:47:c3:65:88:59:5c:13:2c:71:16:86: b5:d2:1d:4d:f7:5e:f0:11:b8:8b:0c:31:79:f4:12:9d:50:7f: c1:0b:58:cc:6c:a6:08:81:9d:4c:2e:a1:92:e6:c2:db:d1:41: 4a:f4:ea:ec:99:9f:53:31:98:39:78:8c:8c:0c:92:1a:0b:89: a4:86:e1:35:f2:73:2c:81:f7:ce:7c:9f:65:cb:cd:49:5c:64: bf:bc:88:e6:bf:77:54:87:dc:d2:04:c4:d9:9f:d5:3e:16:8d: 50:c3:a7:3f:11:ce:cc:5c:11:9b:bf:1b:9a:e3:5a:71:32:7a: f0:bd:fe:d7:62:03:5f:8b:21:3d:c7:26:a3:71:19:72:c8:d5: 6d:71:3c:8f:55:c0:c7:65:39:0a:5d:8a:76:2d:f3:4e:9b:96: a5:cf:0d:7a:54:ae:43:95:08:0c:f7:a0:81:f9:1f:9b:f2:fe: fe:99:b1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU33xgaCUHx0mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmY4ODU2MDUtMDFlYy00MGVkLTliMWYtNDNhMjBmNmYyMTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0vk5JEeDsC1EsWdCozCKZp8rHWAQW2VKpSb kTqItNoAuqHlzY3pR6Z16zRi0G8SQNOjRLEBWfioSH9NNt1lU92NnOHp/jrFczLg aQJkct2wgg1+Nhc+22bqi54ENz2Aa7zu0z4OOm2u7tg0du0UoPzZBLBhgvU8h36G rU/tXzIWSns9nC4ggnKqF6iA1/eiB0QPaBbMey2oYcb7s3noLnnvTovkydYOqoeK oTbUqyX4X3JDxOy+6daGBCn6qzMU9lZZr2aO8Wm0hoYe8F02rMs7GGxLoXH72nms RTZahoBsTJn4eOPsasobwYx3VvKMjCzNS17Fc28Lip0QElXQcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPMdqWPu6D+qjd7vfUvXWizx7CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJlNzM4M2ItZjAzOS0z YTBlLWJlMDUtMDkyMzdlODFjMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaHtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSrlg4n/vq5WkAHdkLFpbh406fEHWZvPwgXCfhUA1Wn1F+hYSuXr8fC za5V7uiRLWgTPOb3gYT82QKDtganSXwrZUdVegwadr1S7A1HuLpHw2WIWVwTLHEW hrXSHU33XvARuIsMMXn0Ep1Qf8ELWMxspgiBnUwuoZLmwtvRQUr06uyZn1MxmDl4 jIwMkhoLiaSG4TXycyyB9858n2XLzUlcZL+8iOa/d1SH3NIExNmf1T4WjVDDpz8R zsxcEZu/G5rjWnEyevC9/tdiA1+LIT3HJqNxGXLI1W1xPI9VwMdlOQpdinYt806b lqXPDXpUrkOVCAz3oIH5H5vy/v6ZsZQ= -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:20 2025 by rpki-client