$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa File: 0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa (raw, json) Hash identifier: CSXt2EuAdCvn4xZYwBsDDijb3SwRd+CN2kcj0EQzS4Q= Subject key identifier: A6:05:4D:5E:DA:68:73:8E:0A:93:58:37:CF:FF:1B:B3:C6:AF:86:0B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569A043F05513F4BC15D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.68.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9a:04:3f:05:51:3f:4b:c1:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=5872e3e0-5091-473f-b678-f3075c295281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:79:87:00:16:67:ec:75:a6:d0:46:3c:c2:15: 77:6e:a8:08:a4:b1:ef:73:75:71:46:af:9b:41:2a: 2a:4f:6f:4d:3e:42:d3:af:9a:55:f5:15:d3:a9:05: 74:bf:13:1f:79:8f:b5:90:f9:f4:87:19:63:bb:57: 79:02:d0:b5:56:95:c0:5f:78:52:ab:47:0e:b1:0f: ee:07:f8:81:67:f6:a6:7d:b1:e7:99:f5:01:f4:c5: f1:44:f5:95:be:89:9b:b6:bc:f5:bb:ca:90:9c:8d: ac:15:45:a7:ee:ab:7c:fc:89:d9:c3:cb:6d:64:4c: 8a:af:1c:dc:43:1c:8b:5e:01:da:fd:fc:10:b4:b5: 5d:75:59:11:da:b3:c0:26:c9:04:96:46:2e:70:d1: 66:fd:69:48:af:63:28:4a:b5:0b:ff:20:11:b7:9b: e6:00:8e:ce:51:f2:21:62:35:f4:fe:6f:b8:87:63: 65:10:58:f9:93:f6:a3:bb:bb:96:37:aa:d3:9d:e2: 33:f6:6f:6b:78:c3:e8:d8:b7:78:76:0c:22:d5:81: 01:e2:dc:1e:c0:9c:c1:b0:37:5e:c7:37:79:72:88: aa:6d:33:11:14:86:ee:b6:29:58:04:81:b8:e7:7c: e7:3d:0f:17:c2:7c:8b:98:35:e3:ed:e3:01:e7:ec: 87:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:4D:5E:DA:68:73:8E:0A:93:58:37:CF:FF:1B:B3:C6:AF:86:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e95fc8d-2a8d-3e30-8409-2881e39848d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.68.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:58:f9:ff:38:13:9b:df:03:b4:42:fa:35:00:cd:35:3b:1a: d8:dd:04:f2:46:0d:a6:ff:cd:c5:98:52:12:53:ac:b2:12:97: 39:a9:b8:af:33:03:4f:67:83:7b:05:3b:de:3e:92:aa:4e:d7: 17:69:45:09:9a:52:75:6d:99:fb:80:75:ce:7a:38:b4:6d:ab: 15:ec:75:9e:d1:a9:64:d8:bc:24:39:61:c4:76:31:c6:ce:23: 6a:de:c0:82:84:8d:7d:66:8b:5a:aa:b6:11:91:a4:d5:37:77: 3f:e5:09:2b:db:63:4a:e3:2a:34:07:35:63:8f:1d:f4:d9:87: 13:c4:87:88:f2:63:ef:fb:49:48:83:62:0a:b9:5f:16:f2:a1: 77:cf:5a:cb:38:4e:b2:d9:2c:5e:80:50:ad:ad:a2:55:e7:e6: c3:69:04:c1:de:bf:33:89:0c:35:d1:b6:f2:0d:30:e3:7e:df: ff:99:f0:5c:e1:b9:3e:26:26:bc:1b:87:92:2c:10:bc:1a:65: 72:a7:e7:d1:20:66:83:dc:27:e1:57:5e:e3:2f:59:79:90:ed: 78:24:37:ca:82:c4:90:18:0e:ae:26:0a:fa:3e:85:6b:1e:fe: c9:1b:ef:66:1d:7f:90:53:1c:6e:54:40:f6:49:89:46:69:bc: 4a:74:fe:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpoEPwVRP0vBXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NTg3MmUzZTAtNTA5MS00NzNmLWI2NzgtZjMwNzVjMjk1MjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HmHABZn7HWm0EY8whV3bqgIpLHvc3VxRq+b QSoqT29NPkLTr5pV9RXTqQV0vxMfeY+1kPn0hxlju1d5AtC1VpXAX3hSq0cOsQ/u B/iBZ/amfbHnmfUB9MXxRPWVvombtrz1u8qQnI2sFUWn7qt8/InZw8ttZEyKrxzc QxyLXgHa/fwQtLVddVkR2rPAJskElkYucNFm/WlIr2MoSrUL/yARt5vmAI7OUfIh YjX0/m+4h2NlEFj5k/aju7uWN6rTneIz9m9reMPo2Ld4dgwi1YEB4twewJzBsDde xzd5coiqbTMRFIbutilYBIG453znPQ8XwnyLmDXj7eMB5+yHfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYFTV7aaHOOCpNYN8//G7PGr4YLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGU5NWZjOGQtMmE4ZC0z ZTMwLTg0MDktMjg4MWUzOTg0OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxY+f84E5vfA7RC+jUAzTU7GtjdBPJGDab/zcWYUhJTrLISlzmpuK8z A09ng3sFO94+kqpO1xdpRQmaUnVtmfuAdc56OLRtqxXsdZ7RqWTYvCQ5YcR2McbO I2rewIKEjX1mi1qqthGRpNU3dz/lCSvbY0rjKjQHNWOPHfTZhxPEh4jyY+/7SUiD Ygq5XxbyoXfPWss4TrLZLF6AUK2tolXn5sNpBMHevzOJDDXRtvINMON+3/+Z8Fzh uT4mJrwbh5IsELwaZXKn59EgZoPcJ+FXXuMvWXmQ7XgkN8qCxJAYDq4mCvo+hWse /skb72Ydf5BTHG5UQPZJiUZpvEp0/uQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:23:38 2025 by rpki-client