$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11c306e3-8ba6-3337-bfff-b07f5149b688.roa File: 11c306e3-8ba6-3337-bfff-b07f5149b688.roa (raw, json) Hash identifier: Ip1zt60X4YL0x/cFFvMPiFBlpH9s3OYTEJct/0p+hlM= Subject key identifier: 4B:12:C5:6B:06:6C:F9:2D:FC:CE:FD:38:20:75:7A:58:FA:95:B5:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2568D429BED542559C6C100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11c306e3-8ba6-3337-bfff-b07f5149b688.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.77.208.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:8d:42:9b:ed:54:25:59:c6:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d972cd1b-7970-4c90-a4ce-9d231e656fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:26:01:b5:e4:15:93:5e:8a:55:f7:f0:8e:31: 11:af:84:e5:5c:55:a4:0e:70:c9:43:2f:2b:d0:f2: d9:7d:34:22:11:d9:50:93:a4:7a:4e:54:eb:a6:9a: c6:86:d0:6c:02:8c:7a:d9:95:52:4b:43:8d:54:0a: 16:09:3d:16:f4:57:8f:66:2b:04:ad:52:7b:ae:7a: cc:80:06:18:79:3f:89:ef:c8:e9:7e:d0:34:27:ba: bc:b7:9d:92:32:0a:94:c6:58:e6:b4:48:90:ca:ce: e7:43:c2:7b:d0:ea:23:f7:16:aa:20:6c:02:e2:52: 35:b7:a2:60:9b:6b:f2:95:b4:6f:6f:7a:40:87:f8: 0b:12:39:d0:75:b3:31:42:6a:8e:95:96:d0:8a:e5: e1:cb:84:d6:ae:b9:c3:29:c1:86:b2:db:66:6d:f7: ef:f9:db:ea:d0:3e:d7:b5:08:63:7e:78:84:c6:52: 49:52:75:83:67:ce:71:23:f6:b5:3f:03:04:d6:9e: 2e:40:a7:1c:81:25:34:59:75:a8:00:51:9e:45:4d: 69:82:11:03:21:9d:04:95:01:c1:b6:8c:d1:37:f4: 58:e0:19:29:a9:25:f3:1c:c1:95:eb:06:c5:e6:8a: 41:ac:3c:b8:33:e9:85:f5:08:22:56:53:37:ac:7a: ad:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:12:C5:6B:06:6C:F9:2D:FC:CE:FD:38:20:75:7A:58:FA:95:B5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/11c306e3-8ba6-3337-bfff-b07f5149b688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.77.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ce:cc:51:70:a4:2c:da:71:33:4b:62:0b:f1:9e:fe:06:34: e0:b6:7e:9f:71:4b:aa:bd:c5:c0:4a:77:00:dc:e0:12:9a:85: 12:52:1d:4f:2b:1e:c6:96:eb:c8:46:5e:f3:92:f8:0f:3e:4b: c2:28:a9:a5:bc:74:35:97:e6:1a:3b:2d:69:7b:5f:2e:99:af: 30:fe:19:d2:ac:d2:0f:92:79:2c:f9:79:7e:16:56:ab:c8:e3: 5c:86:e8:43:d8:79:53:ae:62:54:3a:1b:4e:15:3a:4d:76:48: 40:2d:70:15:b6:69:e2:49:16:da:f9:56:b9:b0:49:5e:a8:4e: a6:69:00:e8:5e:87:50:31:3a:b7:7f:35:84:e1:71:fe:1a:7b: 9b:8a:21:0a:66:16:48:e0:06:09:e7:20:a2:a9:e5:bb:63:5c: eb:d8:65:44:9d:61:96:69:3f:9b:9d:c6:9f:ab:80:71:4a:ab: 3d:77:2f:35:7c:71:a6:9b:30:a2:59:fa:d6:9e:4f:a3:cb:e8: d7:86:10:6c:a3:ac:cc:9e:1d:13:dc:ce:a0:3d:ec:69:f2:43: ef:75:06:9b:5b:58:05:20:02:da:0d:f3:ce:ec:08:2b:c0:bd: d7:06:d9:cc:e2:86:f2:f8:a0:40:db:0f:8d:13:fe:c0:a6:d3: bd:21:17:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVo1Cm+1UJVnGwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDk3MmNkMWItNzk3MC00YzkwLWE0Y2UtOWQyMzFlNjU2ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCYBteQVk16KVffwjjERr4TlXFWkDnDJQy8r 0PLZfTQiEdlQk6R6TlTrpprGhtBsAox62ZVSS0ONVAoWCT0W9FePZisErVJ7rnrM gAYYeT+J78jpftA0J7q8t52SMgqUxljmtEiQys7nQ8J70Ooj9xaqIGwC4lI1t6Jg m2vylbRvb3pAh/gLEjnQdbMxQmqOlZbQiuXhy4TWrrnDKcGGsttmbffv+dvq0D7X tQhjfniExlJJUnWDZ85xI/a1PwME1p4uQKccgSU0WXWoAFGeRU1pghEDIZ0ElQHB tozRN/RY4BkpqSXzHMGV6wbF5opBrDy4M+mF9QgiVlM3rHqtkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsSxWsGbPkt/M79OCB1elj6lbVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTFjMzA2ZTMtOGJhNi0z MzM3LWJmZmYtYjA3ZjUxNDliNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaE3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXOzFFwpCzacTNLYgvxnv4GNOC2fp9xS6q9xcBKdwDc4BKahRJSHU8r HsaW68hGXvOS+A8+S8IoqaW8dDWX5ho7LWl7Xy6ZrzD+GdKs0g+SeSz5eX4WVqvI 41yG6EPYeVOuYlQ6G04VOk12SEAtcBW2aeJJFtr5VrmwSV6oTqZpAOheh1AxOrd/ NYThcf4ae5uKIQpmFkjgBgnnIKKp5btjXOvYZUSdYZZpP5udxp+rgHFKqz13LzV8 caabMKJZ+taeT6PL6NeGEGyjrMyeHRPczqA97GnyQ+91BptbWAUgAtoN887sCCvA vdcG2czihvL4oEDbD40T/sCm070hF7k= -----END CERTIFICATE-----Generated at Tue Nov 4 23:54:21 2025 by rpki-client