$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa File: 22cb9fda-457b-32d8-8a1b-9aff5a140100.roa (raw, json) Hash identifier: oC+ji9+88U2gHzHwIy9Ex3/4+L7/sMdvhOvLdmVIjKM= Subject key identifier: AF:A7:73:D5:B1:07:4C:A6:FD:93:B4:01:8E:69:A7:E5:57:2E:14:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913C8B9FA4B262D4951300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.86.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3c:8b:9f:a4:b2:62:d4:95:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=71f6f686-ecb1-43f8-b20b-102b6aa6186a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:78:b9:94:d5:b6:a4:41:11:f7:80:a7:e3:65: e0:7a:03:73:96:1d:c8:23:4e:37:97:cc:36:ec:c8: 10:a9:cc:16:d9:15:2b:8c:10:7d:9f:55:94:f6:4f: 95:ee:f3:5a:70:52:81:c1:30:67:af:3f:da:99:d8: f1:e1:ca:ee:38:e0:ce:a8:68:fe:bb:a9:3e:d1:41: bc:e3:ea:d4:21:07:2e:a0:76:db:9b:dc:96:72:54: b2:f7:b1:59:23:0b:32:f7:50:0f:24:fd:c5:f3:b7: a5:2a:51:0d:4f:54:9a:0e:95:46:91:61:a1:36:83: a3:ba:df:5d:b0:e5:f1:c4:36:74:82:6f:75:44:59: a1:44:50:c5:c0:a6:f7:73:82:c9:33:7d:57:34:44: 76:67:d7:d6:06:d9:40:9c:9e:69:7a:c7:45:87:9a: 73:70:45:15:f2:26:4d:94:9d:7c:5d:04:f2:3a:3e: e2:65:7e:7e:f4:2c:9c:98:b6:31:fc:3e:a5:bf:26: 86:c6:d4:19:3a:cb:fc:b8:17:66:c4:5a:76:f7:0d: 1f:5d:cc:b2:f7:14:cb:fc:a2:06:51:14:2e:53:33: f1:aa:b8:11:e5:b5:cd:dd:c4:cf:ac:8a:34:26:39: 3d:c4:20:e3:76:21:4d:cd:69:0f:bf:8c:17:34:20: fb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:A7:73:D5:B1:07:4C:A6:FD:93:B4:01:8E:69:A7:E5:57:2E:14:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22cb9fda-457b-32d8-8a1b-9aff5a140100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a2:56:c7:0c:2d:ef:6b:4a:4e:75:fa:aa:c5:d7:47:62:5c: a1:f5:86:c2:8a:16:82:32:76:09:2a:ca:39:eb:10:99:72:2d: 63:cc:2f:38:9c:13:39:b2:ee:8d:7c:55:ab:53:bc:5a:62:0d: b7:05:48:5a:51:1e:62:8f:96:9f:ac:02:60:9a:77:7a:ae:68: cb:ff:3b:2a:62:7a:4e:72:ca:54:eb:3b:4c:02:0a:68:54:8a: d3:83:af:68:f0:c0:20:20:da:de:84:74:8c:fb:60:f7:e7:c7: 40:4f:92:5f:01:9a:65:b3:c8:22:de:05:21:9d:84:be:04:2e: 7a:99:a0:8b:e7:a0:c1:eb:44:87:06:2d:5d:fa:1c:1a:46:69: f4:7f:75:fc:e8:cb:8e:a7:27:4d:99:5b:ac:00:07:f9:57:d1: 03:a1:da:86:da:62:56:e4:17:ea:a8:46:e8:43:2a:1b:75:36: 41:c1:61:f4:e3:f3:ef:5d:19:a2:19:f0:f3:e5:e7:f4:c8:2b: da:9c:22:94:76:c4:1d:a0:6b:b4:13:99:4a:62:96:32:5c:1a: 88:5f:9e:84:76:81:1a:05:3f:74:62:1a:53:a5:9c:eb:18:36: e9:51:69:47:9f:5e:f4:71:f8:b8:f2:be:b6:1c:dd:c3:37:67: 18:dd:32:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTyLn6SyYtSVEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk NzFmNmY2ODYtZWNiMS00M2Y4LWIyMGItMTAyYjZhYTYxODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHi5lNW2pEER94Cn42XgegNzlh3II043l8w2 7MgQqcwW2RUrjBB9n1WU9k+V7vNacFKBwTBnrz/amdjx4cruOODOqGj+u6k+0UG8 4+rUIQcuoHbbm9yWclSy97FZIwsy91APJP3F87elKlENT1SaDpVGkWGhNoOjut9d sOXxxDZ0gm91RFmhRFDFwKb3c4LJM31XNER2Z9fWBtlAnJ5pesdFh5pzcEUV8iZN lJ18XQTyOj7iZX5+9CycmLYx/D6lvyaGxtQZOsv8uBdmxFp29w0fXcyy9xTL/KIG URQuUzPxqrgR5bXN3cTPrIo0Jjk9xCDjdiFNzWkPv4wXNCD72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+nc9WxB0ym/ZO0AY5pp+VXLhQTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjJjYjlmZGEtNDU3Yi0z MmQ4LThhMWItOWFmZjVhMTQwMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+iVscMLe9rSk51+qrF10diXKH1hsKKFoIydgkqyjnrEJlyLWPMLzic Ezmy7o18VatTvFpiDbcFSFpRHmKPlp+sAmCad3quaMv/Oypiek5yylTrO0wCCmhU itODr2jwwCAg2t6EdIz7YPfnx0BPkl8BmmWzyCLeBSGdhL4ELnqZoIvnoMHrRIcG LV36HBpGafR/dfzoy46nJ02ZW6wAB/lX0QOh2obaYlbkF+qoRuhDKht1NkHBYfTj 8+9dGaIZ8PPl5/TIK9qcIpR2xB2ga7QTmUpiljJcGohfnoR2gRoFP3RiGlOlnOsY NulRaUefXvRx+LjyvrYc3cM3ZxjdMjs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:05 2025 by rpki-client