$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cab8584-e803-3a0e-8247-45706c9a90db.roa File: 2cab8584-e803-3a0e-8247-45706c9a90db.roa (raw, json) Hash identifier: iG9UHyUA8Z3cnFJVBTb3l8GbJxmetjr6CFLceXhJvOg= Subject key identifier: 80:69:5F:34:EA:AB:1F:C2:39:8D:81:89:4F:F2:02:B9:EA:65:7A:F8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569FA63A501A2EA0ACF400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cab8584-e803-3a0e-8247-45706c9a90db.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.79.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9f:a6:3a:50:1a:2e:a0:ac:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=778d8f0f-0cda-47eb-a773-0b3f5673eecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ec:95:ae:f5:8f:e3:b4:58:18:11:8f:50:43: f4:de:c0:06:4c:4b:8b:ba:af:37:bc:40:81:77:6b: d1:46:b8:ef:8d:50:dd:fa:73:00:5f:27:99:19:3c: 77:ec:fc:c7:b6:21:ee:d7:c6:7f:28:84:51:2a:65: 9e:8c:0e:1b:c9:73:98:1d:22:8e:c4:71:9c:84:97: fa:84:02:c4:bd:c1:53:66:f1:74:8d:42:f8:44:1e: 1e:df:44:6b:3d:40:a1:f4:27:66:04:c9:ae:2c:20: a8:e8:aa:c5:1a:62:f7:f5:53:86:5d:24:a3:20:9a: 41:c4:fc:0b:48:ba:25:1b:0f:7b:a8:10:8a:aa:a1: c9:fe:a0:89:a4:a9:66:7f:b5:e7:80:bb:61:8a:84: 2d:44:ab:5e:41:55:64:51:09:eb:73:72:a5:9c:36: 93:a5:47:e6:26:80:b9:ee:5b:13:91:6d:76:9b:5e: 1a:c5:cf:e7:75:89:b3:6a:92:81:20:fa:6a:2c:4c: 92:47:59:5f:43:1f:31:49:1f:ec:70:db:41:60:18: fc:e1:bc:c8:2d:62:9c:21:21:f3:8c:4a:72:85:cf: 4e:83:b4:00:0e:d7:62:43:44:1f:c5:ba:51:24:32: 2d:2b:a3:20:4a:93:41:05:7a:e8:50:51:6c:0a:c9: 35:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:69:5F:34:EA:AB:1F:C2:39:8D:81:89:4F:F2:02:B9:EA:65:7A:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2cab8584-e803-3a0e-8247-45706c9a90db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.79.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:8d:1a:07:59:37:13:42:ff:ec:5d:73:00:c7:6a:be:52:23: 22:5a:5c:4a:81:02:f8:20:1c:f7:cd:60:98:96:3a:fa:73:88: f6:39:fc:67:58:1d:ae:84:2f:bd:92:fb:f3:d5:62:bd:1d:86: 4b:1b:58:93:f6:64:bd:61:d7:c8:87:fa:ec:46:26:1a:36:1c: 9f:6a:35:d9:43:bd:58:3b:4e:1a:3c:39:94:22:40:2d:59:3d: dd:a2:1b:76:13:bd:7e:cd:cb:63:00:0c:65:fd:2c:d3:20:24: 2b:e1:d8:68:54:8e:c4:4a:51:ac:53:96:10:ad:9a:53:ba:ff: c0:29:35:5b:af:53:9c:a8:9e:68:8d:9c:0b:65:8c:b7:d5:bc: b5:17:9f:75:a8:b9:06:d7:c7:38:9f:c3:c2:b3:33:bf:85:90: 72:22:84:9b:2e:27:69:32:a0:98:4c:b4:d0:ef:b7:56:dc:02: 27:9b:bc:36:90:89:9e:45:7a:c5:ef:ef:68:4b:d7:45:70:bc: bb:ac:93:c8:55:63:9a:00:47:a6:23:0d:5f:1e:ac:31:0a:14: d4:4b:d3:65:fe:cc:cf:6d:c3:de:10:5c:4e:25:95:7d:26:c7: c2:0d:41:d8:41:27:8b:23:16:83:78:51:29:62:9c:8c:e6:31: 35:a9:b1:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVp+mOlAaLqCs9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk Nzc4ZDhmMGYtMGNkYS00N2ViLWE3NzMtMGIzZjU2NzNlZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+yVrvWP47RYGBGPUEP03sAGTEuLuq83vECB d2vRRrjvjVDd+nMAXyeZGTx37PzHtiHu18Z/KIRRKmWejA4byXOYHSKOxHGchJf6 hALEvcFTZvF0jUL4RB4e30RrPUCh9CdmBMmuLCCo6KrFGmL39VOGXSSjIJpBxPwL SLolGw97qBCKqqHJ/qCJpKlmf7XngLthioQtRKteQVVkUQnrc3KlnDaTpUfmJoC5 7lsTkW12m14axc/ndYmzapKBIPpqLEySR1lfQx8xSR/scNtBYBj84bzILWKcISHz jEpyhc9Og7QADtdiQ0QfxbpRJDItK6MgSpNBBXroUFFsCsk1nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBpXzTqqx/COY2BiU/yArnqZXr4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmNhYjg1ODQtZTgwMy0z YTBlLTgyNDctNDU3MDZjOWE5MGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaE9UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmNGgdZNxNC/+xdcwDHar5SIyJaXEqBAvggHPfNYJiWOvpziPY5/GdY Ha6EL72S+/PVYr0dhksbWJP2ZL1h18iH+uxGJho2HJ9qNdlDvVg7Tho8OZQiQC1Z Pd2iG3YTvX7Ny2MADGX9LNMgJCvh2GhUjsRKUaxTlhCtmlO6/8ApNVuvU5yonmiN nAtljLfVvLUXn3WouQbXxzifw8KzM7+FkHIihJsuJ2kyoJhMtNDvt1bcAiebvDaQ iZ5FesXv72hL10VwvLusk8hVY5oAR6YjDV8erDEKFNRL02X+zM9tw94QXE4llX0m x8INQdhBJ4sjFoN4USlinIzmMTWpsbk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:23:54 2025 by rpki-client