$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa File: 33ed5294-5a11-3b28-98d3-492f7645ef6b.roa (raw, json) Hash identifier: sdYJFTTUL65Awd4Emu2qOJ1ptroP5juhrQyZuVuZRew= Subject key identifier: FB:08:ED:2E:57:F0:93:00:80:5B:BE:21:76:9E:DA:C9:38:13:85:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF951597B2EE1B67390BEC680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 3786 IP address blocks: 104.123.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:59:7b:2e:e1:b6:73:90:be:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=dfcb67ef-c5ac-4ad7-bf1f-3dc900ed8ce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cb:19:14:cb:0f:12:60:84:7f:a7:2a:c4:fb: b0:56:b7:9c:5c:db:b8:82:73:25:90:df:91:ab:c1: 21:16:2a:4a:be:65:3b:b1:46:d1:cf:7f:7c:fa:b1: a3:ba:ee:7e:cd:b1:06:51:d2:9b:41:5c:38:39:33: b4:3f:99:d3:98:87:fa:45:d1:0b:3a:a9:0d:8b:45: 76:44:ef:54:3d:0f:1e:92:36:cf:f2:0d:94:e4:c8: dd:e7:d6:3d:49:2c:f0:80:67:bd:ea:b8:f6:22:83: 88:3c:0e:22:a8:95:a9:ce:ca:f1:15:5f:07:a2:01: ea:d3:fa:ef:25:3a:28:e7:29:40:fc:4c:a4:d3:52: 73:af:53:66:d5:70:0b:21:9f:61:51:04:d5:60:34: ed:2e:97:46:e2:79:83:ca:c1:45:c3:b7:e0:3e:87: ca:63:44:36:c5:80:87:2b:0b:b3:e5:45:1d:5c:07: ce:86:99:31:32:be:3c:4b:6e:17:7b:fb:34:b0:ee: be:b9:10:e9:3a:81:31:d4:bb:ce:91:6b:88:b1:64: 59:5f:77:9a:2c:a3:98:eb:93:16:88:8e:55:f0:61: 12:1a:94:89:13:86:51:3b:db:37:be:1b:a0:79:a3: cf:8a:ff:8a:80:c0:1e:e6:0f:96:6d:77:71:a0:57: 3f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:08:ED:2E:57:F0:93:00:80:5B:BE:21:76:9E:DA:C9:38:13:85:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33ed5294-5a11-3b28-98d3-492f7645ef6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:55:dc:2b:68:67:5a:f8:e3:d9:9e:4c:66:45:d5:72:1c:33: ca:eb:54:09:99:80:43:82:22:de:f1:ab:57:90:f9:03:15:6c: b3:0a:47:fa:88:8c:8d:32:07:75:a6:74:71:e0:00:83:11:28: ff:75:3a:a7:5a:91:c8:54:77:3f:f7:d8:30:0c:36:25:58:cf: c1:19:f2:20:9f:b9:bc:85:3a:3a:a2:50:d0:a3:b3:2d:4e:54: 5d:63:18:6b:1a:79:d2:c0:1d:f0:5c:45:c7:2d:fb:a5:86:da: 4d:8c:9c:2a:c7:dc:59:18:8c:37:a7:2c:a2:30:6a:69:cb:ee: 1c:24:bf:9d:49:e8:4f:f0:81:2d:65:d7:ed:12:49:74:29:43: a8:3f:27:5a:81:69:d6:9c:20:2d:59:84:ed:aa:37:48:b1:52: b9:1b:42:80:53:2a:e5:45:59:da:33:7c:29:c4:fd:93:05:a6: f2:ab:cd:e6:83:4c:4c:55:a1:63:52:bd:16:a5:ef:21:09:15: 81:96:33:86:2e:00:15:a3:48:50:4e:f4:4d:6c:1b:8a:af:4f: 76:5b:5f:a2:1b:8f:f0:67:6b:c7:9a:7c:50:99:c8:26:97:be: df:46:5f:31:cf:bf:b4:fc:07:83:41:2b:0f:40:09:c1:de:95: 5d:d2:6b:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVl7LuG2c5C+xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZGZjYjY3ZWYtYzVhYy00YWQ3LWJmMWYtM2RjOTAwZWQ4Y2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApssZFMsPEmCEf6cqxPuwVrecXNu4gnMlkN+R q8EhFipKvmU7sUbRz398+rGjuu5+zbEGUdKbQVw4OTO0P5nTmIf6RdELOqkNi0V2 RO9UPQ8ekjbP8g2U5Mjd59Y9SSzwgGe96rj2IoOIPA4iqJWpzsrxFV8HogHq0/rv JToo5ylA/Eyk01Jzr1Nm1XALIZ9hUQTVYDTtLpdG4nmDysFFw7fgPofKY0Q2xYCH Kwuz5UUdXAfOhpkxMr48S24Xe/s0sO6+uRDpOoEx1LvOkWuIsWRZX3eaLKOY65MW iI5V8GESGpSJE4ZRO9s3vhugeaPPiv+KgMAe5g+WbXdxoFc/gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPsI7S5X8JMAgFu+IXae2sk4E4XHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNlZDUyOTQtNWExMS0z YjI4LTk4ZDMtNDkyZjc2NDVlZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHs0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFV3CtoZ1r449meTGZF1XIcM8rrVAmZgEOCIt7xq1eQ+QMVbLMKR/qI jI0yB3WmdHHgAIMRKP91OqdakchUdz/32DAMNiVYz8EZ8iCfubyFOjqiUNCjsy1O VF1jGGsaedLAHfBcRcct+6WG2k2MnCrH3FkYjDenLKIwamnL7hwkv51J6E/wgS1l 1+0SSXQpQ6g/J1qBadacIC1ZhO2qN0ixUrkbQoBTKuVFWdozfCnE/ZMFpvKrzeaD TExVoWNSvRal7yEJFYGWM4YuABWjSFBO9E1sG4qvT3ZbX6Ibj/Bna8eafFCZyCaX vt9GXzHPv7T8B4NBKw9ACcHelV3Sa4k= -----END CERTIFICATE-----Generated at Tue Nov 4 22:25:51 2025 by rpki-client