$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa File: 63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa (raw, json) Hash identifier: hpLw9+jTlTdw2xOucGSx6y00F7xo+eLR4ZdPu0a7Xes= Subject key identifier: B4:D9:28:2A:AC:3A:E0:FD:BB:08:6D:79:02:55:68:28:27:96:B6:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8913C1707D68A7C6C6922E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.81.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:3c:17:07:d6:8a:7c:6c:69:22:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=a886dcf8-847b-435b-b088-bfc2eae5db73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:42:3b:ed:11:25:62:fc:80:5c:a0:4f:97: 34:7f:d6:e0:0d:ed:c9:54:4a:a8:2e:30:01:66:aa: 4f:16:9b:0f:4e:71:e2:a2:07:fc:50:b2:cd:56:dc: 3e:b2:0b:0c:fb:1f:69:2c:2b:0d:74:40:90:c2:af: 8c:1e:7e:2e:a1:c1:ee:5b:47:9a:04:06:a1:c9:82: 04:10:2a:b8:15:aa:a3:38:4a:aa:a4:c2:3a:2f:77: 14:21:e1:ce:45:bc:e5:d6:86:a3:20:30:fd:19:45: 6f:8d:6e:19:dd:70:e1:c3:6d:cb:98:45:af:13:f5: 20:b6:a5:54:8b:e8:db:c9:c8:08:02:8d:b9:b9:4a: 93:c3:58:d8:79:48:e7:ae:f3:d4:a9:d7:61:6e:3d: 0d:97:2c:0d:88:d2:f5:6e:29:b5:72:f2:fd:e9:03: cd:3b:6e:3a:77:1e:25:c5:ac:5c:a8:28:2f:b9:07: 89:6e:b6:aa:6d:40:6f:88:cf:dd:a2:2b:85:ed:75: 80:c7:0a:9f:e0:65:f9:1f:9a:ca:e2:c3:6c:22:4c: 8e:ab:77:ed:7c:57:2a:d5:c5:ac:4e:cc:2c:31:92: c9:27:62:10:d0:28:35:c5:b9:e2:81:78:7c:a9:22: 9b:a8:b0:ea:b1:c4:bc:26:34:30:74:fa:16:f2:64: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D9:28:2A:AC:3A:E0:FD:BB:08:6D:79:02:55:68:28:27:96:B6:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/63941df4-9f9a-3d37-a6f1-1b9489b6b929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.81.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:4b:6f:b4:8d:d4:b2:e2:c9:51:83:da:df:ad:6f:4b:a0:3a: f3:c1:d1:f9:a8:be:41:de:cd:18:ee:c1:ac:0a:f0:2e:bb:b0: 57:5f:af:87:72:3a:72:e6:ca:6e:25:5f:a0:58:83:d8:a6:84: 4c:19:51:1b:75:05:34:ee:d7:65:d9:e5:86:a0:d4:a5:a0:76: 5e:2a:9f:4a:6d:e1:ed:c1:2b:0d:e6:57:b2:ca:fd:9b:62:f6: 5f:bc:15:1e:5a:bf:9a:d5:e6:1d:1b:f1:23:18:57:e3:f0:30: b4:f0:8f:62:fb:80:8e:43:54:9e:7c:58:0e:b1:63:1d:8a:50: ca:76:a0:d0:82:b1:2d:3a:9c:59:5b:8d:d2:1c:29:77:00:57: c6:5d:d4:51:78:02:7f:7d:23:73:c5:7f:3e:cc:48:36:19:bf: bb:16:58:03:93:39:a8:d3:65:c1:3f:c8:0c:bf:54:a0:81:65: 74:fd:5e:48:83:a5:4b:89:d1:a4:fa:5d:97:fe:36:c2:27:f7: 1b:1f:dd:64:83:7d:0c:ea:19:5f:80:7a:a7:5e:c0:06:34:24: da:a2:04:66:ac:89:c8:02:a7:cc:1e:ee:4f:c1:9e:3f:10:f6: f3:66:1b:18:a6:09:30:dd:06:a4:03:87:9c:7a:2d:3e:1f:a8: 83:5c:f7:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokTwXB9aKfGxpIuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YTg4NmRjZjgtODQ3Yi00MzViLWIwODgtYmZjMmVhZTVkYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgdCO+0RJWL8gFygT5c0f9bgDe3JVEqoLjAB ZqpPFpsPTnHiogf8ULLNVtw+sgsM+x9pLCsNdECQwq+MHn4uocHuW0eaBAahyYIE ECq4FaqjOEqqpMI6L3cUIeHORbzl1oajIDD9GUVvjW4Z3XDhw23LmEWvE/UgtqVU i+jbycgIAo25uUqTw1jYeUjnrvPUqddhbj0NlywNiNL1bim1cvL96QPNO246dx4l xaxcqCgvuQeJbraqbUBviM/doiuF7XWAxwqf4GX5H5rK4sNsIkyOq3ftfFcq1cWs TswsMZLJJ2IQ0Cg1xbnigXh8qSKbqLDqscS8JjQwdPoW8mSH0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLTZKCqsOuD9uwhteQJVaCgnlrb6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjM5NDFkZjQtOWY5YS0z ZDM3LWE2ZjEtMWI5NDg5YjZiOTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaFFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBLb7SN1LLiyVGD2t+tb0ugOvPB0fmovkHezRjuwawK8C67sFdfr4dy OnLmym4lX6BYg9imhEwZURt1BTTu12XZ5Yag1KWgdl4qn0pt4e3BKw3mV7LK/Zti 9l+8FR5av5rV5h0b8SMYV+PwMLTwj2L7gI5DVJ58WA6xYx2KUMp2oNCCsS06nFlb jdIcKXcAV8Zd1FF4An99I3PFfz7MSDYZv7sWWAOTOajTZcE/yAy/VKCBZXT9XkiD pUuJ0aT6XZf+NsIn9xsf3WSDfQzqGV+AeqdewAY0JNqiBGasicgCp8we7k/Bnj8Q 9vNmGximCTDdBqQDh5x6LT4fqINc98g= -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:46 2025 by rpki-client