$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa File: 7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa (raw, json) Hash identifier: s1Zj49VUGYXQmJeiIEH0eJMZhQMwY0+ZdzcI6Ocl8kg= Subject key identifier: 4E:5D:D6:C7:FC:27:9B:0E:39:EA:9E:1A:36:C0:AC:3D:A3:C2:6F:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE8914100B606A5EB5C0959A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 104.70.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:41:00:b6:06:a5:eb:5c:09:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=f766f195-875f-43c8-b732-ff6f1e01e0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:48:e0:de:cb:42:f2:71:07:ca:5d:9a:12: 3f:2f:ee:9e:bc:f6:02:8c:ee:43:09:f7:60:00:19: eb:e1:79:f9:aa:34:27:98:5d:b3:7c:e7:21:25:ab: 68:2f:3b:d1:dd:9e:80:6e:e4:74:b5:5c:a4:0d:96: 10:48:16:d9:b3:4b:9c:10:f9:9a:c6:3c:75:63:e9: bf:48:1d:02:59:7f:d2:d9:a2:5d:45:e9:31:1a:1c: 75:ca:f8:b8:68:ed:26:51:da:16:ea:09:15:8e:b1: 16:1e:63:63:fc:73:3c:33:ee:27:c3:15:06:76:28: 73:c6:c7:59:b7:08:52:73:f8:04:16:16:b6:d1:79: 16:d7:85:c2:b6:32:0e:fd:73:0e:e5:9c:65:03:e0: b9:6e:60:74:2c:ab:9f:b9:c0:9d:5e:40:d1:ac:a3: d6:09:49:f0:c9:64:70:ce:85:85:1c:46:21:57:52: 1d:d2:1b:a0:2b:2d:c1:58:05:fd:19:4f:89:c1:8c: 57:3f:c9:df:32:9d:9c:85:a0:7a:8c:7f:cb:7a:8d: 49:7d:b5:b2:df:7a:f9:e1:34:db:33:75:55:95:ac: 82:3a:ef:25:d1:92:40:4c:09:99:6b:94:9c:46:2d: f3:5f:0d:7e:bd:02:e6:42:94:66:aa:c3:c2:ae:5b: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5D:D6:C7:FC:27:9B:0E:39:EA:9E:1A:36:C0:AC:3D:A3:C2:6F:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7c9acc95-b3f7-3d08-aefe-5523dd0e52ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.70.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:38:e5:be:71:51:10:fd:7a:a0:2b:ef:78:be:06:d6:77:47: fd:1c:8e:39:af:23:3d:ff:a9:d9:eb:f2:80:04:d0:c8:75:e9: 51:42:e8:ba:c5:b5:9d:ee:13:4a:be:57:38:c4:19:59:70:23: 51:b4:a4:cd:ec:16:ca:6d:9e:f6:8d:d5:12:04:e7:6a:96:55: cd:e3:a2:c0:61:26:ef:06:df:d8:2f:e7:02:41:25:a8:41:e0: a7:b4:72:f7:e9:e2:26:b8:57:4a:10:fd:f7:d2:ac:a8:b0:5a: 63:f0:55:e1:61:4b:35:8a:6a:b3:7a:9b:3a:71:35:1f:ab:be: 6f:a0:17:c4:b9:15:12:a2:48:72:86:a0:bb:08:83:dd:78:47: 67:e4:02:6a:64:ff:0a:c8:7d:78:92:4f:8f:20:6b:49:ba:a4: 68:50:2b:11:9b:13:61:9b:47:50:18:09:03:02:94:fd:20:38: 40:bf:3c:92:c1:4f:04:43:a3:cc:02:83:34:b7:d1:2b:cb:1f: 1b:9b:e0:ae:90:b4:d4:39:9d:80:c2:e8:78:09:fd:70:16:82: 43:ef:65:51:4f:f3:0a:a3:ee:20:c1:f9:6c:46:e2:07:ed:67: db:b8:0e:20:6b:8a:11:fd:d3:14:a2:e2:34:31:b1:93:50:29: 7c:a0:08:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUEAtgal61wJWaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk Zjc2NmYxOTUtODc1Zi00M2M4LWI3MzItZmY2ZjFlMDFlMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilJI4N7LQvJxB8pdmhI/L+6evPYCjO5DCfdg ABnr4Xn5qjQnmF2zfOchJatoLzvR3Z6AbuR0tVykDZYQSBbZs0ucEPmaxjx1Y+m/ SB0CWX/S2aJdRekxGhx1yvi4aO0mUdoW6gkVjrEWHmNj/HM8M+4nwxUGdihzxsdZ twhSc/gEFha20XkW14XCtjIO/XMO5ZxlA+C5bmB0LKufucCdXkDRrKPWCUnwyWRw zoWFHEYhV1Id0hugKy3BWAX9GU+JwYxXP8nfMp2chaB6jH/Leo1JfbWy33r54TTb M3VVlayCOu8l0ZJATAmZa5ScRi3zXw1+vQLmQpRmqsPCrlvLdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5d1sf8J5sOOeqeGjbArD2jwm8fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2M5YWNjOTUtYjNmNy0z ZDA4LWFlZmUtNTUyM2RkMGU1MmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEZ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs45b5xURD9eqAr73i+BtZ3R/0cjjmvIz3/qdnr8oAE0Mh16VFC6LrF tZ3uE0q+VzjEGVlwI1G0pM3sFsptnvaN1RIE52qWVc3josBhJu8G39gv5wJBJahB 4Ke0cvfp4ia4V0oQ/ffSrKiwWmPwVeFhSzWKarN6mzpxNR+rvm+gF8S5FRKiSHKG oLsIg914R2fkAmpk/wrIfXiST48ga0m6pGhQKxGbE2GbR1AYCQMClP0gOEC/PJLB TwRDo8wCgzS30SvLHxub4K6QtNQ5nYDC6HgJ/XAWgkPvZVFP8wqj7iDB+WxG4gft Z9u4DiBrihH90xSi4jQxsZNQKXygCMQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:17 2025 by rpki-client