$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d62472-c360-362c-81c3-4812035b218f.roa File: 91d62472-c360-362c-81c3-4812035b218f.roa (raw, json) Hash identifier: swarD1ycXHfmZ+4khViS1fMzy1+m/Rz0Nk+qY5ABoUs= Subject key identifier: 84:1E:AA:F3:EA:67:44:87:56:87:FD:9A:38:70:A1:57:74:CF:39:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AE891421E6AD9BECD341ED400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d62472-c360-362c-81c3-4812035b218f.roa Signing time: Tue 19 Aug 2025 13:00:40 +0000 ROA not before: Tue 19 Aug 2025 13:00:40 +0000 ROA not after: Mon 17 Nov 2025 14:00:40 +0000 asID: 16625 IP address blocks: 104.71.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:91:42:1e:6a:d9:be:cd:34:1e:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 19 13:00:40 2025 GMT Not After : Nov 17 14:00:40 2025 GMT Subject: CN=c9046258-0623-4071-b4a8-fa375e431d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:56:31:97:4b:15:ee:2d:71:4a:bc:70:84:76: 4a:9e:79:23:36:d5:b3:db:6c:98:94:d3:d7:d8:41: 5b:2c:57:5a:48:5a:3c:68:cf:a5:5b:a5:a3:5a:aa: 62:fe:f3:43:3e:e6:67:c9:0c:2f:0a:04:25:3b:ed: 45:63:b1:6d:70:97:24:ee:fc:47:21:18:f3:3e:18: 78:11:9b:43:4f:ee:bd:dc:8b:76:10:1a:3b:a4:35: 75:94:e9:af:b3:eb:62:20:e9:1c:23:3b:1f:0f:29: 42:96:a3:af:50:03:27:92:41:59:51:19:63:d4:0f: 48:2e:fd:e2:03:d8:77:a5:bc:61:d1:b3:d5:2e:78: e8:91:ab:82:f2:ed:80:89:90:be:7f:e7:be:3c:7f: c2:00:4a:1b:8f:14:c4:52:ce:3a:6d:0b:3d:81:f6: 0e:fc:52:f6:c5:b5:b6:5d:6a:0b:58:38:2d:55:7b: 3b:a2:34:01:86:3d:c5:ea:98:81:bc:b2:5b:8f:b7: e1:06:d0:ed:0b:74:5c:35:9e:89:c9:ad:fd:fb:e9: 47:fe:c5:a7:b0:72:ec:5f:91:5b:cc:5e:2c:dc:7d: 79:36:4b:73:4e:7c:9d:64:9c:f5:90:76:8b:46:fd: b7:95:e5:51:2a:e2:53:a8:b2:5a:4e:3b:16:36:d2: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1E:AA:F3:EA:67:44:87:56:87:FD:9A:38:70:A1:57:74:CF:39:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91d62472-c360-362c-81c3-4812035b218f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.71.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ad:05:b7:e6:80:7c:c7:11:c1:47:c3:27:92:68:dd:f3:c6: bf:96:a0:c8:ee:30:2c:cd:2d:81:0a:65:be:9a:0b:62:eb:57: 72:c3:f5:92:e7:b4:63:97:f6:5b:d1:92:30:22:64:8f:b2:6d: 04:7f:ba:64:fb:e3:51:74:26:ab:20:6f:2a:fa:35:bc:5c:92: 64:e7:8b:65:46:94:05:22:1e:b3:59:69:fd:2c:5d:12:ae:95: 62:1d:37:58:20:0f:00:c2:9d:dc:1d:34:90:fe:8d:eb:98:ea: 99:19:a3:37:87:34:1d:b5:d0:56:b9:db:1f:b7:c1:50:1d:af: 9f:ec:3d:19:1b:a5:1e:72:ed:34:de:e3:e4:4b:25:fa:77:52: c2:36:8f:17:d2:ac:fe:bc:6e:c5:7f:ef:37:9d:d0:ca:16:cf: e5:53:f1:d9:6d:01:6f:1e:87:2c:91:37:40:0f:15:10:32:bc: 96:cc:fc:22:40:9d:d9:bf:10:ee:26:c6:54:80:00:09:33:9f: db:61:f3:18:38:e6:22:99:e6:18:f0:00:12:2b:4a:7f:70:e0: 67:55:6c:19:b7:48:8b:65:be:24:b1:fe:7b:14:ab:2a:58:17: c1:80:b7:2a:6c:ca:ff:e4:2c:b4:b4:74:a8:be:e2:37:4a:bd: 1e:d8:4a:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErokUIeatm+zTQe1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk YzkwNDYyNTgtMDYyMy00MDcxLWI0YTgtZmEzNzVlNDMxZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFYxl0sV7i1xSrxwhHZKnnkjNtWz22yYlNPX 2EFbLFdaSFo8aM+lW6WjWqpi/vNDPuZnyQwvCgQlO+1FY7FtcJck7vxHIRjzPhh4 EZtDT+693It2EBo7pDV1lOmvs+tiIOkcIzsfDylClqOvUAMnkkFZURlj1A9ILv3i A9h3pbxh0bPVLnjokauC8u2AiZC+f+e+PH/CAEobjxTEUs46bQs9gfYO/FL2xbW2 XWoLWDgtVXs7ojQBhj3F6piBvLJbj7fhBtDtC3RcNZ6Jya39++lH/sWnsHLsX5Fb zF4s3H15NktzTnydZJz1kHaLRv23leVRKuJTqLJaTjsWNtJjXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQeqvPqZ0SHVof9mjhwoVd0zzlYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFkNjI0NzItYzM2MC0z NjJjLTgxYzMtNDgxMjAzNWIyMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaEeIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2tBbfmgHzHEcFHwyeSaN3zxr+WoMjuMCzNLYEKZb6aC2LrV3LD9ZLn tGOX9lvRkjAiZI+ybQR/umT741F0Jqsgbyr6NbxckmTni2VGlAUiHrNZaf0sXRKu lWIdN1ggDwDCndwdNJD+jeuY6pkZozeHNB210Fa52x+3wVAdr5/sPRkbpR5y7TTe 4+RLJfp3UsI2jxfSrP68bsV/7zed0MoWz+VT8dltAW8ehyyRN0APFRAyvJbM/CJA ndm/EO4mxlSAAAkzn9th8xg45iKZ5hjwABIrSn9w4GdVbBm3SItlviSx/nsUqypY F8GAtypsyv/kLLS0dKi+4jdKvR7YSr8= -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:49 2025 by rpki-client