$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cff8ecf5-0c52-3218-9f03-3ee35eeba0b9.roa File: cff8ecf5-0c52-3218-9f03-3ee35eeba0b9.roa (raw, json) Hash identifier: 0hhG8XYhDNb+U1YROCKBrbkzOwC/zwa00oRJ37aiguA= Subject key identifier: DF:E3:B6:1B:63:00:16:23:ED:97:03:C9:C0:DC:35:98:55:9B:FB:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2568BAE2F9EF9984B71D340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cff8ecf5-0c52-3218-9f03-3ee35eeba0b9.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.76.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:8b:ae:2f:9e:f9:98:4b:71:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=87d7fa1b-f5a2-4483-82dc-75635f16e30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:54:58:e1:01:96:f8:f0:b5:ec:06:ed:e7:c9: e3:be:fd:d0:06:b5:51:cf:94:27:14:81:dd:e8:df: e6:8f:9c:d5:d7:2f:de:15:69:ff:25:0e:cb:7f:68: 66:29:4d:0c:b3:a7:23:b7:df:b1:58:9f:df:12:77: 52:6a:7d:38:b4:14:d2:18:94:6f:02:f8:71:e8:99: 30:f6:55:b6:0f:bd:86:f9:4e:e4:1c:12:8a:65:54: 1d:77:bb:27:20:f0:4a:bf:24:dc:86:61:d5:28:ef: c8:42:73:48:ea:82:54:c0:5f:4f:61:96:d2:c7:91: c6:e6:c1:7c:bf:45:22:d1:e9:74:69:f9:21:e2:45: c9:3b:eb:f9:dc:8a:be:20:f6:4a:de:74:99:70:9b: 10:44:dd:cb:e0:32:29:dd:65:1a:fd:d1:3c:21:9b: c4:54:97:e6:11:e1:a6:41:1d:b7:d8:b0:fb:c0:4b: 32:39:9e:11:c8:82:0e:24:6c:e8:23:2b:7f:66:9b: 0e:4f:75:e2:93:7f:b9:b1:ee:07:01:4c:7c:d2:ae: c1:ce:52:3d:c1:eb:7f:f9:4f:2c:6e:8d:ee:5b:cf: 30:a4:2a:14:6f:7d:bc:cd:65:bc:e9:62:ba:47:cc: e6:9d:97:7e:98:3f:52:c0:c9:16:23:96:eb:28:bd: ee:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E3:B6:1B:63:00:16:23:ED:97:03:C9:C0:DC:35:98:55:9B:FB:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cff8ecf5-0c52-3218-9f03-3ee35eeba0b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.76.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9c:8c:ea:84:c0:3e:dd:de:a5:51:c4:2b:24:c2:a4:7c:95: 55:d8:ce:ba:d7:35:bf:a9:8f:b5:47:c1:4a:8d:74:fd:6b:58: 9d:69:2c:73:e1:53:c6:ea:09:54:92:1c:00:0e:d2:9d:f8:83: 95:f1:50:54:2f:3e:0b:ba:45:6b:c8:6a:0a:d9:c9:c2:ab:b1: 8a:3c:26:fc:d2:2e:75:2d:af:cd:14:82:a1:5a:ac:e8:58:5e: 8e:7e:23:39:01:bc:87:03:f3:12:b5:2b:d8:9b:79:ad:f8:de: 3c:b0:23:60:11:57:2f:ef:89:f7:81:03:4a:d1:08:cd:36:1e: f6:ac:ca:a1:3b:4b:26:ee:2e:c2:be:d3:cc:17:ba:09:3b:74: f8:f7:50:f6:03:8e:dd:f4:90:7c:2b:5c:21:68:91:fb:63:a2: c0:3f:a9:68:1b:a8:e4:3d:21:f9:d3:fa:90:84:6a:85:10:1c: 95:ce:48:a6:09:8f:58:32:ea:6d:dd:e1:de:7e:be:77:72:40: 4e:b6:cf:06:28:54:c6:8e:9c:df:07:07:22:56:99:01:bd:46: 6e:cb:21:4d:e9:ea:cf:f9:db:52:33:22:d5:30:99:2b:f5:2d: 55:64:d2:9d:23:1d:9b:c3:5d:a2:e2:7a:04:2b:e0:8b:aa:00: c2:5a:d0:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVouuL575mEtx00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ODdkN2ZhMWItZjVhMi00NDgzLTgyZGMtNzU2MzVmMTZlMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FRY4QGW+PC17Abt58njvv3QBrVRz5QnFIHd 6N/mj5zV1y/eFWn/JQ7Lf2hmKU0Ms6cjt9+xWJ/fEndSan04tBTSGJRvAvhx6Jkw 9lW2D72G+U7kHBKKZVQdd7snIPBKvyTchmHVKO/IQnNI6oJUwF9PYZbSx5HG5sF8 v0Ui0el0afkh4kXJO+v53Iq+IPZK3nSZcJsQRN3L4DIp3WUa/dE8IZvEVJfmEeGm QR232LD7wEsyOZ4RyIIOJGzoIyt/ZpsOT3Xik3+5se4HAUx80q7BzlI9wet/+U8s bo3uW88wpCoUb328zWW86WK6R8zmnZd+mD9SwMkWI5brKL3uHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/jthtjABYj7ZcDycDcNZhVm/u2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZmOGVjZjUtMGM1Mi0z MjE4LTlmMDMtM2VlMzVlZWJhMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaEyyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIScjOqEwD7d3qVRxCskwqR8lVXYzrrXNb+pj7VHwUqNdP1rWJ1pLHPh U8bqCVSSHAAO0p34g5XxUFQvPgu6RWvIagrZycKrsYo8JvzSLnUtr80UgqFarOhY Xo5+IzkBvIcD8xK1K9ibea343jywI2ARVy/vifeBA0rRCM02HvasyqE7SybuLsK+ 08wXugk7dPj3UPYDjt30kHwrXCFokftjosA/qWgbqOQ9IfnT+pCEaoUQHJXOSKYJ j1gy6m3d4d5+vndyQE62zwYoVMaOnN8HByJWmQG9Rm7LIU3p6s/521IzItUwmSv1 LVVk0p0jHZvDXaLiegQr4IuqAMJa0CU= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:24 2025 by rpki-client