$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ab62d5-e0d8-39ca-b84f-a6832eb226b9.roa File: d0ab62d5-e0d8-39ca-b84f-a6832eb226b9.roa (raw, json) Hash identifier: 2XCDmPkhrpiPBsGiiBtgmbtcXrGAJ8nEFqkVs4w4fQU= Subject key identifier: 14:AF:95:5A:AB:48:94:85:78:97:2C:8D:A3:1F:F4:E1:B1:7A:24:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9514E05E134BD368CBDFB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ab62d5-e0d8-39ca-b84f-a6832eb226b9.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.123.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4e:05:e1:34:bd:36:8c:bd:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=6cbf9822-ab70-4487-bb55-a37f1225eefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a0:83:d0:f3:fa:2f:66:fa:c6:32:23:95:15: b1:3f:3f:ea:5f:1f:b9:12:f6:3a:f7:8e:74:f6:21: 9a:8e:36:d3:aa:e1:2d:90:09:d7:96:0f:36:3d:b0: 95:54:87:a6:05:64:13:f0:a0:a8:2e:4b:4b:d0:ca: a6:12:53:fd:a0:f3:ec:30:52:df:a3:87:86:28:c3: 0c:ad:5e:4e:23:f1:86:13:23:5b:05:26:08:4d:85: 1a:33:2f:a7:92:6b:ce:b9:ea:6a:12:49:2f:25:16: 92:a2:8d:b3:13:cb:6a:0c:49:30:2d:70:49:36:60: 8d:3d:cb:86:c4:29:36:71:69:ba:50:d0:db:83:65: 96:75:3f:49:3c:29:1b:a0:3d:15:60:bb:41:ba:ba: eb:9b:22:4d:9d:7e:91:2f:1e:b2:89:8e:82:75:90: 89:a2:e3:7d:b1:29:5a:44:02:c9:b1:7f:24:f1:93: 65:b6:8a:09:61:c4:1b:ec:11:b9:9c:e8:6c:1d:e6: cc:ee:df:01:1d:a9:2a:60:9c:3b:0c:b7:69:36:9b: 60:83:15:36:af:d7:dd:06:f8:d2:dc:1f:27:cb:ea: 2b:03:76:69:c2:c9:ce:16:3c:00:62:31:17:6f:3f: 8c:02:9c:0a:c2:b3:bf:fe:a0:6d:b8:bf:2e:42:00: 89:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AF:95:5A:AB:48:94:85:78:97:2C:8D:A3:1F:F4:E1:B1:7A:24:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0ab62d5-e0d8-39ca-b84f-a6832eb226b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:73:3d:d9:41:e5:bd:60:f2:fe:f3:ab:45:d7:42:fe:b7:46: cd:48:bc:5d:b0:08:51:5c:6a:8d:ef:58:44:bb:52:ee:2e:a2: 46:77:92:e2:65:ab:11:bf:d4:f8:30:ac:67:76:03:d2:a6:00: b6:34:ad:a0:c0:40:29:00:b0:b7:cd:7d:54:d3:eb:19:c8:ad: 20:23:66:d2:32:8d:7a:12:6b:4a:a5:e5:ba:b4:b4:db:50:0b: 6c:57:7d:a1:95:34:15:ab:64:45:c4:52:c8:d5:35:33:9e:91: 64:25:ab:d3:3e:91:55:59:11:92:9a:1f:83:11:fe:66:63:6e: 64:e2:d5:23:08:11:3a:6d:66:05:56:55:0b:67:ae:5f:40:49: 12:3d:2c:0e:b9:b2:66:89:24:80:58:2f:77:18:67:41:d0:d9: 08:fb:6a:64:4c:2e:fb:23:18:4a:17:1d:fe:98:1e:53:28:5d: 68:ac:46:1a:45:91:25:61:b9:1e:c2:5d:a8:e8:60:cb:ff:5b: 92:96:91:a5:7f:2b:88:a7:ec:c3:27:6d:53:fb:f7:73:50:b3: 29:54:57:bf:d3:a4:92:43:53:5a:1c:fe:05:86:0b:1c:f2:cc: 17:9b:73:c3:d8:28:ec:02:21:fc:b9:41:70:41:88:a3:54:af: 89:19:40:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU4F4TS9Noy9+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmNiZjk4MjItYWI3MC00NDg3LWJiNTUtYTM3ZjEyMjVlZWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qCD0PP6L2b6xjIjlRWxPz/qXx+5EvY69450 9iGajjbTquEtkAnXlg82PbCVVIemBWQT8KCoLktL0MqmElP9oPPsMFLfo4eGKMMM rV5OI/GGEyNbBSYITYUaMy+nkmvOuepqEkkvJRaSoo2zE8tqDEkwLXBJNmCNPcuG xCk2cWm6UNDbg2WWdT9JPCkboD0VYLtBurrrmyJNnX6RLx6yiY6CdZCJouN9sSla RALJsX8k8ZNltooJYcQb7BG5nOhsHebM7t8BHakqYJw7DLdpNptggxU2r9fdBvjS 3B8ny+orA3ZpwsnOFjwAYjEXbz+MApwKwrO//qBtuL8uQgCJIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSvlVqrSJSFeJcsjaMf9OGxeiQXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDBhYjYyZDUtZTBkOC0z OWNhLWI4NGYtYTY4MzJlYjIyNmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHuQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdzPdlB5b1g8v7zq0XXQv63Rs1IvF2wCFFcao3vWES7Uu4uokZ3kuJl qxG/1PgwrGd2A9KmALY0raDAQCkAsLfNfVTT6xnIrSAjZtIyjXoSa0ql5bq0tNtQ C2xXfaGVNBWrZEXEUsjVNTOekWQlq9M+kVVZEZKaH4MR/mZjbmTi1SMIETptZgVW VQtnrl9ASRI9LA65smaJJIBYL3cYZ0HQ2Qj7amRMLvsjGEoXHf6YHlMoXWisRhpF kSVhuR7CXajoYMv/W5KWkaV/K4in7MMnbVP793NQsylUV7/TpJJDU1oc/gWGCxzy zBebc8PYKOwCIfy5QXBBiKNUr4kZQFU= -----END CERTIFICATE-----Generated at Wed Nov 5 00:45:22 2025 by rpki-client