$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa File: dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa (raw, json) Hash identifier: jilGlELyY3Q3N300Ghiq64JYmIOYbXSsRKdcXGW8DR0= Subject key identifier: F5:2C:CF:DC:9E:78:2E:9B:FD:B7:B7:AD:90:E4:AE:D4:47:FD:89:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569C07C3B83F3E3EAA3C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.73.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9c:07:c3:b8:3f:3e:3e:aa:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=303597a0-4a25-48e9-815b-91c544d13741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dc:b9:a7:ae:00:8f:1e:87:4f:39:45:48:0a: 41:cf:6d:d1:0b:2b:11:0e:60:b4:5f:be:33:86:90: 6e:9b:8b:b6:13:8a:e8:e5:ed:78:39:6b:ab:d6:0d: d4:c0:c6:3c:09:8d:ca:89:74:4d:02:ed:26:45:a1: 00:c8:90:35:71:18:2a:97:53:66:86:05:09:ae:98: c0:ad:81:10:dd:d0:7b:24:54:c9:a3:9c:6d:7f:38: a3:23:3f:2d:23:56:ce:98:64:bf:7c:ec:68:08:24: de:2b:d6:b6:8a:2d:42:72:66:86:39:a1:67:c2:d0: 8f:cd:9a:2a:ed:33:50:c6:ce:56:49:95:a7:a4:97: cb:8e:27:93:c2:f8:b2:b1:1d:1f:91:76:b6:ba:23: 74:68:00:8e:a3:cd:18:cb:1b:23:01:2e:97:6f:d8: f2:fe:71:0c:4c:86:f9:93:c7:67:14:a5:dd:cb:b5: 57:c9:fd:f2:40:62:35:f7:7c:63:a6:c1:9e:e2:80: 9b:c4:89:7a:21:79:37:8e:4f:53:72:19:83:46:65: 35:4f:80:7a:65:6a:82:b6:8c:19:d1:f7:15:69:cf: c5:ca:58:40:ce:14:66:68:be:3b:95:03:65:5f:b6: 73:91:ee:7d:5d:8c:a5:36:37:ad:eb:a2:c6:44:66: 8d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2C:CF:DC:9E:78:2E:9B:FD:B7:B7:AD:90:E4:AE:D4:47:FD:89:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dce288b3-ba3d-3cee-915e-c80d75a1aaf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.73.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:fd:fe:64:9b:d8:0d:77:4f:2e:db:16:1b:2f:0a:f7:00:4a: 1b:9c:76:70:8d:4b:d7:03:69:8d:31:b6:02:6c:d6:ef:1b:7b: 1a:ba:d5:0f:07:82:87:64:90:15:37:77:a6:1d:c3:e3:4f:d7: 54:c5:66:30:28:6b:bf:79:6e:08:71:7c:42:a7:2a:be:e2:e0: c7:85:45:13:6d:04:58:49:57:4c:8b:d8:6d:6a:74:27:2b:52: a9:6f:14:49:bf:45:78:09:69:16:8b:43:44:c7:6a:21:8c:1f: d8:5d:0d:78:f0:37:ef:8e:3d:03:75:bb:50:b3:5f:74:29:47: c4:0c:0c:99:22:f8:3a:2c:aa:9e:1b:ef:44:3f:11:7b:e7:18: 83:18:9e:c3:9d:35:9e:e2:e0:08:40:f4:e0:1d:ef:e3:ca:48: ce:54:0e:52:2b:19:5d:cd:32:07:e4:33:7d:1e:dd:a3:a9:28: a4:a7:06:2f:20:44:d7:cc:54:36:cd:74:6b:3c:73:c7:2c:b9: 55:cf:bf:72:dc:df:0e:8d:b6:26:aa:81:bf:e2:f0:2a:99:0a: 67:18:67:03:63:60:be:72:5e:3d:68:9b:1e:5b:e9:f3:e8:5a: 17:35:51:be:af:8e:ce:30:2f:9e:5c:2e:06:09:9f:51:2f:3b: fd:dd:38:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpwHw7g/Pj6qPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzAzNTk3YTAtNGEyNS00OGU5LTgxNWItOTFjNTQ0ZDEzNzQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9y5p64Ajx6HTzlFSApBz23RCysRDmC0X74z hpBum4u2E4ro5e14OWur1g3UwMY8CY3KiXRNAu0mRaEAyJA1cRgql1NmhgUJrpjA rYEQ3dB7JFTJo5xtfzijIz8tI1bOmGS/fOxoCCTeK9a2ii1CcmaGOaFnwtCPzZoq 7TNQxs5WSZWnpJfLjieTwviysR0fkXa2uiN0aACOo80YyxsjAS6Xb9jy/nEMTIb5 k8dnFKXdy7VXyf3yQGI193xjpsGe4oCbxIl6IXk3jk9TchmDRmU1T4B6ZWqCtowZ 0fcVac/FylhAzhRmaL47lQNlX7Zzke59XYylNjet66LGRGaNawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUsz9yeeC6b/be3rZDkrtRH/YkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGNlMjg4YjMtYmEzZC0z Y2VlLTkxNWUtYzgwZDc1YTFhYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaEmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz9/mSb2A13Ty7bFhsvCvcAShucdnCNS9cDaY0xtgJs1u8bexq61Q8H godkkBU3d6Ydw+NP11TFZjAoa795bghxfEKnKr7i4MeFRRNtBFhJV0yL2G1qdCcr UqlvFEm/RXgJaRaLQ0THaiGMH9hdDXjwN++OPQN1u1CzX3QpR8QMDJki+Dosqp4b 70Q/EXvnGIMYnsOdNZ7i4AhA9OAd7+PKSM5UDlIrGV3NMgfkM30e3aOpKKSnBi8g RNfMVDbNdGs8c8csuVXPv3Lc3w6Ntiaqgb/i8CqZCmcYZwNjYL5yXj1omx5b6fPo Whc1Ub6vjs4wL55cLgYJn1EvO/3dOG0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:17:12 2025 by rpki-client