$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3750f2e-4896-3bbe-89b1-b4510d5786e7.roa File: e3750f2e-4896-3bbe-89b1-b4510d5786e7.roa (raw, json) Hash identifier: YXVEt0nAMJYS7apiiuE4AY5En8Xwlp8YMNyLVFQsK2s= Subject key identifier: A6:EB:D4:B5:40:44:5F:79:7F:DC:C6:73:9C:DB:87:05:30:58:BE:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF2569A16AB8BD1C23A522480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3750f2e-4896-3bbe-89b1-b4510d5786e7.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.68.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:9a:16:ab:8b:d1:c2:3a:52:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=43872ae8-ae69-4b3e-ae40-4738de5ce527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8d:3a:a1:18:11:a0:e4:70:6d:ab:16:d0:9c: ba:46:6b:9a:2d:27:ff:ca:9d:ae:4d:32:7c:80:5c: 87:24:68:f1:52:90:d5:13:15:7a:52:77:ab:24:b9: 76:d1:2c:dd:a9:a9:07:bc:db:c3:c8:53:86:4e:09: a1:6c:71:f6:2d:41:d2:20:20:68:7e:e2:15:73:70: e6:cf:45:66:f5:7f:ed:7d:7f:8d:b6:e0:6a:ba:5a: 64:e2:fe:33:31:d2:d5:f4:68:4c:93:27:33:11:92: 1f:1a:00:02:88:54:06:ef:74:df:7b:ce:94:d1:db: c0:03:f2:58:a8:07:b6:44:79:53:51:34:17:6c:4a: 0a:c3:d4:fa:30:0c:d6:2a:20:34:55:22:4c:45:23: c3:ac:b9:e9:39:78:a8:b8:39:9c:73:25:5f:7c:3b: 73:e7:c6:d3:23:84:d7:fa:97:b1:22:a5:8a:99:39: 68:71:0d:26:ab:d7:da:df:9f:ff:03:78:89:5b:b2: 06:77:40:4f:ef:20:fd:f5:c2:8a:8c:32:13:53:98: 7c:c3:b9:82:8e:5e:83:0a:a2:41:ca:6f:b2:d8:4a: 01:3d:a2:36:6b:de:00:26:ad:39:50:40:65:8e:a4: ec:59:47:d2:4e:b5:8a:ee:c7:26:a7:02:5b:e9:c9: ec:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:EB:D4:B5:40:44:5F:79:7F:DC:C6:73:9C:DB:87:05:30:58:BE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3750f2e-4896-3bbe-89b1-b4510d5786e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.68.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:70:fa:d8:a6:6a:02:8f:eb:6f:b0:d8:b4:76:a3:04:e7:77: 4b:e3:4c:1e:42:11:ce:fb:6f:b7:ba:42:c7:d7:7d:a3:9c:51: 2a:a7:c8:a4:7d:2b:5a:75:ad:88:91:de:3e:a2:2d:18:56:aa: 84:a9:63:11:60:c9:3e:70:90:91:62:99:de:06:7c:fc:d6:06: 91:30:8a:38:88:f4:d4:10:d9:91:05:86:42:68:8f:01:cf:a9: a3:d8:1f:bb:4b:d1:bf:d3:e9:c2:87:58:d9:d5:ec:fd:ee:e6: 8a:97:4d:08:8b:d0:a9:c6:ae:de:ec:5b:1c:a7:d0:af:b5:47: 7b:58:ee:7e:24:b8:b0:ca:b0:90:79:57:67:f8:3b:32:11:c3: 24:64:39:9f:c8:81:4c:20:cc:85:9a:fb:3b:51:ae:63:de:0a: f4:d0:6e:17:11:03:23:ce:97:67:d2:d5:1c:51:1f:20:3d:63: 82:e2:26:48:24:50:93:3e:db:16:46:12:42:4b:69:61:ea:e6: 72:0f:33:24:d7:c2:ae:6b:a0:3c:b6:4a:49:a0:5a:e5:aa:a4: cd:1c:59:55:0b:cb:87:a1:8a:f7:c7:a1:90:86:af:f5:dc:8a: 30:77:63:cc:42:a3:64:d8:c7:33:ec:fe:99:43:88:ff:f7:6d: 99:9a:f5:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVpoWq4vRwjpSJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NDM4NzJhZTgtYWU2OS00YjNlLWFlNDAtNDczOGRlNWNlNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo406oRgRoORwbasW0Jy6RmuaLSf/yp2uTTJ8 gFyHJGjxUpDVExV6UnerJLl20SzdqakHvNvDyFOGTgmhbHH2LUHSICBofuIVc3Dm z0Vm9X/tfX+NtuBqulpk4v4zMdLV9GhMkyczEZIfGgACiFQG73Tfe86U0dvAA/JY qAe2RHlTUTQXbEoKw9T6MAzWKiA0VSJMRSPDrLnpOXiouDmccyVffDtz58bTI4TX +pexIqWKmTlocQ0mq9fa35//A3iJW7IGd0BP7yD99cKKjDITU5h8w7mCjl6DCqJB ym+y2EoBPaI2a94AJq05UEBljqTsWUfSTrWK7scmpwJb6cnsEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbr1LVARF95f9zGc5zbhwUwWL6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM3NTBmMmUtNDg5Ni0z YmJlLTg5YjEtYjQ1MTBkNTc4NmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDaETwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENw+timagKP62+w2LR2owTnd0vjTB5CEc77b7e6QsfXfaOcUSqnyKR9 K1p1rYiR3j6iLRhWqoSpYxFgyT5wkJFimd4GfPzWBpEwijiI9NQQ2ZEFhkJojwHP qaPYH7tL0b/T6cKHWNnV7P3u5oqXTQiL0KnGrt7sWxyn0K+1R3tY7n4kuLDKsJB5 V2f4OzIRwyRkOZ/IgUwgzIWa+ztRrmPeCvTQbhcRAyPOl2fS1RxRHyA9Y4LiJkgk UJM+2xZGEkJLaWHq5nIPMyTXwq5roDy2SkmgWuWqpM0cWVULy4ehivfHoZCGr/Xc ijB3Y8xCo2TYxzPs/plDiP/3bZma9b8= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:08 2025 by rpki-client