$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa File: 0bde66e0-ee94-3e23-97de-fad631a974c8.roa (raw, json) Hash identifier: dJ/Yu3be9/5k5NF9tVCF8J6HpHxtJW3QkUsrur8DnT8= Subject key identifier: 38:11:52:0B:E6:82:7F:4F:F7:A1:F5:A3:0E:F2:46:2F:12:A6:09:22 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF521649F18A02E129AEF0800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 9498 IP address blocks: 104.104.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:64:9f:18:a0:2e:12:9a:ef:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=99af49f9-fbc9-4498-a0ae-e781b2c78895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f1:f5:e2:18:b1:6f:98:17:08:17:6f:3b:d3: 4f:54:1f:53:1b:89:5a:7b:e9:99:9c:b3:99:88:53: de:b3:cc:a1:b9:2c:f1:7f:ae:92:75:81:61:32:8e: b3:b2:f5:f8:ff:64:69:24:42:9e:b6:e2:03:95:f2: a4:30:f4:98:1d:f9:2b:92:86:87:3f:73:69:b8:c8: f1:ce:b7:cb:40:36:a7:46:c5:6f:ba:82:17:33:b0: a5:f0:26:1f:3b:95:df:6b:ee:0b:07:3f:76:13:78: dd:30:aa:6e:8c:a2:98:52:18:9f:21:d4:05:ae:87: c3:24:06:3b:73:2e:eb:18:40:79:a9:ab:38:2d:0a: ab:cd:ee:81:a3:b2:dc:2d:ee:81:8a:00:60:30:82: b5:b2:35:04:6d:f8:86:d2:64:65:9d:81:80:16:19: d8:66:c0:dc:dc:54:c2:52:b7:5e:51:f7:87:a2:fa: 10:df:e8:19:40:26:6d:f3:f7:c9:ff:fd:c9:91:04: c8:d9:5e:46:83:f8:28:ec:51:52:8b:96:33:6f:ab: cd:63:8c:dd:2f:44:56:6d:d7:fd:ef:7f:07:aa:f0: 72:fc:37:94:4f:d6:2d:04:e3:32:bb:b2:98:a3:78: 12:cc:90:27:e0:13:87:3b:b7:da:31:13:ee:93:10: f5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:11:52:0B:E6:82:7F:4F:F7:A1:F5:A3:0E:F2:46:2F:12:A6:09:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bde66e0-ee94-3e23-97de-fad631a974c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e9:82:20:0e:81:98:af:92:f6:74:57:f3:31:46:31:4e:14: 73:b4:fa:2d:aa:ca:7b:d4:29:50:81:df:5e:6b:2b:b3:df:67: d3:3c:cf:7a:80:97:b8:64:e6:1a:95:e5:ac:e4:0e:28:08:8e: e3:96:f8:4f:f6:98:5c:0d:36:00:65:2b:70:52:2c:eb:28:32: bf:7b:6b:7c:2f:1c:fb:4f:a7:2a:08:81:c7:b9:6b:80:ea:56: 4b:c8:c5:77:ed:9f:8b:43:f6:7e:04:b0:19:97:3f:60:95:5b: 88:3f:d6:e2:42:ae:3e:f5:6c:b6:39:b2:fd:50:49:77:f9:34: 14:bf:57:7e:50:bf:f4:3c:e3:22:d3:1a:24:0c:aa:9d:65:28: 51:d9:93:54:24:dc:51:31:b8:2b:98:ad:d0:ca:18:ef:78:aa: 3b:b6:1b:d8:c3:6c:d9:f6:29:12:98:e1:b4:82:7a:6b:d3:f8: 84:fd:5b:bf:32:7b:81:a4:ec:e1:8c:3b:ce:9b:2a:f7:13:b7: d4:41:bf:b3:f8:62:09:f1:99:d1:91:ef:44:27:9e:66:d2:e6: 4a:61:95:9a:d4:e7:6f:8c:4d:b0:aa:ac:6a:99:93:cb:0a:d5: d8:6c:16:f2:73:92:eb:e8:93:ae:ac:c9:e7:14:18:1b:fe:71: b7:bc:06:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWSfGKAuEprvCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OTlhZjQ5ZjktZmJjOS00NDk4LWEwYWUtZTc4MWIyYzc4ODk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/H14hixb5gXCBdvO9NPVB9TG4lae+mZnLOZ iFPes8yhuSzxf66SdYFhMo6zsvX4/2RpJEKetuIDlfKkMPSYHfkrkoaHP3NpuMjx zrfLQDanRsVvuoIXM7Cl8CYfO5Xfa+4LBz92E3jdMKpujKKYUhifIdQFrofDJAY7 cy7rGEB5qas4LQqrze6Bo7LcLe6BigBgMIK1sjUEbfiG0mRlnYGAFhnYZsDc3FTC UrdeUfeHovoQ3+gZQCZt8/fJ//3JkQTI2V5Gg/go7FFSi5Yzb6vNY4zdL0RWbdf9 738HqvBy/DeUT9YtBOMyu7KYo3gSzJAn4BOHO7faMRPukxD1OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgRUgvmgn9P96H1ow7yRi8SpgkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGJkZTY2ZTAtZWU5NC0z ZTIzLTk3ZGUtZmFkNjMxYTk3NGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjpgiAOgZivkvZ0V/MxRjFOFHO0+i2qynvUKVCB315rK7PfZ9M8z3qA l7hk5hqV5azkDigIjuOW+E/2mFwNNgBlK3BSLOsoMr97a3wvHPtPpyoIgce5a4Dq VkvIxXftn4tD9n4EsBmXP2CVW4g/1uJCrj71bLY5sv1QSXf5NBS/V35Qv/Q84yLT GiQMqp1lKFHZk1Qk3FExuCuYrdDKGO94qju2G9jDbNn2KRKY4bSCemvT+IT9W78y e4Gk7OGMO86bKvcTt9RBv7P4YgnxmdGR70QnnmbS5kphlZrU52+MTbCqrGqZk8sK 1dhsFvJzkuvok66syecUGBv+cbe8BvQ= -----END CERTIFICATE-----Generated at Tue Nov 4 21:24:34 2025 by rpki-client