$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f42034c-b838-3173-9b19-f5befa457d93.roa File: 1f42034c-b838-3173-9b19-f5befa457d93.roa (raw, json) Hash identifier: sgDkdZijSTOALJqv5JYpMS3Mk9jglHA/lEQmRPLqMuI= Subject key identifier: CD:5A:44:A0:51:FC:C4:41:BE:66:C2:F2:66:CA:CE:97:DF:EB:4A:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D78D3B87AB7E96A63A2380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f42034c-b838-3173-9b19-f5befa457d93.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 33905 IP address blocks: 104.94.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:8d:3b:87:ab:7e:96:a6:3a:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5197e349-728f-4656-8f83-ae2578a69b00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:61:a8:41:5f:45:fa:70:82:7d:0c:70:2b:e9: 04:ae:90:e3:49:67:e3:50:5f:50:81:26:a2:65:b7: 94:e6:cb:e9:df:8f:9b:78:04:27:51:32:26:6b:3d: 9c:7d:45:75:21:c5:b3:dd:0c:f7:23:96:0e:a9:c8: 6e:4a:9b:77:cf:00:e9:56:52:90:38:1b:ef:c1:20: 06:ee:4f:43:ef:05:2e:37:34:cd:b9:66:32:04:8e: 47:fe:d7:de:03:02:e4:7d:b7:48:d1:e2:97:f1:21: ee:d2:47:1b:b8:ec:14:7e:1d:5b:0e:83:02:57:52: 4f:95:85:cd:65:a4:47:c9:52:e8:c5:ec:8b:d9:f6: 40:0f:cc:83:b5:98:12:87:cf:ee:6c:18:e4:e2:50: 70:d7:dc:0b:90:0c:d1:e6:d8:35:10:c2:3b:04:ed: ca:42:96:ab:7f:8a:11:8b:36:d3:f4:95:b1:11:c1: d8:80:99:d3:b9:ad:d0:04:dc:06:68:bf:fd:d9:fa: 5e:84:c6:85:35:f5:ec:70:41:c6:f5:aa:bb:b6:25: cd:56:87:c4:dc:12:48:55:48:2e:cd:64:9a:99:b1: 4b:2d:91:32:09:6b:6e:bc:93:c0:09:90:8b:7b:ae: 4d:cd:a7:85:ae:3a:2e:e1:41:8b:d3:64:b8:33:36: 11:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5A:44:A0:51:FC:C4:41:BE:66:C2:F2:66:CA:CE:97:DF:EB:4A:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f42034c-b838-3173-9b19-f5befa457d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.94.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:be:d3:fd:81:c4:4e:e5:c4:34:c8:87:b1:8c:90:f8:37:6b: ca:b7:d5:c0:14:39:bf:eb:dd:7b:61:71:ac:72:1d:2f:38:83: 65:67:b6:cc:c2:a9:ac:6d:5e:48:df:45:d4:cd:37:92:fd:b2: b5:9a:c4:ad:f6:77:ec:1e:b5:a8:44:91:f7:9f:57:89:c9:83: 9b:82:cf:0b:4f:60:f1:cc:dd:69:b2:09:90:df:3e:57:bc:d4: e1:c3:09:5e:37:cf:8c:65:46:89:44:bf:c7:f1:18:72:19:5a: 6b:72:15:e1:ec:10:05:6d:35:7b:48:dd:15:6a:4d:16:ee:c0: c2:44:fd:f5:fa:4a:a6:25:76:af:26:05:55:fd:4f:44:f9:73: 25:81:5c:7c:67:19:0c:f8:73:91:df:45:f9:c4:cd:45:ec:16: a5:ad:18:e4:52:ca:64:fa:92:59:22:74:31:76:b7:e1:55:6b: 56:4d:56:3d:af:7d:1d:2f:8f:85:0a:d5:69:7c:dd:85:41:6f: 10:b4:c4:8d:d9:56:36:9b:60:11:17:ec:58:48:5f:7e:16:14: a7:98:a9:e7:60:af:40:cc:a5:17:27:3b:bb:d8:1f:c7:01:c1: 2b:d0:9c:11:e9:a2:39:5a:7a:63:ed:65:78:be:60:44:b7:a1: 6c:20:5a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ1407h6t+lqY6I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NTE5N2UzNDktNzI4Zi00NjU2LThmODMtYWUyNTc4YTY5YjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2GoQV9F+nCCfQxwK+kErpDjSWfjUF9QgSai ZbeU5svp34+beAQnUTImaz2cfUV1IcWz3Qz3I5YOqchuSpt3zwDpVlKQOBvvwSAG 7k9D7wUuNzTNuWYyBI5H/tfeAwLkfbdI0eKX8SHu0kcbuOwUfh1bDoMCV1JPlYXN ZaRHyVLoxeyL2fZAD8yDtZgSh8/ubBjk4lBw19wLkAzR5tg1EMI7BO3KQparf4oR izbT9JWxEcHYgJnTua3QBNwGaL/92fpehMaFNfXscEHG9aq7tiXNVofE3BJIVUgu zWSambFLLZEyCWtuvJPACZCLe65NzaeFrjou4UGL02S4MzYR0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1aRKBR/MRBvmbC8mbKzpff60pFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWY0MjAzNGMtYjgzOC0z MTczLTliMTktZjViZWZhNDU3ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaF7dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS+0/2BxE7lxDTIh7GMkPg3a8q31cAUOb/r3XthcaxyHS84g2VntszC qaxtXkjfRdTNN5L9srWaxK32d+wetahEkfefV4nJg5uCzwtPYPHM3WmyCZDfPle8 1OHDCV43z4xlRolEv8fxGHIZWmtyFeHsEAVtNXtI3RVqTRbuwMJE/fX6SqYldq8m BVX9T0T5cyWBXHxnGQz4c5HfRfnEzUXsFqWtGORSymT6klkidDF2t+FVa1ZNVj2v fR0vj4UK1Wl83YVBbxC0xI3ZVjabYBEX7FhIX34WFKeYqedgr0DMpRcnO7vYH8cB wSvQnBHpojlaemPtZXi+YES3oWwgWn4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:25:50 2025 by rpki-client