$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa File: 4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa (raw, json) Hash identifier: KfA2kS6xHiNRZEUrC6AKF3OGj84IfB+E9eBAsGzwGiM= Subject key identifier: A9:ED:13:1D:0F:2C:4B:7A:EC:D5:BC:AD:F2:68:70:D9:F0:BA:CA:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216055DDF04BA064E75D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.96.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:60:55:dd:f0:4b:a0:64:e7:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=154415e7-839e-4d93-a1d8-5c8588c7fe4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:58:dc:2b:c6:35:e6:f4:cc:95:92:e9:eb:9d: 11:e0:7b:94:2e:18:4d:79:24:da:a5:ae:f7:de:f2: cd:83:8f:22:a6:1e:37:75:ed:6a:a1:ea:b0:02:94: f1:c8:cd:59:7b:e3:1c:1d:dd:21:a1:b3:fd:9f:3b: be:b3:4e:44:fa:2d:cf:8d:df:e2:9e:f8:30:a2:18: 65:ba:92:e9:fd:5d:83:47:2c:4c:eb:0d:67:c7:31: e3:9f:2a:ca:33:2b:a4:72:62:e3:5b:47:19:bc:5c: 59:aa:a3:58:e7:2e:5b:fa:0d:a4:49:23:75:85:d9: 52:88:df:cd:a6:86:bb:be:32:cd:e6:52:9e:bc:4d: f1:7c:78:d2:27:d3:d5:3d:62:38:07:c5:44:fc:f3: c4:4d:96:5d:75:ca:af:1c:02:12:b1:92:47:66:8a: 6d:51:00:30:ef:51:ac:c5:d1:b7:9f:9f:e0:9c:6b: 96:a3:e4:52:41:a3:90:3b:71:db:e7:7f:ba:d1:cb: cd:2a:e2:4e:c1:fd:b3:07:cd:49:e4:f5:c3:a8:61: 26:d5:10:c2:df:c2:68:99:b9:2f:a9:d9:37:f3:1e: 44:6e:43:38:dd:bf:89:2d:e5:4f:a1:bf:1c:a6:fb: 82:e9:c3:c1:4a:97:d5:31:c2:6b:68:2a:62:9d:bb: 86:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:ED:13:1D:0F:2C:4B:7A:EC:D5:BC:AD:F2:68:70:D9:F0:BA:CA:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4707feb0-5b06-3ecd-9b68-d4142eb2da98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5d:7a:66:0c:91:a1:1a:fc:42:3a:fa:11:9f:23:74:f6:51: d7:0b:59:4f:0a:0d:a7:9f:e9:23:7a:a8:04:8d:e2:dd:b8:94: 83:ae:73:31:2b:2c:19:57:52:f7:72:60:13:94:6c:34:01:41: 71:75:4a:2c:99:ba:79:5a:61:b4:96:a3:76:cb:1f:25:33:74: c2:b3:9d:77:68:81:a4:42:67:21:36:69:40:3b:9c:79:83:b4: 3b:5e:58:5a:82:14:d2:1f:f8:41:df:6a:47:d3:a9:93:b2:04: af:79:9f:f5:ae:32:77:23:06:a2:de:16:99:7f:09:2a:3c:68: 7c:45:a4:58:bb:0c:bd:68:ba:6a:45:8c:21:18:eb:a0:c7:13: 61:5d:5c:5c:03:53:ba:c7:3d:c2:8f:6c:f3:c6:fc:7f:cb:8a: 33:45:27:61:e4:63:79:90:9b:0d:f8:7a:36:21:c7:0f:d1:46: 8d:d5:e2:8d:53:e1:8c:fe:23:91:b2:aa:05:5e:99:76:c4:75: b9:80:fd:40:c6:5b:69:90:37:e6:e8:0c:33:b0:2d:e0:ec:ea: a4:e5:a2:aa:4f:63:51:6f:53:83:c4:31:80:08:5e:bb:7a:dc: 59:f1:45:dc:ac:35:65:21:9f:05:db:f4:9e:ba:7c:43:31:ed: a2:19:ff:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWBV3fBLoGTnXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTU0NDE1ZTctODM5ZS00ZDkzLWExZDgtNWM4NTg4YzdmZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVjcK8Y15vTMlZLp650R4HuULhhNeSTapa73 3vLNg48iph43de1qoeqwApTxyM1Ze+McHd0hobP9nzu+s05E+i3Pjd/invgwohhl upLp/V2DRyxM6w1nxzHjnyrKMyukcmLjW0cZvFxZqqNY5y5b+g2kSSN1hdlSiN/N poa7vjLN5lKevE3xfHjSJ9PVPWI4B8VE/PPETZZddcqvHAISsZJHZoptUQAw71Gs xdG3n5/gnGuWo+RSQaOQO3Hb53+60cvNKuJOwf2zB81J5PXDqGEm1RDC38Jombkv qdk38x5EbkM43b+JLeVPob8cpvuC6cPBSpfVMcJraCpinbuGTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKntEx0PLEt67NW8rfJocNnwusqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDcwN2ZlYjAtNWIwNi0z ZWNkLTliNjgtZDQxNDJlYjJkYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGldemYMkaEa/EI6+hGfI3T2UdcLWU8KDaef6SN6qASN4t24lIOuczEr LBlXUvdyYBOUbDQBQXF1SiyZunlaYbSWo3bLHyUzdMKznXdogaRCZyE2aUA7nHmD tDteWFqCFNIf+EHfakfTqZOyBK95n/WuMncjBqLeFpl/CSo8aHxFpFi7DL1oumpF jCEY66DHE2FdXFwDU7rHPcKPbPPG/H/LijNFJ2HkY3mQmw34ejYhxw/RRo3V4o1T 4Yz+I5GyqgVemXbEdbmA/UDGW2mQN+boDDOwLeDs6qTloqpPY1FvU4PEMYAIXrt6 3FnxRdysNWUhnwXb9J66fEMx7aIZ/9k= -----END CERTIFICATE-----Generated at Wed Nov 5 06:24:14 2025 by rpki-client