$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49baf012-2a62-3a58-ae38-264d2dfa85a5.roa File: 49baf012-2a62-3a58-ae38-264d2dfa85a5.roa (raw, json) Hash identifier: CJbRdNuKdN44itVhHjn0QRAMXaq9WgQDe/uvEmrD3go= Subject key identifier: BB:29:AA:F0:85:7F:70:0A:B9:25:10:35:0F:CB:27:DD:E5:F7:2E:67 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9515A9DBECF293019D95F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49baf012-2a62-3a58-ae38-264d2dfa85a5.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 20940 IP address blocks: 104.124.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:5a:9d:be:cf:29:30:19:d9:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=5e1e02b1-c6ea-407a-a66b-d9d8d1fc0902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:37:f6:51:ef:4c:d1:28:ff:b5:5f:fd:75: 78:4c:d9:32:92:16:64:40:53:c2:83:cf:cb:c1:92: ef:93:18:e5:20:dd:30:7c:a7:76:22:d4:16:d6:c3: 0f:58:84:60:ca:4a:3b:1a:1d:9d:bb:d3:08:88:cd: 9d:e5:26:03:2b:2d:b2:7b:7f:28:46:df:fe:b5:1c: 6a:7d:ac:ce:53:97:4d:d8:53:aa:5e:be:32:14:b6: 98:ea:10:0a:ae:f4:59:01:53:3c:24:7d:fa:b0:20: a5:3d:b8:f6:87:7a:bb:e4:05:ea:05:6a:a5:36:af: cb:02:90:bc:24:65:11:ae:c0:ea:f3:e1:e8:9a:a1: d0:b8:c3:44:23:79:56:04:13:5b:fb:31:fc:ad:df: ca:0a:79:b4:2a:68:25:17:9e:03:29:da:56:03:1b: 36:ad:91:8b:dc:13:93:32:88:62:01:21:8a:6a:76: b0:d8:74:72:5e:26:6f:37:0b:37:15:27:54:8e:75: f7:22:62:64:63:50:6d:44:35:b9:45:40:07:d0:9e: a7:e3:bc:e2:64:8a:b0:6a:f0:6c:43:cb:73:a6:52: 2a:7a:21:df:15:0c:a1:f1:c5:7c:15:a5:ee:f4:9b: 19:a9:d9:c6:9f:82:d6:62:5c:2b:db:55:a3:dd:57: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:29:AA:F0:85:7F:70:0A:B9:25:10:35:0F:CB:27:DD:E5:F7:2E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49baf012-2a62-3a58-ae38-264d2dfa85a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.124.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:43:23:55:42:ff:9f:1e:d9:46:4a:ca:01:49:20:7f:ce:4a: e6:53:23:24:14:ed:2b:be:03:90:e2:59:45:38:38:24:f3:20: 56:bf:2f:75:ef:20:e0:0e:00:71:78:08:12:82:dc:4b:2a:ba: b9:9a:00:fe:dc:ac:b5:d3:cb:d7:c0:7d:f3:23:5c:83:c5:0c: 9f:65:7e:78:e7:8d:de:35:52:76:d5:dd:fe:c7:9f:2d:93:7c: 5c:78:6e:b6:27:4c:e5:ae:62:31:57:db:05:04:56:f9:8c:de: 6e:c2:b1:f5:96:c6:34:fc:bb:e3:b0:7f:73:d9:e7:1d:e2:07: ad:25:9f:25:88:d7:62:ed:2b:e1:80:f0:2c:64:80:d6:ea:a0: 6e:40:92:8a:50:dc:cd:40:a1:c0:9b:85:4a:4c:c9:42:e6:db: 58:18:1c:65:9a:c7:71:31:ea:cb:95:63:42:8d:89:2c:64:62: b1:32:7d:53:70:de:7e:66:ff:5f:80:c6:90:bf:1a:9f:91:11: 77:99:49:4c:23:92:c9:16:3a:ea:d8:28:f2:ac:07:35:c9:23: 05:cc:70:7e:3c:32:61:94:f3:4b:d1:d0:35:5e:46:3d:3c:71: 16:73:85:b6:ee:5f:5f:ef:89:9e:0e:51:4f:27:08:24:80:ae: 6c:45:c5:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVqdvs8pMBnZXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NWUxZTAyYjEtYzZlYS00MDdhLWE2NmItZDlkOGQxZmMwOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD039lHvTNEo/7Vf/XV4TNkykhZkQFPCg8/L wZLvkxjlIN0wfKd2ItQW1sMPWIRgyko7Gh2du9MIiM2d5SYDKy2ye38oRt/+tRxq fazOU5dN2FOqXr4yFLaY6hAKrvRZAVM8JH36sCClPbj2h3q75AXqBWqlNq/LApC8 JGURrsDq8+HomqHQuMNEI3lWBBNb+zH8rd/KCnm0KmglF54DKdpWAxs2rZGL3BOT MohiASGKanaw2HRyXiZvNws3FSdUjnX3ImJkY1BtRDW5RUAH0J6n47ziZIqwavBs Q8tzplIqeiHfFQyh8cV8FaXu9JsZqdnGn4LWYlwr21Wj3Vf6dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLspqvCFf3AKuSUQNQ/LJ93l9y5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDliYWYwMTItMmE2Mi0z YTU4LWFlMzgtMjY0ZDJkZmE4NWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHwLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJDI1VC/58e2UZKygFJIH/OSuZTIyQU7Su+A5DiWUU4OCTzIFa/L3Xv IOAOAHF4CBKC3EsqurmaAP7crLXTy9fAffMjXIPFDJ9lfnjnjd41UnbV3f7Hny2T fFx4brYnTOWuYjFX2wUEVvmM3m7CsfWWxjT8u+Owf3PZ5x3iB60lnyWI12LtK+GA 8CxkgNbqoG5AkopQ3M1AocCbhUpMyULm21gYHGWax3Ex6suVY0KNiSxkYrEyfVNw 3n5m/1+AxpC/Gp+REXeZSUwjkskWOurYKPKsBzXJIwXMcH48MmGU80vR0DVeRj08 cRZzhbbuX1/viZ4OUU8nCCSArmxFxUE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:49 2025 by rpki-client