$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa File: 4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa (raw, json) Hash identifier: KZkh159kVnR5M9eOwuYCwLRQ1+x0rSWbCqeIpVWYiL0= Subject key identifier: 69:07:12:C8:98:A1:F1:06:BB:C0:43:F5:5D:CD:76:C7:24:EE:A0:E9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216DCC91F0702EA6846D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 1299 IP address blocks: 104.103.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6d:cc:91:f0:70:2e:a6:84:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=c75987da-8c1c-4f46-811c-d468d0a17378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:c4:41:7b:31:19:0a:94:d3:7a:01:73:64: 0f:ee:9c:34:b8:81:ad:58:99:a5:57:f0:27:53:4a: 07:78:82:9c:73:df:94:71:ac:2c:7c:85:ba:00:b2: 62:94:4b:95:7a:b8:7e:e0:6f:0e:7c:25:fd:ac:06: 85:8c:84:6e:4d:56:f0:5d:fa:1c:0e:b3:1e:1e:e7: 09:bf:26:80:40:c8:0f:2e:98:79:ec:c6:22:2a:d4: fc:e2:93:27:f3:64:d5:45:0d:7d:c0:72:34:8d:70: 4a:3f:f3:be:82:da:c2:fd:89:db:dd:8a:5f:52:41: b3:81:ca:f7:9a:90:75:25:2a:a2:db:cb:53:b1:a9: c1:97:6b:9a:60:55:0d:ba:9c:eb:46:0c:49:06:9a: 04:ef:b7:06:6c:85:fb:cf:d6:8f:0d:66:5f:53:78: 31:4e:ff:3c:74:28:71:ce:95:df:7a:05:73:28:6b: b6:ca:ad:15:bd:6f:6c:6f:9b:96:05:f5:9e:fa:69: c5:ba:3f:ee:3a:9c:0f:e7:03:eb:c5:ea:5b:05:f8: 81:6e:82:91:c2:0e:21:a8:0d:95:4c:80:15:52:e7: 35:c2:90:77:04:bd:ea:23:5b:ce:82:71:b1:ed:d3: cd:29:2d:57:b3:ca:f9:dc:12:b3:33:e9:a7:71:37: 08:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:12:C8:98:A1:F1:06:BB:C0:43:F5:5D:CD:76:C7:24:EE:A0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4aff2cda-5b52-35ed-9334-92ee4fc2e70d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.103.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:4d:9c:d1:9c:63:c5:7d:75:ed:11:22:17:e3:e9:fd:ab:9b: dd:1a:dd:e4:cf:dc:b4:d0:96:79:d1:20:2a:81:ad:68:b6:42: 55:35:f9:be:49:20:d0:93:1d:cf:94:72:28:b5:63:41:07:19: c5:0e:89:7c:55:e3:da:1e:1e:6b:47:e0:4e:6c:db:1f:b0:de: 2d:b6:66:a7:6a:ed:cc:07:42:64:2b:f8:85:5c:4c:cb:44:24: c7:71:2f:79:bd:4a:91:65:ce:7b:7d:0a:9d:db:26:12:b2:a1: c8:e9:80:19:72:01:63:12:d0:7e:fa:90:f1:fa:d7:e7:2e:3a: 25:4c:90:d0:51:5c:7a:40:42:9b:34:4f:a7:1e:bf:d1:2d:fa: bc:29:39:41:12:07:5e:0b:61:cd:c7:a1:34:d5:c0:ad:1e:84: 6d:8e:c2:ac:ac:5a:9e:db:c6:de:c5:31:91:0a:bf:3f:9d:2d: 84:9b:06:72:af:a4:a0:c9:75:08:54:ec:38:3e:b5:9a:12:cc: 2f:3a:b2:cf:70:25:f5:a0:89:99:07:d7:36:bb:a2:3f:da:9f: c3:30:f9:82:74:cd:51:b8:10:92:ce:d0:87:95:51:b2:46:d2: 9b:18:ef:7d:f2:41:ef:0a:cd:0f:fa:18:bb:d3:45:37:b8:1d: 0e:7d:7c:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IW3MkfBwLqaEbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Yzc1OTg3ZGEtOGMxYy00ZjQ2LTgxMWMtZDQ2OGQwYTE3Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBHEQXsxGQqU03oBc2QP7pw0uIGtWJmlV/An U0oHeIKcc9+UcawsfIW6ALJilEuVerh+4G8OfCX9rAaFjIRuTVbwXfocDrMeHucJ vyaAQMgPLph57MYiKtT84pMn82TVRQ19wHI0jXBKP/O+gtrC/Ynb3YpfUkGzgcr3 mpB1JSqi28tTsanBl2uaYFUNupzrRgxJBpoE77cGbIX7z9aPDWZfU3gxTv88dChx zpXfegVzKGu2yq0VvW9sb5uWBfWe+mnFuj/uOpwP5wPrxepbBfiBboKRwg4hqA2V TIAVUuc1wpB3BL3qI1vOgnGx7dPNKS1Xs8r53BKzM+mncTcI1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkHEsiYofEGu8BD9V3Ndsck7qDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGFmZjJjZGEtNWI1Mi0z NWVkLTkzMzQtOTJlZTRmYzJlNzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBNnNGcY8V9de0RIhfj6f2rm90a3eTP3LTQlnnRICqBrWi2QlU1+b5J INCTHc+Ucii1Y0EHGcUOiXxV49oeHmtH4E5s2x+w3i22Zqdq7cwHQmQr+IVcTMtE JMdxL3m9SpFlznt9Cp3bJhKyocjpgBlyAWMS0H76kPH61+cuOiVMkNBRXHpAQps0 T6cev9Et+rwpOUESB14LYc3HoTTVwK0ehG2OwqysWp7bxt7FMZEKvz+dLYSbBnKv pKDJdQhU7Dg+tZoSzC86ss9wJfWgiZkH1za7oj/an8Mw+YJ0zVG4EJLO0IeVUbJG 0psY733yQe8KzQ/6GLvTRTe4HQ59fGc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:15 2025 by rpki-client