$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa File: 5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa (raw, json) Hash identifier: eWakiKGYK1TW0kgQDa0FwqoJlZ6M8WmwMLWQkchHFsw= Subject key identifier: B4:0A:82:66:04:4C:09:16:27:F3:89:D2:49:B7:17:9F:86:07:AE:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5215C63EA789CF3445204A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.86.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:5c:63:ea:78:9c:f3:44:52:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=8c9820ba-0765-4ec6-92c2-c896d2b4d934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:31:00:02:18:a5:8d:33:bd:f5:7f:a6:1a:08: cb:ab:17:30:7e:1c:8d:b0:7b:d0:e2:5e:4c:3b:3e: 04:ee:9b:fd:78:9b:78:04:1e:50:e8:9d:b9:9d:c2: 26:40:e2:8d:60:54:67:6e:74:74:35:10:17:a8:d3: 97:e3:18:1e:33:1e:b8:08:10:5c:f5:9c:92:48:51: 47:0b:66:26:aa:70:6f:aa:fc:85:64:1c:e2:21:4b: 6b:ca:00:3f:f0:83:36:37:49:24:c4:58:94:95:ca: 74:fa:e7:aa:58:00:89:0c:09:e3:ba:5e:bb:3a:b4: f7:ba:91:f6:9d:e9:9a:60:f5:a7:62:26:c9:12:d4: 65:4f:f3:f5:0a:60:29:92:96:74:ba:5f:df:67:72: 15:67:7d:62:68:6a:10:95:d6:99:16:1d:f3:75:cb: 1f:f0:f7:3d:29:49:4c:bb:b5:2e:d4:70:e8:a3:b2: 56:0a:87:94:24:64:ec:51:78:11:ca:b7:63:83:ec: 35:8b:3d:a0:55:b4:ee:53:7c:d9:4c:ee:dc:e0:e3: f6:9b:3e:d9:17:65:dc:81:dc:97:cd:bd:fa:b2:4f: 70:3e:d9:85:2b:6b:16:07:59:47:aa:b6:6c:15:f7: e1:6b:da:88:25:5f:21:cb:f7:0f:78:81:1e:e8:ef: 0a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:0A:82:66:04:4C:09:16:27:F3:89:D2:49:B7:17:9F:86:07:AE:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9bce5-4eb8-33c5-87ce-b960ceaa003d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c9:8c:8e:25:d4:7e:7b:d5:91:3d:2b:b4:a2:67:3b:3f:b9: 58:36:be:0d:1a:5e:c5:bd:ba:c4:d0:7a:55:b4:f1:c6:1c:d1: 84:17:66:11:1e:a7:51:3b:bc:e2:16:ed:d1:cb:c6:39:30:b1: e7:3f:18:90:56:39:fa:4c:81:73:47:82:6f:04:5f:cc:ce:99: c7:a6:26:77:2a:ee:da:86:d4:47:43:e0:41:50:47:ce:22:b2: 8d:0e:d3:50:09:9e:27:6b:3b:52:e8:20:a1:0c:cb:7a:02:02: 71:2e:e2:75:1a:84:c8:25:36:e3:0e:f9:93:a3:fb:84:70:95: ba:b8:b2:10:09:cc:b7:52:ae:96:55:e1:bd:c1:2d:0e:ab:71: 00:6c:dd:53:98:62:e1:75:0f:b2:c5:5f:58:b0:16:52:29:d6: 1c:2c:c8:26:46:8d:5f:ad:ae:7d:52:da:a8:34:a8:c2:c7:a7: d2:e6:1b:2d:57:2c:aa:48:f6:9a:9b:b2:e3:a1:e5:0d:9b:03: 1a:66:3b:b9:b0:96:27:83:cb:25:81:f4:d3:7c:56:5f:16:6d: cf:08:9e:52:fc:32:b4:50:fb:a9:24:34:f5:29:86:1b:c6:2b: 38:77:0c:1c:2b:df:81:e8:88:21:0e:aa:5a:fe:67:7c:e3:41: 07:5b:53:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVxj6nic80RSBKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OGM5ODIwYmEtMDc2NS00ZWM2LTkyYzItYzg5NmQyYjRkOTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDEAAhiljTO99X+mGgjLqxcwfhyNsHvQ4l5M Oz4E7pv9eJt4BB5Q6J25ncImQOKNYFRnbnR0NRAXqNOX4xgeMx64CBBc9ZySSFFH C2YmqnBvqvyFZBziIUtrygA/8IM2N0kkxFiUlcp0+ueqWACJDAnjul67OrT3upH2 nemaYPWnYibJEtRlT/P1CmApkpZ0ul/fZ3IVZ31iaGoQldaZFh3zdcsf8Pc9KUlM u7Uu1HDoo7JWCoeUJGTsUXgRyrdjg+w1iz2gVbTuU3zZTO7c4OP2mz7ZF2XcgdyX zb36sk9wPtmFK2sWB1lHqrZsFffha9qIJV8hy/cPeIEe6O8KLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQKgmYETAkWJ/OJ0km3F5+GB65wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFiOWJjZTUtNGViOC0z M2M1LTg3Y2UtYjk2MGNlYWEwMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFZlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjJjI4l1H571ZE9K7SiZzs/uVg2vg0aXsW9usTQelW08cYc0YQXZhEe p1E7vOIW7dHLxjkwsec/GJBWOfpMgXNHgm8EX8zOmcemJncq7tqG1EdD4EFQR84i so0O01AJnidrO1LoIKEMy3oCAnEu4nUahMglNuMO+ZOj+4Rwlbq4shAJzLdSrpZV 4b3BLQ6rcQBs3VOYYuF1D7LFX1iwFlIp1hwsyCZGjV+trn1S2qg0qMLHp9LmGy1X LKpI9pqbsuOh5Q2bAxpmO7mwlieDyyWB9NN8Vl8Wbc8InlL8MrRQ+6kkNPUphhvG Kzh3DBwr34HoiCEOqlr+Z3zjQQdbU7U= -----END CERTIFICATE-----Generated at Tue Nov 4 22:19:04 2025 by rpki-client