$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64e55814-10db-31bc-abf2-07fa677be732.roa File: 64e55814-10db-31bc-abf2-07fa677be732.roa (raw, json) Hash identifier: 08pQywySMhrMP950nB0bV4VpLuQOQd/CG4dQiu0w2Rs= Subject key identifier: 57:B1:ED:B8:9A:DA:C1:E0:77:D8:B3:09:5C:86:39:0A:BB:45:0E:07 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF9514D607DBA918C34983AF4 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64e55814-10db-31bc-abf2-07fa677be732.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 16625 IP address blocks: 104.122.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4d:60:7d:ba:91:8c:34:98:3a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=f5efc663-5117-4275-8bd2-5c40c9236e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d8:06:d7:94:83:0f:dc:ef:ec:31:5d:36:0d: 04:cd:d0:f4:14:fe:b6:76:eb:99:b8:56:b4:a1:aa: ce:da:4f:82:36:cd:ec:61:29:bc:46:ae:46:66:0f: 12:26:3e:49:86:8e:48:3e:b6:0f:7b:70:a8:53:12: 5d:f5:8a:29:52:1d:10:e4:49:d8:88:a5:89:a4:55: 27:36:2d:3b:98:ef:c8:c2:c3:e1:78:86:73:c6:48: d6:72:c3:8b:8e:a9:f6:56:95:81:94:27:55:98:2f: 18:53:ba:4e:23:26:b1:ba:3c:ed:5e:1d:49:eb:cc: 2b:df:54:ca:b7:20:cf:44:f6:3f:c4:4c:27:bf:2b: da:db:3c:dd:40:ae:60:49:27:c7:bc:3b:32:6a:4b: df:17:40:82:b0:01:da:df:95:e5:cc:a2:c8:b2:39: 29:6f:ba:d7:27:85:dc:1e:b9:9e:45:5a:0b:27:e8: 3b:d7:65:c5:8b:d7:b7:aa:82:3c:61:5b:d5:d3:c0: 87:21:e5:9d:d9:f5:4b:ff:35:ea:ae:42:30:4e:58: 1e:b1:61:21:78:81:96:a6:6c:c3:46:06:15:9a:9c: c6:29:34:6d:3a:d5:d4:2c:90:7d:6b:92:3d:c1:1c: b6:b5:6e:e7:82:d4:6a:0b:cf:87:01:68:27:70:13: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B1:ED:B8:9A:DA:C1:E0:77:D8:B3:09:5C:86:39:0A:BB:45:0E:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/64e55814-10db-31bc-abf2-07fa677be732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.122.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:8e:e2:00:1b:db:c7:c5:93:bf:5c:26:60:e2:e2:32:a5:14: ec:7d:d6:5a:13:35:48:54:15:67:31:09:b9:6d:e5:4a:b1:9f: 30:3f:bb:ff:72:0c:ee:1d:9d:7e:4a:53:67:80:94:96:1b:ad: c3:6d:12:02:6f:44:03:e5:1d:f4:67:25:7d:c8:19:fa:4d:9a: 6f:b8:7a:c9:5f:16:da:90:33:86:1d:e9:cc:e2:ab:17:63:14: 20:b6:12:30:35:0d:8f:40:7a:40:ff:db:52:8b:e8:55:83:11: 61:30:71:3e:d1:a6:c8:23:2b:e3:68:6e:c8:21:af:60:c5:53: 49:2c:22:b3:0d:9e:12:e6:a7:c2:9b:22:aa:e0:9c:1d:f4:83: 65:5b:c1:44:d8:a1:e2:e4:51:49:0a:8d:bd:08:61:56:17:a5: 9f:58:8f:87:c3:77:3d:cd:42:ca:42:11:4d:2a:b8:61:2d:98: 31:05:2d:90:b1:22:ee:62:b3:bb:6f:d3:06:07:22:72:00:93: a1:05:4b:97:09:4d:11:ba:2d:6e:b1:0a:96:a8:68:fb:50:1a: ea:3a:59:dc:0e:4a:1d:da:6a:ca:00:53:9b:02:81:24:40:45: 7f:dc:9c:16:b5:4d:61:71:9e:3f:bc:51:44:38:cd:be:3d:e0: 68:cb:d9:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU1gfbqRjDSYOvQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjVlZmM2NjMtNTExNy00Mjc1LThiZDItNWM0MGM5MjM2ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtgG15SDD9zv7DFdNg0EzdD0FP62duuZuFa0 oarO2k+CNs3sYSm8Rq5GZg8SJj5Jho5IPrYPe3CoUxJd9YopUh0Q5EnYiKWJpFUn Ni07mO/IwsPheIZzxkjWcsOLjqn2VpWBlCdVmC8YU7pOIyaxujztXh1J68wr31TK tyDPRPY/xEwnvyva2zzdQK5gSSfHvDsyakvfF0CCsAHa35XlzKLIsjkpb7rXJ4Xc HrmeRVoLJ+g712XFi9e3qoI8YVvV08CHIeWd2fVL/zXqrkIwTlgesWEheIGWpmzD RgYVmpzGKTRtOtXULJB9a5I9wRy2tW7ngtRqC8+HAWgncBOPnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFex7bia2sHgd9izCVyGOQq7RQ4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjRlNTU4MTQtMTBkYi0z MWJjLWFiZjItMDdmYTY3N2JlNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaHpgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSO4gAb28fFk79cJmDi4jKlFOx91loTNUhUFWcxCblt5UqxnzA/u/9y DO4dnX5KU2eAlJYbrcNtEgJvRAPlHfRnJX3IGfpNmm+4eslfFtqQM4Yd6cziqxdj FCC2EjA1DY9AekD/21KL6FWDEWEwcT7RpsgjK+Nobsghr2DFU0ksIrMNnhLmp8Kb IqrgnB30g2VbwUTYoeLkUUkKjb0IYVYXpZ9Yj4fDdz3NQspCEU0quGEtmDEFLZCx Iu5is7tv0wYHInIAk6EFS5cJTRG6LW6xCpaoaPtQGuo6WdwOSh3aasoAU5sCgSRA RX/cnBa1TWFxnj+8UUQ4zb494GjL2XE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:15 2025 by rpki-client