$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84662713-4b49-34f9-80ae-9f444fc11ee0.roa File: 84662713-4b49-34f9-80ae-9f444fc11ee0.roa (raw, json) Hash identifier: dsiAmJhUxVhUFGWycWNNJV8rXTNzFEeuLaOwLt7S0ts= Subject key identifier: 49:D2:B7:47:81:99:12:F2:6B:0E:F4:7A:17:17:04:FB:11:94:30:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D78263EE82370CD0F28520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84662713-4b49-34f9-80ae-9f444fc11ee0.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 33905 IP address blocks: 104.109.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:82:63:ee:82:37:0c:d0:f2:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=dcc76981-b827-47da-944a-a1cba8da917e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:44:69:ec:d3:5d:a9:c7:d3:fb:1f:ab:30:76: 97:44:d2:0c:12:0b:98:20:f1:e3:4a:03:6c:0a:c6: f9:c0:49:61:8c:03:be:51:9b:e7:73:d0:0c:72:24: 87:81:77:d6:85:b3:55:c8:a1:8c:48:e0:07:d5:4d: bc:73:a1:56:40:68:4a:40:9e:10:85:34:ac:19:f8: de:2b:0d:54:2c:50:25:76:36:dd:56:f2:2f:4d:9c: c5:cb:17:86:00:9b:5d:b7:92:1f:cb:e7:dc:9a:b3: da:64:00:ed:d3:c6:94:00:6d:61:f6:6a:57:23:2b: fa:9a:f8:59:e2:91:59:17:8a:0e:de:51:19:0d:55: 9d:08:7a:a0:a6:f8:18:66:57:eb:31:25:ea:70:20: c5:f6:23:0e:dd:7b:83:e7:0e:d5:2d:9d:cd:f9:a2: de:9c:2e:6a:ff:6b:22:b4:b3:64:07:cd:27:03:72: 79:e9:fc:9b:35:bf:e1:07:ba:03:9e:32:49:a1:48: 4f:cb:e0:c1:ff:e2:87:0b:6f:cd:a5:e4:7d:21:d6: 6e:2f:79:4f:38:12:e9:5f:31:45:c5:38:b7:d7:50: 3f:6d:7b:6f:ea:e2:80:84:b0:3c:d7:4d:f5:1f:e8: 69:0b:16:c5:d5:d3:a0:80:4a:8c:e6:69:f8:ec:b0: c1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:B7:47:81:99:12:F2:6B:0E:F4:7A:17:17:04:FB:11:94:30:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84662713-4b49-34f9-80ae-9f444fc11ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.109.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7c:1e:0d:1f:1d:f2:43:2c:78:3d:1c:5c:bb:17:0f:78:5f: 31:8d:b0:8d:55:00:c6:4d:33:71:c8:1c:c3:7b:3a:26:96:cb: 27:71:8a:ac:f6:b0:a9:81:4a:73:b3:3d:56:d6:eb:93:56:85: d4:07:bf:d2:8c:ba:26:cc:47:2b:34:d5:9d:4e:0d:f0:4d:93: e9:d6:5d:3c:b9:dd:b3:88:82:1b:d2:65:77:06:52:01:c8:fb: d0:b7:97:2b:22:18:dc:e0:dc:c3:13:56:15:ed:d7:af:df:3e: c8:33:03:ae:b9:b5:db:26:87:14:16:3d:5a:14:0e:b7:ab:a0: 0c:64:a8:1e:d4:1c:d2:8b:23:f9:00:fb:42:de:68:75:9a:2b: d4:b6:33:d8:2e:ec:cf:04:92:d3:63:7e:ce:b2:1d:a4:35:6d: 06:5d:7d:6a:10:3e:7e:9d:91:1a:f7:00:3e:51:6b:5e:7d:22: ba:31:d0:83:4d:49:fe:bc:4e:15:49:06:c3:39:28:eb:5c:ce: 38:58:ef:35:57:c4:df:44:e6:e1:7f:5b:43:f2:1e:48:dc:80: eb:d4:ef:83:5f:31:6a:73:1c:a6:5f:5e:94:42:d9:f7:70:49: a4:80:e7:89:5f:eb:07:5b:16:77:0a:f6:ad:cc:6f:95:2f:19: 3a:e9:9b:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14Jj7oI3DNDyhSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZGNjNzY5ODEtYjgyNy00N2RhLTk0NGEtYTFjYmE4ZGE5MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50Rp7NNdqcfT+x+rMHaXRNIMEguYIPHjSgNs Csb5wElhjAO+UZvnc9AMciSHgXfWhbNVyKGMSOAH1U28c6FWQGhKQJ4QhTSsGfje Kw1ULFAldjbdVvIvTZzFyxeGAJtdt5Ify+fcmrPaZADt08aUAG1h9mpXIyv6mvhZ 4pFZF4oO3lEZDVWdCHqgpvgYZlfrMSXqcCDF9iMO3XuD5w7VLZ3N+aLenC5q/2si tLNkB80nA3J56fybNb/hB7oDnjJJoUhPy+DB/+KHC2/NpeR9IdZuL3lPOBLpXzFF xTi311A/bXtv6uKAhLA81031H+hpCxbF1dOggEqM5mn47LDBSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnSt0eBmRLyaw70ehcXBPsRlDCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ2NjI3MTMtNGI0OS0z NGY5LTgwYWUtOWY0NDRmYzExZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaG0KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR8Hg0fHfJDLHg9HFy7Fw94XzGNsI1VAMZNM3HIHMN7OiaWyydxiqz2 sKmBSnOzPVbW65NWhdQHv9KMuibMRys01Z1ODfBNk+nWXTy53bOIghvSZXcGUgHI +9C3lysiGNzg3MMTVhXt16/fPsgzA665tdsmhxQWPVoUDreroAxkqB7UHNKLI/kA +0LeaHWaK9S2M9gu7M8EktNjfs6yHaQ1bQZdfWoQPn6dkRr3AD5Ra159Irox0INN Sf68ThVJBsM5KOtczjhY7zVXxN9E5uF/W0PyHkjcgOvU74NfMWpzHKZfXpRC2fdw SaSA54lf6wdbFncK9q3Mb5UvGTrpm8c= -----END CERTIFICATE-----Generated at Wed Nov 5 01:32:50 2025 by rpki-client