$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97770acf-899c-3983-aad7-d3d80bf753d6.roa File: 97770acf-899c-3983-aad7-d3d80bf753d6.roa (raw, json) Hash identifier: hNDdnwK+YXXyjHIDxFIj0a47wlY+7PPDhR0HoS8XquE= Subject key identifier: A8:F8:4C:14:C3:37:0C:28:1D:A5:52:CC:6A:EC:0D:E7:33:7B:FB:44 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF95159A347F669C67DD88D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97770acf-899c-3983-aad7-d3d80bf753d6.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 20940 IP address blocks: 104.123.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:59:a3:47:f6:69:c6:7d:d8:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=f647e9eb-48ba-4e4a-8508-4cf28e6fbd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:82:42:0a:a4:7e:f0:ce:1e:93:79:bb:c0:d8: e3:27:df:f5:0d:2a:84:d1:fc:5d:7c:db:47:d4:b5: 21:a7:d0:2f:64:99:38:ad:be:8c:18:7e:5d:60:4d: 5d:2e:f1:31:01:37:b8:cb:97:e3:30:09:4c:36:89: 6f:f1:28:20:41:8f:86:b3:4a:0a:71:66:f9:b9:23: 02:a9:b4:56:ec:ff:78:e3:dd:f1:22:c9:13:83:5c: c9:f0:63:8b:1d:6c:be:d8:5d:73:29:bb:24:7e:92: 95:1d:e3:e3:93:fe:5d:7f:89:c0:8a:b2:b8:3b:5c: 0e:64:4e:e7:84:9a:88:c6:dc:f9:9b:75:7e:2b:b9: 7f:ba:64:f9:78:0c:db:51:40:e1:ad:d5:80:f7:bb: 69:18:99:a2:31:58:e7:3b:39:52:64:c2:d1:98:74: 56:56:7f:a2:76:32:58:a1:00:49:cf:bd:1f:8c:c6: c2:de:fa:8e:ab:31:89:2e:95:d1:94:6f:d0:da:ae: 55:e4:96:be:f0:9e:1c:82:9b:00:8d:7b:f7:01:4e: 5f:e7:e1:96:5b:4e:bb:6f:2e:62:92:27:5d:fd:bb: 7d:f6:af:e2:79:e6:0f:fc:07:ec:1c:f2:fa:f0:49: 93:5c:7b:f7:fd:bf:ea:eb:37:e7:7f:29:3b:f6:85: 62:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F8:4C:14:C3:37:0C:28:1D:A5:52:CC:6A:EC:0D:E7:33:7B:FB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97770acf-899c-3983-aad7-d3d80bf753d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.123.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fa:ab:47:1d:5f:66:a7:98:a3:8d:9f:07:9a:13:a7:c2:67: 5a:90:13:70:9c:b3:45:e7:81:02:b9:b4:e0:4c:e8:7b:22:f6: 59:25:72:8f:cd:48:aa:b6:a1:23:8e:59:38:80:43:fd:9a:b2: 60:b0:e0:7f:3d:97:ec:40:ee:72:f6:64:d1:fa:52:26:76:e6: 3f:46:68:6b:c8:22:0d:9d:7c:9f:e7:9f:99:e7:4d:55:0b:50: 78:b4:a5:91:13:89:f8:49:2a:05:09:0a:20:77:14:bd:4a:2c: c1:48:cd:77:c4:f6:50:53:55:5a:5a:22:f6:fd:73:95:88:26: 02:aa:38:64:16:a5:ac:25:e2:d1:ce:0c:71:6a:90:07:88:5a: 78:7b:3a:d2:84:be:89:31:fe:ee:25:73:d8:43:47:88:fe:5a: 18:dd:57:9b:ef:09:a2:75:c7:1b:ed:16:27:9c:25:ea:c1:cc: f5:f6:78:83:a7:d5:32:53:88:83:60:87:71:37:6f:74:23:26: e7:7c:d9:e2:01:d4:9c:1c:84:eb:bc:26:e6:05:56:07:1b:41: 46:8f:e5:61:7b:72:c9:eb:b5:eb:31:67:be:b2:a9:61:49:5d: d7:a5:fb:0f:f9:ae:0f:23:23:af:a8:02:a5:f9:56:d6:07:8e: 3e:f3:bc:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVmjR/Zpxn3YjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk ZjY0N2U5ZWItNDhiYS00ZTRhLTg1MDgtNGNmMjhlNmZiZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YJCCqR+8M4ek3m7wNjjJ9/1DSqE0fxdfNtH 1LUhp9AvZJk4rb6MGH5dYE1dLvExATe4y5fjMAlMNolv8SggQY+Gs0oKcWb5uSMC qbRW7P94493xIskTg1zJ8GOLHWy+2F1zKbskfpKVHePjk/5df4nAirK4O1wOZE7n hJqIxtz5m3V+K7l/umT5eAzbUUDhrdWA97tpGJmiMVjnOzlSZMLRmHRWVn+idjJY oQBJz70fjMbC3vqOqzGJLpXRlG/Q2q5V5Ja+8J4cgpsAjXv3AU5f5+GWW067by5i kidd/bt99q/ieeYP/AfsHPL68EmTXHv3/b/q6zfnfyk79oViMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj4TBTDNwwoHaVSzGrsDecze/tEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTc3NzBhY2YtODk5Yy0z OTgzLWFhZDctZDNkODBiZjc1M2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH6q0cdX2anmKONnweaE6fCZ1qQE3Ccs0XngQK5tOBM6Hsi9lklco/N SKq2oSOOWTiAQ/2asmCw4H89l+xA7nL2ZNH6UiZ25j9GaGvIIg2dfJ/nn5nnTVUL UHi0pZETifhJKgUJCiB3FL1KLMFIzXfE9lBTVVpaIvb9c5WIJgKqOGQWpawl4tHO DHFqkAeIWnh7OtKEvokx/u4lc9hDR4j+WhjdV5vvCaJ1xxvtFiecJerBzPX2eIOn 1TJTiINgh3E3b3QjJud82eIB1JwchOu8JuYFVgcbQUaP5WF7csnrtesxZ76yqWFJ Xdel+w/5rg8jI6+oAqX5VtYHjj7zvK0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:14 2025 by rpki-client