$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c451f6bd-95a4-3a6a-9d37-a24ba672245d.roa File: c451f6bd-95a4-3a6a-9d37-a24ba672245d.roa (raw, json) Hash identifier: tp1WMN0OTwl9eNXqdUYN0N7rlXVfWdITiBMVuHNEHQ8= Subject key identifier: 61:4D:6A:97:F4:A5:FD:3D:58:FE:5D:5D:3F:D6:48:BA:C6:01:6B:F9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA9325555D483518058695780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c451f6bd-95a4-3a6a-9d37-a24ba672245d.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 24319 IP address blocks: 104.96.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:55:55:d4:83:51:80:58:69:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=d58646e2-0c62-42cf-a8f1-e65949fb9259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ce:aa:a8:ee:72:4e:89:f3:3a:9b:20:c0:0f: ee:7b:bf:de:81:4b:de:8c:17:6a:94:67:7e:03:e3: 45:fe:4f:b3:8d:79:70:6b:be:38:63:84:72:30:2c: 60:42:aa:7d:a3:46:0c:72:57:1d:cc:2f:e8:e3:6e: 59:22:1c:3e:5a:fa:ac:32:8e:28:0a:f8:4f:41:b2: cc:b7:02:54:74:6a:9d:9b:3f:75:42:df:4a:6c:7b: 59:bd:84:28:00:a9:63:a7:54:9b:05:7c:a5:7a:e2: 2e:a8:e5:02:32:f9:8d:b7:72:6e:c9:91:16:c5:38: 90:4c:d4:bc:71:45:53:a8:d9:4a:b2:a2:47:97:e8: ee:13:5a:df:89:18:39:ef:11:c8:70:fb:db:be:6d: e7:fd:99:0a:16:87:b0:fa:0f:8f:8b:3e:03:19:f7: f0:1b:4f:44:ba:ef:71:c6:83:5e:e5:9b:12:8c:71: 95:a5:16:6b:3f:e3:66:f4:7f:67:74:6c:5a:96:87: a3:f6:39:3d:26:27:c6:8c:62:19:9e:c4:b9:d8:6d: fa:69:34:f6:6b:7f:2e:13:fd:5d:c3:42:07:f7:18: 09:8f:ea:cf:42:45:a4:9f:e6:07:a9:5c:f4:75:0b: bd:5f:d1:72:ea:a1:bf:d6:e0:7f:7a:fe:02:4c:b7: 5f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4D:6A:97:F4:A5:FD:3D:58:FE:5D:5D:3F:D6:48:BA:C6:01:6B:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c451f6bd-95a4-3a6a-9d37-a24ba672245d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0e:c4:1a:32:ee:f4:93:a8:55:1e:23:05:44:cf:45:99:5d: 8a:90:2f:c8:5a:bd:1e:f8:0b:a9:c2:41:9b:eb:6d:a3:3a:7c: bf:65:42:76:98:b7:57:19:2f:00:52:41:f2:e5:b4:9d:d6:e8: a8:36:d9:b4:44:53:f2:9a:b2:6b:1d:a4:cc:79:3d:75:c7:7c: eb:b6:68:07:79:75:ae:bc:bb:9a:7d:50:b2:8a:87:ef:2b:d6: 65:10:57:c0:94:3c:54:bd:7a:34:a7:03:9e:f9:08:cd:1d:4e: 6f:77:dd:0c:6d:df:22:b0:3c:c0:b3:1b:29:f2:ed:12:00:20: ea:20:2c:2a:aa:54:b5:a7:8e:6b:7f:9e:e6:a9:1b:e2:76:41: e5:56:c6:dd:6f:cc:69:ce:e7:9a:bd:94:8b:36:84:86:84:84: 32:51:be:b7:2b:8e:41:ba:c5:6c:74:c2:c6:82:7f:d5:34:05: ee:80:72:9c:4c:f7:e4:89:86:be:f8:0b:e9:47:67:32:e4:90: 2d:ec:02:f3:5b:41:de:93:93:2a:28:87:ad:21:d5:c9:72:e5: a3:91:d8:97:61:fe:c2:8e:ac:c0:ac:bf:bf:e1:23:40:e5:9a: 2f:96:40:d1:f4:33:1d:d9:d2:02:1f:13:5a:ae:e5:b7:63:15: 54:6e:81:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlVV1INRgFhpV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZDU4NjQ2ZTItMGM2Mi00MmNmLWE4ZjEtZTY1OTQ5ZmI5MjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM6qqO5yTonzOpsgwA/ue7/egUvejBdqlGd+ A+NF/k+zjXlwa744Y4RyMCxgQqp9o0YMclcdzC/o425ZIhw+WvqsMo4oCvhPQbLM twJUdGqdmz91Qt9KbHtZvYQoAKljp1SbBXyleuIuqOUCMvmNt3JuyZEWxTiQTNS8 cUVTqNlKsqJHl+juE1rfiRg57xHIcPvbvm3n/ZkKFoew+g+Piz4DGffwG09Euu9x xoNe5ZsSjHGVpRZrP+Nm9H9ndGxaloej9jk9JifGjGIZnsS52G36aTT2a38uE/1d w0IH9xgJj+rPQkWkn+YHqVz0dQu9X9Fy6qG/1uB/ev4CTLdfswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFNapf0pf09WP5dXT/WSLrGAWv5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQ1MWY2YmQtOTVhNC0z YTZhLTlkMzctYTI0YmE2NzIyNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGDTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8OxBoy7vSTqFUeIwVEz0WZXYqQL8havR74C6nCQZvrbaM6fL9lQnaY t1cZLwBSQfLltJ3W6Kg22bREU/KasmsdpMx5PXXHfOu2aAd5da68u5p9ULKKh+8r 1mUQV8CUPFS9ejSnA575CM0dTm933Qxt3yKwPMCzGyny7RIAIOogLCqqVLWnjmt/ nuapG+J2QeVWxt1vzGnO55q9lIs2hIaEhDJRvrcrjkG6xWx0wsaCf9U0Be6AcpxM 9+SJhr74C+lHZzLkkC3sAvNbQd6Tkyooh60h1cly5aOR2Jdh/sKOrMCsv7/hI0Dl mi+WQNH0Mx3Z0gIfE1qu5bdjFVRugT4= -----END CERTIFICATE-----Generated at Wed Nov 5 00:04:13 2025 by rpki-client