$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad32c6-b768-381f-98de-e7f9dea5fe78.roa File: cfad32c6-b768-381f-98de-e7f9dea5fe78.roa (raw, json) Hash identifier: PQzT5SP15dggcbhGQqJsbz2MN0sniuUzoiTTehZ6fBM= Subject key identifier: CE:90:3C:E3:12:05:86:35:ED:5B:CA:C2:1C:C2:C3:6A:CF:B5:0A:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D7836942869AA16B3DEE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad32c6-b768-381f-98de-e7f9dea5fe78.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 35994 IP address blocks: 104.122.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:83:69:42:86:9a:a1:6b:3d:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=680d8f93-29c4-4549-ad3c-fd3ec9e65913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:77:27:d8:b2:f9:f6:72:cc:d8:0d:3d:a4:50: ff:3c:ec:8b:42:d8:b4:27:dd:5e:ac:00:dd:d6:f7: 66:8e:34:d0:55:e2:d0:d2:8c:7b:00:b8:d0:c3:e3: c0:c0:01:73:11:58:fd:d6:e8:02:a8:e9:02:88:74: 5e:35:34:6f:f6:d9:ca:33:68:cc:e8:0f:a7:c7:15: a8:15:50:8d:b3:ae:f9:cd:25:29:2e:ef:95:e4:d9: d3:98:f5:07:ed:7c:ab:6e:fe:86:a8:ab:75:22:52: 8d:a0:d3:6d:78:5c:77:99:d8:ca:8b:fa:bc:35:59: 5d:aa:04:42:b0:1c:15:52:8a:fb:2c:6b:35:51:cd: c5:7c:78:eb:54:6c:ef:0c:56:26:2d:6e:9c:a8:02: 70:57:d4:e9:70:de:69:7c:f2:90:0f:ce:a3:71:b0: bc:6c:e0:99:04:56:88:4c:d9:47:be:58:df:60:93: ea:6f:b7:4f:5f:85:b8:4a:4a:83:14:04:73:38:18: ba:67:c7:89:7b:e8:65:e6:87:a3:1e:28:9b:0a:70: b0:84:86:2f:ec:7c:1a:95:b2:9b:9d:32:81:f4:9e: 45:16:38:16:a9:8c:1d:a3:c1:76:5d:a8:70:22:e7: a6:d5:d6:6a:11:5b:e5:9a:06:92:6b:29:4f:c4:c0: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:90:3C:E3:12:05:86:35:ED:5B:CA:C2:1C:C2:C3:6A:CF:B5:0A:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad32c6-b768-381f-98de-e7f9dea5fe78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.122.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6a:7b:b5:5c:49:57:79:96:5a:ad:60:37:cd:ee:49:bc:fc: ce:f6:f1:bb:78:53:cf:3d:59:4b:bc:0f:c1:d9:7f:a4:41:82: 67:9f:fd:07:4d:00:fc:d0:1f:af:87:7a:78:03:32:91:ad:40: b4:a0:9f:08:01:b9:b9:ea:74:18:42:ed:e2:98:49:d3:ae:fb: fb:d6:fa:3e:17:88:ff:62:49:6b:da:9d:43:c6:59:30:a8:f3: 4b:73:8b:55:fe:5a:d0:12:74:37:82:9c:01:a1:0b:20:85:7b: a8:b0:9b:72:95:4e:98:13:f4:9a:a8:2a:b6:d6:42:ce:42:ab: 14:f8:bf:60:ef:87:9f:fb:72:93:16:8e:52:b4:9c:5f:6a:58: 82:74:b8:44:60:27:df:b8:0c:db:db:12:e7:80:ce:f6:4a:38: 82:8d:28:fd:4d:cc:01:52:0e:a5:12:d3:b0:85:7e:e9:50:38: e9:1d:96:85:99:c3:38:be:43:92:61:c4:cc:a3:ed:04:2c:94: 58:43:42:e2:32:f0:b0:91:52:ac:f3:8b:e5:41:2d:58:ca:74: e0:93:7d:92:5b:af:5e:9a:6b:94:22:2d:fc:3a:7b:58:9a:b6: 36:d7:38:54:8c:76:94:02:10:27:59:c7:44:37:77:c6:fc:98: f5:58:8b:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ14NpQoaaoWs97oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NjgwZDhmOTMtMjljNC00NTQ5LWFkM2MtZmQzZWM5ZTY1OTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Hcn2LL59nLM2A09pFD/POyLQti0J91erADd 1vdmjjTQVeLQ0ox7ALjQw+PAwAFzEVj91ugCqOkCiHReNTRv9tnKM2jM6A+nxxWo FVCNs675zSUpLu+V5NnTmPUH7Xyrbv6GqKt1IlKNoNNteFx3mdjKi/q8NVldqgRC sBwVUor7LGs1Uc3FfHjrVGzvDFYmLW6cqAJwV9TpcN5pfPKQD86jcbC8bOCZBFaI TNlHvljfYJPqb7dPX4W4SkqDFARzOBi6Z8eJe+hl5oejHiibCnCwhIYv7HwalbKb nTKB9J5FFjgWqYwdo8F2XahwIuem1dZqEVvlmgaSaylPxMDTqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6QPOMSBYY17VvKwhzCw2rPtQo2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZhZDMyYzYtYjc2OC0z ODFmLTk4ZGUtZTdmOWRlYTVmZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaHpfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJqe7VcSVd5llqtYDfN7km8/M728bt4U889WUu8D8HZf6RBgmef/QdN APzQH6+HengDMpGtQLSgnwgBubnqdBhC7eKYSdOu+/vW+j4XiP9iSWvanUPGWTCo 80tzi1X+WtASdDeCnAGhCyCFe6iwm3KVTpgT9JqoKrbWQs5CqxT4v2Dvh5/7cpMW jlK0nF9qWIJ0uERgJ9+4DNvbEueAzvZKOIKNKP1NzAFSDqUS07CFfulQOOkdloWZ wzi+Q5JhxMyj7QQslFhDQuIy8LCRUqzzi+VBLVjKdOCTfZJbr16aa5QiLfw6e1ia tjbXOFSMdpQCECdZx0Q3d8b8mPVYi0I= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:24 2025 by rpki-client