$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa File: dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa (raw, json) Hash identifier: PSr37+OKeEHTI4B3ic/OPFJUizOhHYyExACXmDRxr8g= Subject key identifier: 84:A2:3C:FF:23:C8:F9:2D:2A:92:A7:5A:FD:78:0A:2C:9C:79:F1:91 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52168B669C98F227D9CC820 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.89.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:68:b6:69:c9:8f:22:7d:9c:c8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=fedfe245-5167-47ec-87d5-595773a9d31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:98:fc:9c:ee:58:f2:16:d8:22:9c:64:38:69: aa:2b:9c:fb:34:c0:40:67:aa:54:0a:6c:01:4f:1e: 94:90:6f:54:70:4c:56:7c:f5:c0:32:83:a1:92:1d: a0:6d:47:66:35:74:29:2a:ea:a4:28:a9:9d:c2:5b: 88:0d:1b:9c:f6:93:94:58:af:ad:58:bb:60:6d:5f: 4c:98:db:52:6c:b0:21:3f:f7:f7:97:1a:b9:1d:b4: 20:49:92:9e:03:54:29:16:13:00:35:ea:79:d2:4d: 03:3d:51:58:b1:9c:8c:1d:48:5d:5a:47:2c:58:1d: d3:e2:28:fe:71:7d:c9:2f:e5:3b:e5:2c:bd:bf:f3: 69:dc:9e:49:5b:21:21:83:cb:e1:09:29:7f:c6:a0: b7:50:c5:cf:3b:d7:78:02:db:0b:8f:75:95:c6:ad: 8c:84:ed:9b:d7:70:53:0c:59:26:21:fd:86:53:8c: 78:76:8c:48:8e:82:bc:60:6e:69:09:91:72:8f:c5: 20:53:7c:3c:78:93:05:d8:5c:9c:b1:bd:88:5d:c7: 0e:bd:85:df:22:59:89:74:04:69:09:d5:52:cf:79: 97:5d:96:0b:27:57:64:17:66:9c:a6:a1:60:ea:8a: a0:ef:95:ca:c3:cd:06:f0:95:68:62:42:fb:56:e2: dc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:3C:FF:23:C8:F9:2D:2A:92:A7:5A:FD:78:0A:2C:9C:79:F1:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd9e3a51-d6fb-39e7-899b-47c9a52bfa01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.89.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8e:17:25:92:e6:2d:dc:e1:16:cc:4d:38:f6:5f:c2:95:ef: 79:b2:b8:7b:05:bd:01:b2:cc:4e:f1:d6:25:08:99:bc:d6:77: 57:80:93:2d:e0:25:3a:0a:4d:00:33:15:72:67:08:ba:bd:84: 0d:bc:e2:6f:d3:d0:f9:dc:e6:6c:74:34:e6:cf:65:8b:8f:db: 9c:81:fe:e4:7c:37:63:6d:e2:1b:4f:0f:c9:90:f3:d7:f7:32: 14:09:f8:32:08:e8:a8:00:df:08:98:2b:5a:3b:f0:6f:2f:78: 98:22:eb:b1:fd:2a:fb:52:a0:80:67:de:b6:25:0d:d8:c6:b7: 9b:fd:a9:19:e8:80:2e:92:2b:45:5b:ad:f9:72:56:f3:0e:f1: 9f:ae:b3:99:40:56:d8:a1:90:d7:a0:2e:9b:bd:a8:c9:db:7b: 8e:65:bf:8d:3e:02:86:6a:d5:ac:42:73:49:34:97:69:1d:d3: 1c:2c:b8:85:e8:77:05:f1:e7:c3:5c:05:4d:ba:a2:36:fc:23: 25:0c:39:79:92:72:1d:a5:16:38:f8:d5:93:8b:d6:e8:16:91: b5:20:c5:b2:47:15:3e:dd:5a:ba:73:6a:d5:99:9c:6d:1b:1e: 9f:28:39:a5:75:e9:62:47:c5:9d:bb:d7:d4:b0:df:8f:29:38: 2c:af:c4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWi2acmPIn2cyCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZmVkZmUyNDUtNTE2Ny00N2VjLTg3ZDUtNTk1NzczYTlkMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZj8nO5Y8hbYIpxkOGmqK5z7NMBAZ6pUCmwB Tx6UkG9UcExWfPXAMoOhkh2gbUdmNXQpKuqkKKmdwluIDRuc9pOUWK+tWLtgbV9M mNtSbLAhP/f3lxq5HbQgSZKeA1QpFhMANep50k0DPVFYsZyMHUhdWkcsWB3T4ij+ cX3JL+U75Sy9v/Np3J5JWyEhg8vhCSl/xqC3UMXPO9d4AtsLj3WVxq2MhO2b13BT DFkmIf2GU4x4doxIjoK8YG5pCZFyj8UgU3w8eJMF2Fycsb2IXccOvYXfIlmJdARp CdVSz3mXXZYLJ1dkF2acpqFg6oqg75XKw80G8JVoYkL7VuLcZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISiPP8jyPktKpKnWv14CiycefGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ5ZTNhNTEtZDZmYi0z OWU3LTg5OWItNDdjOWE1MmJmYTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFl0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyOFyWS5i3c4RbMTTj2X8KV73myuHsFvQGyzE7x1iUImbzWd1eAky3g JToKTQAzFXJnCLq9hA284m/T0Pnc5mx0NObPZYuP25yB/uR8N2Nt4htPD8mQ89f3 MhQJ+DII6KgA3wiYK1o78G8veJgi67H9KvtSoIBn3rYlDdjGt5v9qRnogC6SK0Vb rflyVvMO8Z+us5lAVtihkNegLpu9qMnbe45lv40+AoZq1axCc0k0l2kd0xwsuIXo dwXx58NcBU26ojb8IyUMOXmSch2lFjj41ZOL1ugWkbUgxbJHFT7dWrpzatWZnG0b Hp8oOaV16WJHxZ2719Sw348pOCyvxCY= -----END CERTIFICATE-----Generated at Wed Nov 5 04:31:20 2025 by rpki-client