$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9253132-7412-3553-acba-b4f5eaa15c54.roa File: f9253132-7412-3553-acba-b4f5eaa15c54.roa (raw, json) Hash identifier: bRf4CQWhgQ4KUAJclU5a02mLtLFqq4tNNdxSC1RvWgY= Subject key identifier: 96:2C:50:DD:EF:1D:CF:89:62:7D:F2:C3:65:27:27:DE:EF:11:F8:EB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52160732C4D2D03E1EC8F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9253132-7412-3553-acba-b4f5eaa15c54.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 35994 IP address blocks: 104.96.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:60:73:2c:4d:2d:03:e1:ec:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=628abbd3-5610-4077-a6df-108afd98f002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:94:5d:bf:34:2c:92:d1:b4:d3:f3:ea:81: b0:f7:b6:10:76:10:e5:84:bf:72:7b:45:65:cf:22: 4d:1f:af:e9:a1:20:1e:53:b9:29:31:80:0f:84:9e: 8c:6c:f2:68:3f:78:83:cc:d7:a3:d5:7c:55:99:60: 7d:6a:81:9e:01:fc:fd:8c:c0:b2:a0:67:3a:2c:05: 26:eb:61:c5:23:50:79:15:66:f4:89:ba:0f:e8:d8: 99:ba:08:ea:dc:3e:94:18:3b:fb:e5:95:05:44:b2: 01:23:22:8e:1e:70:d9:17:26:0e:4d:ab:4a:63:ce: 5d:e9:86:fd:4d:86:53:35:e6:d9:c9:30:cf:a4:c6: 15:1d:ff:53:d1:17:ef:97:bd:1b:7a:22:3b:18:2d: 48:d7:43:e3:31:33:60:80:75:8f:ab:ef:94:07:2d: e9:fb:e7:f0:4f:2f:0c:c7:eb:ee:07:18:71:ce:11: e5:f2:7f:7e:d0:c7:b6:da:b4:5c:6d:b5:b4:5f:f5: 3d:f6:90:0e:ee:e8:62:61:70:d5:30:ee:32:6b:ed: c9:00:a7:1c:b7:5c:7e:69:a1:c6:4c:3b:3d:5a:6b: 3d:52:1d:f7:0e:47:8b:fb:40:4f:99:c5:f3:66:df: a0:9d:24:42:57:38:44:7c:57:71:64:c8:44:b7:4e: 56:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2C:50:DD:EF:1D:CF:89:62:7D:F2:C3:65:27:27:DE:EF:11:F8:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f9253132-7412-3553-acba-b4f5eaa15c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:18:62:a3:3e:b0:c7:58:e8:8e:a7:71:b9:66:5e:3e:3e:b5: 1c:44:e8:6c:15:bf:7e:57:2c:2b:39:22:00:f2:59:23:e4:1b: b4:e8:07:cb:47:ae:67:f4:95:e0:a9:a7:95:fd:f8:4f:ce:48: 45:6c:01:ca:a4:45:db:13:79:25:3d:59:16:f7:62:56:5c:51: 3d:dc:a8:ea:ef:92:0f:89:6b:6f:48:3b:83:92:87:70:48:8a: 74:ad:c3:d4:07:00:4a:9a:c4:27:90:63:e5:d4:26:8c:0b:15: fa:22:90:f6:18:51:d8:ff:78:3a:6c:a6:00:df:9d:cf:b2:bb: a7:08:95:71:d1:d7:2f:89:eb:16:f8:18:59:05:f9:8b:bc:e4: 4d:04:7b:f0:fe:6f:1f:f1:3e:13:1a:5e:8f:c1:5a:8a:5e:2f: d7:9e:c1:0a:b1:0f:44:b1:ed:4b:c4:01:38:d0:01:6f:c5:e2: fe:48:43:5f:5f:25:fc:34:74:e8:c1:c6:79:18:7b:64:1c:41: 20:e9:1c:b3:73:0c:ce:cb:dd:a2:b4:ae:bf:30:91:77:95:f8: c2:6c:59:16:1a:23:0c:3e:f6:0e:8a:49:fb:59:ea:ae:3d:f7: 40:da:19:d1:7c:db:bf:6f:6e:e1:f0:de:bf:57:54:9d:47:3c: 20:3e:d3:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWBzLE0tA+HsjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NjI4YWJiZDMtNTYxMC00MDc3LWE2ZGYtMTA4YWZkOThmMDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7qUXb80LJLRtNPz6oGw97YQdhDlhL9ye0Vl zyJNH6/poSAeU7kpMYAPhJ6MbPJoP3iDzNej1XxVmWB9aoGeAfz9jMCyoGc6LAUm 62HFI1B5FWb0iboP6NiZugjq3D6UGDv75ZUFRLIBIyKOHnDZFyYOTatKY85d6Yb9 TYZTNebZyTDPpMYVHf9T0Rfvl70beiI7GC1I10PjMTNggHWPq++UBy3p++fwTy8M x+vuBxhxzhHl8n9+0Me22rRcbbW0X/U99pAO7uhiYXDVMO4ya+3JAKcct1x+aaHG TDs9Wms9Uh33DkeL+0BPmcXzZt+gnSRCVzhEfFdxZMhEt05WbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYsUN3vHc+JYn3yw2UnJ97vEfjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjkyNTMxMzItNzQxMi0z NTUzLWFjYmEtYjRmNWVhYTE1YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAYYqM+sMdY6I6ncblmXj4+tRxE6GwVv35XLCs5IgDyWSPkG7ToB8tH rmf0leCpp5X9+E/OSEVsAcqkRdsTeSU9WRb3YlZcUT3cqOrvkg+Ja29IO4OSh3BI inStw9QHAEqaxCeQY+XUJowLFfoikPYYUdj/eDpspgDfnc+yu6cIlXHR1y+J6xb4 GFkF+Yu85E0Ee/D+bx/xPhMaXo/BWopeL9eewQqxD0Sx7UvEATjQAW/F4v5IQ19f Jfw0dOjBxnkYe2QcQSDpHLNzDM7L3aK0rr8wkXeV+MJsWRYaIww+9g6KSftZ6q49 90DaGdF8279vbuHw3r9XVJ1HPCA+07Q= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:15 2025 by rpki-client