$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa File: 25c1edc8-2393-33e5-9a57-416cf07a8189.roa (raw, json) Hash identifier: E056meOrn1r5kGQU5fDj/WY7lmELlzHxm0h68XOOlg8= Subject key identifier: 5D:4C:14:9F:FC:B2:A1:20:75:BD:C6:4C:AB:3D:10:58:5D:B6:84:9F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5215C83E6B9658F0AD8D100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.86.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:5c:83:e6:b9:65:8f:0a:d8:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=cba86c3e-154b-47d1-a67f-ab73c61eeb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f1:4b:e5:d6:63:6f:0a:02:d9:17:87:78:f9: a3:bc:0b:45:1d:2e:04:7c:2b:25:d3:04:92:94:d0: d5:aa:9a:e7:ca:4a:a7:69:e7:8a:13:b8:c9:04:f4: e1:23:2f:6c:69:bd:3c:0c:05:7e:c1:89:29:24:06: 6c:22:2c:6a:1b:d1:d7:38:7f:94:87:e9:33:48:b7: ed:09:69:89:67:94:fb:f2:7e:11:7d:b8:d8:09:01: de:db:82:9e:19:60:d9:3f:90:77:ff:bd:a3:69:4d: d8:a6:49:a0:a6:80:c8:24:94:a9:03:18:dc:bf:ff: 81:ae:02:3b:94:c4:ee:89:fb:13:42:59:21:10:a3: c1:27:da:fd:d5:9d:91:52:fa:30:b2:dd:9b:6c:78: 61:7c:03:1a:ad:88:93:1d:46:21:de:8b:d5:70:f0: 5f:52:b0:4e:f8:b2:45:46:dd:7b:cf:5d:6b:79:70: ce:fd:d8:b1:ce:91:54:f3:86:fa:50:1c:77:d0:3a: 18:b2:9b:f0:91:ca:83:8d:01:6f:63:8c:d2:fe:fd: 5c:a1:4b:4f:b2:72:ae:a0:ea:5e:47:a9:a4:20:40: c5:0b:79:87:37:bf:65:78:2e:ed:23:c6:58:b5:65: c7:0a:ff:d5:be:a0:20:d2:bd:e1:19:9c:2d:36:a7: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4C:14:9F:FC:B2:A1:20:75:BD:C6:4C:AB:3D:10:58:5D:B6:84:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25c1edc8-2393-33e5-9a57-416cf07a8189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:81:04:db:9b:7a:94:b7:aa:8b:95:d2:4c:e5:94:34:db:36: 1b:1c:c7:1b:f9:32:93:0e:c9:1e:56:cb:4b:c8:d4:f0:e4:b6: 37:9a:d2:4f:8c:22:0c:ae:a7:91:00:fe:f8:e8:06:6c:e5:65: 5a:69:a0:83:91:4b:be:f2:7e:5a:c0:e3:96:c9:2e:59:9e:3a: 1a:94:1e:7a:ab:9b:33:1c:ec:92:3f:8f:34:2f:dc:3c:42:70: 14:52:fa:c4:fa:f8:11:c5:dc:6a:1d:f3:3e:25:25:2c:57:6b: 73:9c:78:ec:fd:1d:21:4a:12:39:31:45:c8:8b:95:50:a0:69: 12:c1:78:93:5c:fb:f4:c1:1d:ea:d3:e9:6f:1c:ca:b3:dc:d4: 91:2b:ca:74:96:57:4c:fb:28:c9:42:10:64:76:0a:b4:97:37: da:a9:c3:d2:54:30:f3:ce:6a:95:ad:80:b6:99:f1:5a:c6:7d: f6:ee:fb:38:e6:ed:a1:de:8e:ba:bb:72:f2:28:36:0f:28:96: 7d:3d:c3:b4:34:4b:2a:b3:0b:ca:8a:a5:c4:dd:81:08:63:23: 9c:6f:b3:7f:63:68:86:6c:7c:33:9f:9d:00:9d:3b:d7:4d:fb: 83:6e:0b:b3:18:ac:09:5a:1f:1a:33:91:87:80:d4:7c:a2:dd: 53:af:97:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IVyD5rlljwrY0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk Y2JhODZjM2UtMTU0Yi00N2QxLWE2N2YtYWI3M2M2MWVlYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPFL5dZjbwoC2ReHePmjvAtFHS4EfCsl0wSS lNDVqprnykqnaeeKE7jJBPThIy9sab08DAV+wYkpJAZsIixqG9HXOH+Uh+kzSLft CWmJZ5T78n4RfbjYCQHe24KeGWDZP5B3/72jaU3YpkmgpoDIJJSpAxjcv/+BrgI7 lMTuifsTQlkhEKPBJ9r91Z2RUvowst2bbHhhfAMarYiTHUYh3ovVcPBfUrBO+LJF Rt17z11reXDO/dixzpFU84b6UBx30DoYspvwkcqDjQFvY4zS/v1coUtPsnKuoOpe R6mkIEDFC3mHN79leC7tI8ZYtWXHCv/VvqAg0r3hGZwtNqd9VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1MFJ/8sqEgdb3GTKs9EFhdtoSfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjVjMWVkYzgtMjM5My0z M2U1LTlhNTctNDE2Y2YwN2E4MTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFa/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCBBNubepS3qouV0kzllDTbNhscxxv5MpMOyR5Wy0vI1PDktjea0k+M Igyup5EA/vjoBmzlZVppoIORS77yflrA45bJLlmeOhqUHnqrmzMc7JI/jzQv3DxC cBRS+sT6+BHF3God8z4lJSxXa3OceOz9HSFKEjkxRciLlVCgaRLBeJNc+/TBHerT 6W8cyrPc1JErynSWV0z7KMlCEGR2CrSXN9qpw9JUMPPOapWtgLaZ8VrGffbu+zjm 7aHejrq7cvIoNg8oln09w7Q0SyqzC8qKpcTdgQhjI5xvs39jaIZsfDOfnQCdO9dN +4NuC7MYrAlaHxozkYeA1Hyi3VOvl90= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:36 2025 by rpki-client