$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfaf5d8-a796-3900-939c-b081a354d652.roa File: 2dfaf5d8-a796-3900-939c-b081a354d652.roa (raw, json) Hash identifier: a5aBb9VbLToU347l2US0gPi/vbvqQoaPEYWjCBcC4bw= Subject key identifier: 6B:D5:91:D6:F7:77:8D:5C:E1:8E:F9:C8:53:5D:32:79:50:D0:25:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF7EBE0EC238BBD7C07A564C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfaf5d8-a796-3900-939c-b081a354d652.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 3462 IP address blocks: 104.107.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e0:ec:23:8b:bd:7c:07:a5:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=d16e957b-4dde-4dea-85b6-307b7e270b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:1e:94:16:8e:10:93:cf:a0:1e:ac:15:42:9c: 6b:ff:db:c3:40:ae:a9:12:57:51:42:e7:73:e2:21: 61:3a:76:a7:45:e1:3d:c8:ce:e2:53:43:1e:98:fd: bf:50:51:e5:d0:78:fd:2f:af:ed:5a:48:33:05:0d: f2:28:7f:4d:06:f8:7d:16:39:c9:a9:39:fc:61:13: 47:4f:64:33:07:20:ef:dc:d1:67:0d:3c:3a:cc:64: 11:dd:d4:fd:44:8c:1b:cd:26:93:cd:c6:66:7a:22: 5f:cf:1d:00:d5:31:e8:a3:8c:62:69:37:c0:c9:18: 43:d0:7a:63:4f:c5:d0:c1:e4:e8:92:bd:78:d2:ff: 14:32:3a:bd:71:a2:4a:0f:63:c4:cd:3c:25:f5:79: 3f:d5:47:d7:97:fa:98:d7:be:9d:ee:25:53:0e:a8: 75:a2:05:bf:bb:21:34:f3:8d:59:40:b0:73:fb:47: 58:18:68:ad:83:c1:9b:09:5a:f6:17:ca:50:09:b9: 74:81:1d:b5:43:3a:38:2a:3f:4a:93:04:54:10:c9: 25:ba:e1:ad:d0:15:11:59:bb:f6:c3:a8:7b:f6:c6: 67:42:08:31:bd:5a:3a:7d:3e:fe:df:c3:cf:2c:6b: f3:59:0e:95:15:0b:41:d4:b2:f1:e8:c0:26:4e:4a: fa:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D5:91:D6:F7:77:8D:5C:E1:8E:F9:C8:53:5D:32:79:50:D0:25:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2dfaf5d8-a796-3900-939c-b081a354d652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.107.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:e7:d4:0e:04:48:2e:10:f6:bb:96:87:fb:74:56:79:26:d0: f4:16:d3:6b:81:ab:7d:f6:6c:bb:4e:51:98:4e:63:f8:ad:d0: 48:64:ad:fe:04:46:d0:83:f8:d8:44:dc:5e:27:b1:35:5e:2f: 8b:75:62:bc:3e:3c:e7:f8:47:20:94:32:61:ee:d3:ea:29:7a: 94:36:4d:9e:e9:ed:d4:ed:9c:0a:0a:1b:96:3d:40:58:80:d4: 14:5c:68:90:cf:07:78:a0:e3:6c:36:48:2b:b1:b8:9c:82:3c: 23:57:f8:36:ff:86:87:da:8f:37:75:ce:90:c3:99:30:0b:a5: e0:f5:af:6a:3f:5f:ed:8a:a2:99:42:1a:fa:83:86:53:0e:c6: ea:e8:ed:7b:a4:84:2b:47:aa:1d:d8:2a:ab:9e:ed:0c:92:be: c9:b9:26:6c:ce:52:37:95:0b:8f:cd:8c:10:06:3b:1f:4c:75: 76:0c:43:73:69:2f:78:da:36:61:bb:ba:e2:ef:50:06:6d:a8: c4:22:d4:df:49:cd:86:49:78:cd:10:aa:53:a1:a7:59:fd:ac: d6:be:5b:42:fd:b2:0b:06:c6:14:ea:69:de:40:67:72:71:23: b0:b9:02:9d:cd:1d:2e:59:a4:e6:2e:22:32:3a:63:7c:cb:71: e7:c0:ec:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+DsI4u9fAelZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk ZDE2ZTk1N2ItNGRkZS00ZGVhLTg1YjYtMzA3YjdlMjcwYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0x6UFo4Qk8+gHqwVQpxr/9vDQK6pEldRQudz 4iFhOnanReE9yM7iU0MemP2/UFHl0Hj9L6/tWkgzBQ3yKH9NBvh9FjnJqTn8YRNH T2QzByDv3NFnDTw6zGQR3dT9RIwbzSaTzcZmeiJfzx0A1THoo4xiaTfAyRhD0Hpj T8XQweTokr140v8UMjq9caJKD2PEzTwl9Xk/1UfXl/qY176d7iVTDqh1ogW/uyE0 841ZQLBz+0dYGGitg8GbCVr2F8pQCbl0gR21Qzo4Kj9KkwRUEMkluuGt0BURWbv2 w6h79sZnQggxvVo6fT7+38PPLGvzWQ6VFQtB1LLx6MAmTkr6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvVkdb3d41c4Y75yFNdMnlQ0CW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmRmYWY1ZDgtYTc5Ni0z OTAwLTkzOWMtYjA4MWEzNTRkNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzn1A4ESC4Q9ruWh/t0Vnkm0PQW02uBq332bLtOUZhOY/it0Ehkrf4E RtCD+NhE3F4nsTVeL4t1Yrw+POf4RyCUMmHu0+opepQ2TZ7p7dTtnAoKG5Y9QFiA 1BRcaJDPB3ig42w2SCuxuJyCPCNX+Db/hofajzd1zpDDmTALpeD1r2o/X+2KoplC GvqDhlMOxuro7XukhCtHqh3YKque7QySvsm5JmzOUjeVC4/NjBAGOx9MdXYMQ3Np L3jaNmG7uuLvUAZtqMQi1N9JzYZJeM0QqlOhp1n9rNa+W0L9sgsGxhTqad5AZ3Jx I7C5Ap3NHS5ZpOYuIjI6Y3zLcefA7EE= -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:30 2025 by rpki-client