$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39bddafe-f991-3933-8d92-6e9daff89da6.roa File: 39bddafe-f991-3933-8d92-6e9daff89da6.roa (raw, json) Hash identifier: zUiLzZXSkRpoc/0Y6xIPs1R1GcujrzhBzXf2/sCmYzM= Subject key identifier: 47:EA:8A:0F:07:25:79:60:83:0C:94:BE:AC:8D:39:7B:C2:4A:5B:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52161D978604E8833747D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39bddafe-f991-3933-8d92-6e9daff89da6.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.98.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:61:d9:78:60:4e:88:33:74:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=8753dd61-802e-4e22-8804-4cd4fa5b77aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:72:65:86:41:b7:28:61:dc:d9:c6:bb:72:a7: e1:25:f5:98:a4:4e:57:c4:16:2a:51:16:bf:d6:f0: d3:a7:86:91:c5:20:40:54:0f:df:fc:b3:ce:79:b5: 53:1d:61:41:77:ed:d8:02:9f:76:cb:36:0f:16:13: ad:c2:f2:53:d1:20:1b:3b:46:a3:93:b5:3e:da:4c: cb:37:de:c4:73:b0:57:e7:8d:de:ab:81:6e:6d:49: 86:fd:17:11:b9:56:42:fc:2b:20:4d:2d:c6:81:cc: d1:5b:b7:83:ad:9a:8f:09:c8:94:0a:a8:14:fd:24: 85:45:01:91:6c:2f:88:1a:58:08:88:b2:59:e3:84: 44:16:f6:ab:51:48:fa:3f:b9:4c:06:f9:8d:fe:16: 04:19:9f:c9:23:2b:76:e4:cf:c8:d5:9e:64:8d:c7: f7:c9:83:6c:01:ed:55:35:6f:1e:83:27:4b:02:fb: 0a:77:5d:98:fc:11:ee:a2:d3:bf:e4:2d:86:c0:41: 86:76:c0:ad:9f:cd:12:73:df:ff:49:db:83:57:f4: 8a:cf:18:2e:5b:76:e5:70:8b:46:46:96:28:54:b8: 6c:95:00:e0:4a:46:7d:4a:1e:61:92:c0:74:1e:bd: b7:41:4d:cc:65:a1:9e:04:16:e8:db:54:7d:8e:57: c5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:EA:8A:0F:07:25:79:60:83:0C:94:BE:AC:8D:39:7B:C2:4A:5B:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/39bddafe-f991-3933-8d92-6e9daff89da6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:66:03:42:95:c8:24:69:45:a6:56:69:a2:e8:dc:41:ab:18: bf:12:72:3d:91:33:7f:12:f3:d2:1c:39:61:84:ec:d8:ab:49: d3:e5:0d:8f:79:57:23:e3:e8:11:b6:8c:e9:ec:98:19:93:56: 8f:ed:b6:ed:4b:f8:f3:28:0a:d7:57:9d:b5:92:6d:0b:eb:89: 3c:c0:53:9c:89:41:e4:a0:5b:1f:b6:e3:d6:d7:70:a0:89:89: 76:c5:15:a4:f3:2e:cb:22:c1:1c:83:1e:25:af:ea:01:52:9a: 00:3d:13:82:37:60:26:4d:8e:a3:bd:72:bd:75:71:c2:b0:67: c9:17:50:aa:44:8d:80:7e:28:03:46:55:4d:f0:2f:a6:bd:0a: af:af:19:ea:1d:41:78:c8:57:5a:58:e1:2a:59:e2:ca:4f:1f: 1c:08:68:d8:cf:22:4f:f9:a4:79:3d:d8:cb:f4:66:51:01:c7: f4:49:6b:f4:5f:7d:1e:6c:58:2b:f5:e2:5d:f7:29:06:e5:1c: 79:a9:de:36:f6:67:4a:90:64:cf:76:e4:d1:c4:e7:45:87:a0: a9:40:97:c1:cc:e9:dd:9a:e0:39:79:1b:af:38:c0:c0:ad:02: 6f:be:f7:dd:34:01:1d:e0:f9:2f:8e:0a:07:88:58:b3:af:bc: 89:bb:c1:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWHZeGBOiDN0fQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ODc1M2RkNjEtODAyZS00ZTIyLTg4MDQtNGNkNGZhNWI3N2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnJlhkG3KGHc2ca7cqfhJfWYpE5XxBYqURa/ 1vDTp4aRxSBAVA/f/LPOebVTHWFBd+3YAp92yzYPFhOtwvJT0SAbO0ajk7U+2kzL N97Ec7BX543eq4FubUmG/RcRuVZC/CsgTS3GgczRW7eDrZqPCciUCqgU/SSFRQGR bC+IGlgIiLJZ44REFvarUUj6P7lMBvmN/hYEGZ/JIyt25M/I1Z5kjcf3yYNsAe1V NW8egydLAvsKd12Y/BHuotO/5C2GwEGGdsCtn80Sc9//SduDV/SKzxguW3blcItG RpYoVLhslQDgSkZ9Sh5hksB0Hr23QU3MZaGeBBbo21R9jlfFWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfqig8HJXlggwyUvqyNOXvCSluUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzliZGRhZmUtZjk5MS0z OTMzLThkOTItNmU5ZGFmZjg5ZGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGJyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFmA0KVyCRpRaZWaaLo3EGrGL8Scj2RM38S89IcOWGE7NirSdPlDY95 VyPj6BG2jOnsmBmTVo/ttu1L+PMoCtdXnbWSbQvriTzAU5yJQeSgWx+249bXcKCJ iXbFFaTzLssiwRyDHiWv6gFSmgA9E4I3YCZNjqO9cr11ccKwZ8kXUKpEjYB+KANG VU3wL6a9Cq+vGeodQXjIV1pY4SpZ4spPHxwIaNjPIk/5pHk92Mv0ZlEBx/RJa/Rf fR5sWCv14l33KQblHHmp3jb2Z0qQZM925NHE50WHoKlAl8HM6d2a4Dl5G684wMCt Am++9900AR3g+S+OCgeIWLOvvIm7wdk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:07 2025 by rpki-client