$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/400ec07d-bf04-31d5-a837-c0c1f601dd3f.roa File: 400ec07d-bf04-31d5-a837-c0c1f601dd3f.roa (raw, json) Hash identifier: 0DgUalsB+w38boD87ogXwtew9XqsMPFFbeYwMGVv7U8= Subject key identifier: A0:B9:D2:FF:20:08:2A:EB:85:01:F4:89:E7:E1:0D:3A:00:A3:08:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216F44C054BD59B5E6E420 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/400ec07d-bf04-31d5-a837-c0c1f601dd3f.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.106.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6f:44:c0:54:bd:59:b5:e6:e4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=6ea530b1-9dc3-4604-bf0e-9ac924c4b59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b4:03:f7:bc:86:ff:32:28:d9:67:7d:94:5a: b1:66:6d:6c:61:85:5a:c5:1a:bc:d3:4e:db:67:e6: b4:5c:aa:a1:c5:46:b5:d1:4b:cd:7e:73:15:15:18: 85:88:41:9d:7a:54:40:c1:c3:03:c0:ad:81:69:1d: 6c:e9:66:07:28:7c:3f:32:c0:bf:be:99:35:c1:36: 7d:1b:de:0d:4e:e5:fa:f1:de:28:66:8a:1c:3a:04: c7:10:a4:4b:d3:e7:f9:4b:94:97:e1:08:63:4c:70: 48:59:76:e6:61:9f:a3:33:8e:0c:e1:36:f3:3c:9a: ea:c0:91:95:87:25:af:08:03:c2:76:82:df:6b:fa: a5:da:df:49:04:5d:ee:a0:22:33:c0:d3:9e:7b:a3: 4e:ab:ed:3c:d9:63:a3:7d:f3:57:a0:d3:d2:73:96: c2:49:90:09:7c:5b:f2:0f:4f:82:d9:e4:fd:ad:2e: 90:1a:7c:37:3a:2b:09:05:d3:60:88:45:50:ae:e4: c1:42:1b:86:c9:53:28:75:b6:fb:33:e1:9e:73:5e: fc:14:c2:56:0e:c8:14:ce:20:31:b7:d9:24:22:65: c7:96:41:ac:a9:72:86:be:0a:4c:7c:24:f1:a7:b1: 30:98:dd:70:94:05:96:83:f1:5b:37:11:51:7c:b4: e5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B9:D2:FF:20:08:2A:EB:85:01:F4:89:E7:E1:0D:3A:00:A3:08:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/400ec07d-bf04-31d5-a837-c0c1f601dd3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.106.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:58:d8:b4:9e:cd:02:2c:39:72:0b:be:a3:60:dc:0c:c5:bf: 5d:7a:45:88:ac:c7:0b:4c:dc:7f:f2:16:93:84:23:da:ec:85: f8:3d:eb:0c:b9:90:79:70:90:c9:a6:51:98:33:1e:bb:4f:dd: 86:d6:c4:49:30:15:59:63:e0:48:cf:97:78:c3:31:81:07:b1: b8:46:3e:6f:10:d7:3a:22:26:2f:06:15:24:42:a9:07:3f:30: 0d:67:26:05:07:9f:81:f2:df:56:98:c1:a2:59:26:54:8b:17: 96:43:25:2f:48:3b:63:ee:72:9c:e9:9d:fb:d6:dc:71:39:0f: 22:1d:58:3e:f2:b5:85:9d:b1:26:37:66:1f:41:85:b8:06:28: a0:bc:5e:f6:41:4a:26:d4:dd:dc:f1:63:d7:04:db:8b:9f:7f: 5f:87:2a:48:73:8c:93:37:e6:04:42:e2:bc:dd:9e:e8:31:1a: 2d:1b:cd:ec:87:3d:e8:de:40:22:cb:7a:0b:96:b5:c5:7b:52: 3b:16:56:d1:f7:65:f6:fd:e1:c5:52:d9:38:a5:87:57:90:b2: b3:c0:f0:e7:52:57:94:3f:cb:63:7b:1d:46:fb:a1:c3:ee:3e: 02:b4:0a:ed:2c:c5:85:88:cc:37:d8:8b:eb:0e:6a:b7:fd:43: 9a:f4:39:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IW9EwFS9WbXm5CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NmVhNTMwYjEtOWRjMy00NjA0LWJmMGUtOWFjOTI0YzRiNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7QD97yG/zIo2Wd9lFqxZm1sYYVaxRq8007b Z+a0XKqhxUa10UvNfnMVFRiFiEGdelRAwcMDwK2BaR1s6WYHKHw/MsC/vpk1wTZ9 G94NTuX68d4oZoocOgTHEKRL0+f5S5SX4QhjTHBIWXbmYZ+jM44M4TbzPJrqwJGV hyWvCAPCdoLfa/ql2t9JBF3uoCIzwNOee6NOq+082WOjffNXoNPSc5bCSZAJfFvy D0+C2eT9rS6QGnw3OisJBdNgiEVQruTBQhuGyVModbb7M+Gec178FMJWDsgUziAx t9kkImXHlkGsqXKGvgpMfCTxp7EwmN1wlAWWg/FbNxFRfLTlLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKC50v8gCCrrhQH0iefhDToAowh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDAwZWMwN2QtYmYwNC0z MWQ1LWE4MzctYzBjMWY2MDFkZDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGpcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVY2LSezQIsOXILvqNg3AzFv116RYisxwtM3H/yFpOEI9rshfg96wy5 kHlwkMmmUZgzHrtP3YbWxEkwFVlj4EjPl3jDMYEHsbhGPm8Q1zoiJi8GFSRCqQc/ MA1nJgUHn4Hy31aYwaJZJlSLF5ZDJS9IO2PucpzpnfvW3HE5DyIdWD7ytYWdsSY3 Zh9BhbgGKKC8XvZBSibU3dzxY9cE24uff1+HKkhzjJM35gRC4rzdnugxGi0bzeyH PejeQCLLeguWtcV7UjsWVtH3Zfb94cVS2Tilh1eQsrPA8OdSV5Q/y2N7HUb7ocPu PgK0Cu0sxYWIzDfYi+sOarf9Q5r0OXE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:24 2025 by rpki-client