$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41d58a20-66e9-367b-9971-ce3975c90a2c.roa File: 41d58a20-66e9-367b-9971-ce3975c90a2c.roa (raw, json) Hash identifier: NYZui1sEnAyEzZZ9DaUxkK+KXnh3HgqAgJ5neYUN7pk= Subject key identifier: 46:70:AD:72:8F:1C:34:35:79:02:46:F9:4E:C8:2C:67:F1:54:AA:6E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216B00F8857B1DC3F56E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41d58a20-66e9-367b-9971-ce3975c90a2c.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.96.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6b:00:f8:85:7b:1d:c3:f5:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=34a9a725-48d8-487a-83ea-8f76ae3b537a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8b:1a:b9:f9:f9:89:9c:de:63:f8:de:4a:91: 62:a2:c5:0c:6b:56:a8:dd:1f:a4:67:dd:73:2c:f4: 34:d1:0a:7e:a3:a4:7a:b2:b2:19:02:e5:db:5e:e2: f9:fc:8e:e9:e4:b6:45:34:f6:f7:52:24:26:9b:ab: 44:ac:47:43:c1:ad:92:4f:3c:7d:97:f6:e9:60:00: 64:32:1a:a5:66:87:6c:d5:e0:8a:81:a6:65:17:f4: 3c:79:ec:bd:5a:97:1b:a8:3f:3c:ea:71:31:c7:49: b4:80:f1:e9:12:85:08:c1:ed:76:7c:02:0f:84:4b: a9:7f:5c:53:a7:9d:1e:2c:52:ca:e0:ae:da:ec:d9: 75:7e:aa:8c:d9:eb:4c:1a:b1:95:c4:cd:51:64:30: 54:0d:7e:53:32:96:88:19:ad:23:15:aa:bb:d5:eb: 84:d5:de:06:8b:27:92:8d:55:af:c3:ec:83:da:03: 1a:7c:5e:6f:e5:0a:05:05:f8:d8:33:ac:d1:38:8f: e6:3a:7a:cb:63:0a:15:61:35:51:12:1e:6c:7f:5b: b3:8b:fd:fd:0e:17:8c:7f:7c:18:8a:7e:b9:05:94: b0:cf:fe:a2:ed:60:64:c9:15:68:ec:15:68:7a:7f: 69:22:84:65:d2:02:7d:79:1f:08:34:8e:a1:78:48: 0d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:70:AD:72:8F:1C:34:35:79:02:46:F9:4E:C8:2C:67:F1:54:AA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41d58a20-66e9-367b-9971-ce3975c90a2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7b:80:af:55:92:ec:fd:d6:db:fa:88:af:b3:cb:81:1a:62: b2:e9:3d:8f:33:84:0e:a9:0c:ca:da:d7:09:64:83:0c:ea:df: af:a0:b0:1b:23:14:da:17:c2:5a:9b:de:df:ef:85:b3:bd:f9: c1:e6:bd:e1:ce:e1:32:5d:a5:a0:f0:48:69:82:28:17:18:74: 4d:2d:34:ec:7f:7e:46:97:a3:05:82:af:b0:17:37:3e:2a:24: 9b:af:49:b5:10:26:a2:0d:92:c8:a0:59:c0:5c:20:fb:26:2f: c0:2a:21:e6:ed:c4:6d:cd:ed:fe:61:54:d4:b2:6a:06:20:64: 53:ac:62:80:64:9c:6d:95:9d:e5:ae:27:84:45:f3:76:67:32: e5:e4:bc:04:9f:5c:b5:90:3b:43:04:cc:ac:39:d7:4b:47:78: da:87:d9:4d:7f:44:ed:d4:c1:f7:ca:da:d7:6b:84:70:e1:ae: 65:ba:32:b2:04:ab:a4:4f:59:69:03:b1:30:fa:1f:f6:c4:61: f1:69:a0:ca:65:fb:81:00:f5:29:b6:0f:0f:e1:02:56:29:0f: 38:7c:e9:50:37:2f:5d:12:22:98:84:c6:f4:d7:69:8d:38:2a: 6b:87:b0:1a:96:28:26:7b:6e:c4:f0:23:7b:b1:2d:18:bb:3f: ab:1e:6f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWsA+IV7HcP1bkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzRhOWE3MjUtNDhkOC00ODdhLTgzZWEtOGY3NmFlM2I1MzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4saufn5iZzeY/jeSpFiosUMa1ao3R+kZ91z LPQ00Qp+o6R6srIZAuXbXuL5/I7p5LZFNPb3UiQmm6tErEdDwa2STzx9l/bpYABk MhqlZods1eCKgaZlF/Q8eey9WpcbqD886nExx0m0gPHpEoUIwe12fAIPhEupf1xT p50eLFLK4K7a7Nl1fqqM2etMGrGVxM1RZDBUDX5TMpaIGa0jFaq71euE1d4GiyeS jVWvw+yD2gMafF5v5QoFBfjYM6zROI/mOnrLYwoVYTVREh5sf1uzi/39DheMf3wY in65BZSwz/6i7WBkyRVo7BVoen9pIoRl0gJ9eR8INI6heEgNZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZwrXKPHDQ1eQJG+U7ILGfxVKpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDFkNThhMjAtNjZlOS0z NjdiLTk5NzEtY2UzOTc1YzkwYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR7gK9Vkuz91tv6iK+zy4EaYrLpPY8zhA6pDMra1wlkgwzq36+gsBsj FNoXwlqb3t/vhbO9+cHmveHO4TJdpaDwSGmCKBcYdE0tNOx/fkaXowWCr7AXNz4q JJuvSbUQJqINksigWcBcIPsmL8AqIebtxG3N7f5hVNSyagYgZFOsYoBknG2VneWu J4RF83ZnMuXkvASfXLWQO0MEzKw510tHeNqH2U1/RO3UwffK2tdrhHDhrmW6MrIE q6RPWWkDsTD6H/bEYfFpoMpl+4EA9Sm2Dw/hAlYpDzh86VA3L10SIpiExvTXaY04 KmuHsBqWKCZ7bsTwI3uxLRi7P6seb6c= -----END CERTIFICATE-----Generated at Mon Oct 20 00:26:13 2025 by rpki-client