$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa File: 4493a76f-b62c-3b5d-8538-1b27eee707ee.roa (raw, json) Hash identifier: nhN6nYnc71T/IXfCj7utGxPjcN5RnCtzXcNDsrlEBoU= Subject key identifier: 3F:39:20:03:F2:43:AD:1B:5C:E4:E3:C6:69:08:CD:5D:8C:65:AE:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52162C800240A54AA5D0A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 35994 IP address blocks: 104.101.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:62:c8:00:24:0a:54:aa:5d:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=9bb70519-7f48-491b-8e3e-03b68b980bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:9a:c2:c5:e4:7e:9c:16:a9:eb:fc:48:d2: 61:8b:15:c9:ce:b6:20:ea:4d:1c:dc:6d:91:61:af: f7:96:4c:66:02:c2:85:82:c0:d6:d1:59:de:83:da: 54:3d:b4:27:4f:e0:14:5f:67:42:9b:d1:79:3d:81: 1c:7c:dd:20:58:f7:76:a4:38:3f:7a:a0:9c:aa:73: 5b:8d:40:0e:db:e7:3b:19:43:cc:ac:da:ab:58:35: e7:2c:1e:9c:3e:57:12:85:8e:e7:5a:c9:1b:f8:65: dd:fd:ce:ce:13:07:1f:45:4f:2a:22:6b:47:3f:64: ad:72:91:d6:e1:cf:0c:de:de:34:10:1e:04:fe:28: 9b:97:32:90:a1:c5:5c:de:93:62:ac:df:37:40:b6: b1:21:c7:24:e0:f1:0a:0b:0f:74:99:99:20:f6:7c: 21:60:7b:b6:84:dc:2a:fe:da:01:8a:aa:48:c9:d5: 31:ca:44:5f:17:4e:3d:19:a6:31:67:f0:b7:fb:e6: ff:1e:ce:c8:2b:7c:d4:d5:d5:97:a9:dc:bf:31:53: a1:e2:f5:3f:0b:b0:a4:75:db:11:d8:f2:da:44:b1: 48:7b:52:07:3e:a6:1b:9b:b2:48:85:52:db:72:0b: 6b:13:50:42:08:ad:07:5e:8a:d3:f7:18:34:b0:08: 6a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:39:20:03:F2:43:AD:1B:5C:E4:E3:C6:69:08:CD:5D:8C:65:AE:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4493a76f-b62c-3b5d-8538-1b27eee707ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.101.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:87:ac:26:f2:a9:fa:21:d9:e8:4b:f1:8c:62:c7:40:4b:31: 10:c3:64:85:ef:80:18:3f:54:9a:22:0c:0a:d8:c5:0b:65:02: 91:db:47:25:af:05:86:eb:1e:cd:61:e3:94:3f:0e:21:49:2a: 31:23:54:28:4c:2a:66:a7:6d:ac:23:62:f7:dc:57:77:7b:e0: 9e:47:85:1e:a9:a4:5b:6c:44:1c:d5:23:0b:7f:e5:49:fe:ea: 8b:4e:96:14:31:74:fb:5d:04:4a:70:1c:b6:05:5f:28:7b:97: 78:55:b3:19:dd:a5:1a:8e:53:c4:9b:21:fb:9b:3d:cc:11:83: db:10:8d:e8:83:98:03:83:da:a7:ef:58:3f:6d:2d:dd:e7:22: 55:14:26:6e:a0:90:92:bf:f4:ca:55:5d:a6:a1:33:6a:cf:9f: 2f:88:35:91:18:d9:42:89:9d:da:9a:87:20:77:33:74:11:c7: 62:84:92:ce:2b:3f:d4:0a:5f:bb:f3:23:ad:4a:46:97:eb:4b: af:2b:e3:a4:f3:52:b5:59:c8:80:27:1c:ed:13:61:13:00:d5: cc:2a:1f:f6:61:10:eb:8f:86:a0:cd:20:1b:c5:c9:32:80:77: 95:9b:e6:f1:9a:c7:ae:4f:10:a0:09:8f:ab:48:aa:c4:a4:d0: 04:ea:3d:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWLIACQKVKpdCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk OWJiNzA1MTktN2Y0OC00OTFiLThlM2UtMDNiNjhiOTgwYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgSawsXkfpwWqev8SNJhixXJzrYg6k0c3G2R Ya/3lkxmAsKFgsDW0Vneg9pUPbQnT+AUX2dCm9F5PYEcfN0gWPd2pDg/eqCcqnNb jUAO2+c7GUPMrNqrWDXnLB6cPlcShY7nWskb+GXd/c7OEwcfRU8qImtHP2StcpHW 4c8M3t40EB4E/iiblzKQocVc3pNirN83QLaxIcck4PEKCw90mZkg9nwhYHu2hNwq /toBiqpIydUxykRfF049GaYxZ/C3++b/Hs7IK3zU1dWXqdy/MVOh4vU/C7CkddsR 2PLaRLFIe1IHPqYbm7JIhVLbcgtrE1BCCK0HXorT9xg0sAhqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD85IAPyQ60bXOTjxmkIzV2MZa5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDQ5M2E3NmYtYjYyYy0z YjVkLTg1MzgtMWIyN2VlZTcwN2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuHrCbyqfoh2ehL8Yxix0BLMRDDZIXvgBg/VJoiDArYxQtlApHbRyWv BYbrHs1h45Q/DiFJKjEjVChMKmanbawjYvfcV3d74J5HhR6ppFtsRBzVIwt/5Un+ 6otOlhQxdPtdBEpwHLYFXyh7l3hVsxndpRqOU8SbIfubPcwRg9sQjeiDmAOD2qfv WD9tLd3nIlUUJm6gkJK/9MpVXaahM2rPny+INZEY2UKJndqahyB3M3QRx2KEks4r P9QKX7vzI61KRpfrS68r46TzUrVZyIAnHO0TYRMA1cwqH/ZhEOuPhqDNIBvFyTKA d5Wb5vGax65PEKAJj6tIqsSk0ATqPZM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:26:21 2025 by rpki-client