$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa File: 95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa (raw, json) Hash identifier: c5BLtsbs/SByc9LXiAiJ/om5cPuGCrTELFTn1g6ucw4= Subject key identifier: F8:FE:DC:7D:94:13:FA:02:95:59:60:41:AD:4A:87:DE:EB:FE:8A:78 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52169CD9AFFE68D53806100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.93.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:69:cd:9a:ff:e6:8d:53:80:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=f931df9f-ccfb-458b-81da-4ef9aba6e02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c5:c9:79:52:89:b9:42:6d:cc:e9:7f:96:b1: 60:be:28:2f:64:96:0b:9d:48:00:ca:b9:e2:f0:63: 02:7f:ab:63:4e:66:0e:3e:cc:f7:c6:77:74:0c:40: b6:0b:d4:dd:d5:51:78:ad:17:26:39:00:13:c3:84: 44:07:5b:bf:d3:ba:76:61:9a:54:b9:e7:db:68:4f: 5a:b2:81:9a:1f:b5:19:9b:3f:a2:8f:b7:8e:ad:c4: 99:e9:d4:db:0f:94:ef:5b:07:4d:98:a5:c1:94:c2: fe:d7:b4:ac:92:c4:11:e4:25:30:d7:7f:f9:84:09: ea:3e:6c:20:91:94:50:f4:01:80:c1:6b:51:1d:a0: c1:f1:3c:1a:0e:5a:b8:69:91:d4:92:71:2c:1f:92: e2:3a:4c:18:56:e4:28:e0:9e:e6:dd:e0:8b:97:6e: dc:00:83:6d:49:4c:fb:37:79:23:2d:d7:a6:05:a4: 6a:4a:0a:df:56:f7:f7:ee:d4:53:c9:48:97:35:f8: 8d:ef:e4:ac:b3:08:dc:55:93:7f:90:9e:76:62:6a: f6:59:4d:3a:97:4a:0a:b5:82:e3:77:6c:d0:5d:07: b3:26:65:35:1c:32:c8:3d:72:9b:cf:f8:8f:06:77: 5d:e7:6b:ef:ad:3e:25:f6:ce:6f:bf:30:6e:49:10: 4e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FE:DC:7D:94:13:FA:02:95:59:60:41:AD:4A:87:DE:EB:FE:8A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/95bc7d2e-e492-3ff1-81e4-e160b23d0a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.93.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:98:84:61:8c:ce:50:ef:46:c4:f2:52:cc:65:9f:d8:ed:af: b9:7b:0b:b1:3f:87:52:c9:10:6e:49:53:65:68:8a:9d:fe:ad: 67:e5:1a:c8:2c:62:b4:dc:1c:00:dc:9f:dc:93:cb:43:18:fb: 42:ea:83:d0:f5:67:23:83:65:0c:6b:18:6b:43:87:f3:0d:31: bb:79:e1:fa:60:e9:21:2b:31:cd:81:3a:5e:b3:0e:ad:8d:9d: c5:3c:93:18:b4:c7:88:4e:6c:47:6f:c7:09:91:2f:19:40:ca: 2d:e7:75:36:3a:3e:22:72:d9:a6:f5:ac:3b:bf:0e:24:a7:23: 2a:50:fc:23:f2:21:1a:68:63:ed:a8:85:a8:b1:96:91:cd:58: 59:78:cd:2e:38:b7:21:a9:59:44:26:d3:d3:57:70:64:53:c4: 11:d6:19:68:39:a9:a1:ff:a1:bd:9e:0e:0e:e3:1a:1d:91:8a: 9e:0f:27:b1:5f:cc:d7:cd:4f:93:d8:cd:75:77:89:10:8a:7c: bf:4d:87:54:1c:b4:28:3a:31:0c:3c:7d:a7:e7:2f:ad:91:2d: e3:79:22:24:81:9c:36:96:0a:90:0e:ae:32:8b:02:98:ef:ca: 02:95:31:70:39:ad:34:36:89:c1:90:cf:77:03:91:d2:3a:6f: 50:6b:e7:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWnNmv/mjVOAYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjkzMWRmOWYtY2NmYi00NThiLTgxZGEtNGVmOWFiYTZlMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksXJeVKJuUJtzOl/lrFgvigvZJYLnUgAyrni 8GMCf6tjTmYOPsz3xnd0DEC2C9Td1VF4rRcmOQATw4REB1u/07p2YZpUuefbaE9a soGaH7UZmz+ij7eOrcSZ6dTbD5TvWwdNmKXBlML+17SsksQR5CUw13/5hAnqPmwg kZRQ9AGAwWtRHaDB8TwaDlq4aZHUknEsH5LiOkwYVuQo4J7m3eCLl27cAINtSUz7 N3kjLdemBaRqSgrfVvf37tRTyUiXNfiN7+SsswjcVZN/kJ52Ymr2WU06l0oKtYLj d2zQXQezJmU1HDLIPXKbz/iPBndd52vvrT4l9s5vvzBuSRBORQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj+3H2UE/oClVlgQa1Kh97r/op4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTViYzdkMmUtZTQ5Mi0z ZmYxLTgxZTQtZTE2MGIyM2QwYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaF0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiYhGGMzlDvRsTyUsxln9jtr7l7C7E/h1LJEG5JU2Voip3+rWflGsgs YrTcHADcn9yTy0MY+0Lqg9D1ZyODZQxrGGtDh/MNMbt54fpg6SErMc2BOl6zDq2N ncU8kxi0x4hObEdvxwmRLxlAyi3ndTY6PiJy2ab1rDu/DiSnIypQ/CPyIRpoY+2o haixlpHNWFl4zS44tyGpWUQm09NXcGRTxBHWGWg5qaH/ob2eDg7jGh2Rip4PJ7Ff zNfNT5PYzXV3iRCKfL9Nh1QctCg6MQw8fafnL62RLeN5IiSBnDaWCpAOrjKLApjv ygKVMXA5rTQ2icGQz3cDkdI6b1Br55g= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:58 2025 by rpki-client