$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b1af1dd-c0f1-37df-af54-b090e69eac1a.roa File: 9b1af1dd-c0f1-37df-af54-b090e69eac1a.roa (raw, json) Hash identifier: cFK+KIQgBJqDP/+Wb5m8XPEJ1+bxaOUTGFcM7mK/amc= Subject key identifier: 1D:AD:0C:E4:A0:F9:77:8A:1B:F4:65:C0:58:88:43:43:87:BE:30:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216C8150212528E0636EE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b1af1dd-c0f1-37df-af54-b090e69eac1a.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 7713 IP address blocks: 104.99.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6c:81:50:21:25:28:e0:63:6e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=ab5e6e47-3f50-4d53-a63f-df27998a4d4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:16:29:ec:ff:fe:2e:43:11:2c:df:91:86: 77:4d:6a:a4:20:ed:ac:ab:ad:83:7f:06:34:8e:c0: 41:4c:e8:15:a0:53:78:70:f0:64:1b:4a:c9:c8:b4: 25:cd:4a:2f:20:61:c3:66:4c:6f:81:ad:2f:91:2d: a4:5d:25:18:8d:0f:44:15:aa:32:c1:d8:18:1a:62: f7:6f:62:58:9f:48:ee:67:60:69:1f:c4:1d:08:ba: f7:d8:3e:2f:26:e2:b7:ea:f6:0a:5d:6a:f0:45:75: 66:0f:f0:24:1a:8c:03:1a:0d:aa:08:f9:08:28:71: 85:81:c4:3f:40:10:be:37:b4:6d:d1:2e:64:ac:e0: 99:3f:e2:9d:0c:83:c7:d9:10:1e:e9:60:8d:a2:ab: 39:f6:63:f5:a0:03:ae:36:89:52:c7:a3:fe:3f:c6: 7d:09:b9:27:09:e4:cc:92:43:a0:e8:93:c5:4d:d2: 36:c7:4c:15:d8:26:e1:f6:c7:03:f6:12:bf:d1:ec: b2:db:c6:28:94:66:11:b0:b8:d4:32:34:5c:3a:73: 62:3e:e9:f3:51:d8:fc:b6:06:6c:1a:ae:fd:33:c2: f0:6d:6f:1b:1d:48:71:e5:dc:bc:32:c9:88:6f:79: 99:ce:fe:90:b1:75:8c:c6:0c:b0:19:ae:a3:18:10: c3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:AD:0C:E4:A0:F9:77:8A:1B:F4:65:C0:58:88:43:43:87:BE:30:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b1af1dd-c0f1-37df-af54-b090e69eac1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:3c:00:09:77:e0:04:ac:e8:a9:41:a3:55:ff:b0:76:78:11: 69:32:d5:4f:e0:34:30:ad:02:9e:17:5c:58:88:c1:04:87:7b: 9c:02:c9:b7:6e:d6:6a:96:db:6e:7c:b8:a4:38:80:b9:4e:50: 3d:ad:33:2f:bf:da:6b:48:87:0e:a2:cc:68:a3:a8:ce:83:4e: 74:31:22:05:c6:b4:1d:54:e3:39:22:1f:22:8a:5a:25:84:60: e2:dc:b2:da:e6:a5:d5:76:e3:a7:39:3d:e1:fa:70:1e:97:0d: d7:b5:e5:23:da:d0:a3:74:73:84:e8:41:4e:b3:f0:c8:d5:3d: 89:1b:83:50:82:2b:fd:0c:38:6a:cf:12:24:a1:47:ec:30:6c: 22:53:b3:b2:fe:e5:36:81:f3:f8:22:62:06:a4:79:4c:db:23: 40:9b:dc:7e:2f:f4:84:4b:8c:0a:82:fd:12:05:bb:45:8d:32: 85:1c:17:b6:db:01:52:32:5c:40:3a:82:72:a8:3d:ef:78:75: 71:15:8c:41:8b:84:1c:80:99:6a:7a:40:28:fd:38:66:84:8e: e8:69:d2:8f:4a:c3:82:70:74:e9:87:cd:1b:96:55:00:fb:6d: 80:cb:97:dc:63:fc:68:c6:01:9a:33:83:1a:b4:86:00:fd:dc: 73:4a:9c:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWyBUCElKOBjbuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YWI1ZTZlNDctM2Y1MC00ZDUzLWE2M2YtZGYyNzk5OGE0ZDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F4WKez//i5DESzfkYZ3TWqkIO2sq62DfwY0 jsBBTOgVoFN4cPBkG0rJyLQlzUovIGHDZkxvga0vkS2kXSUYjQ9EFaoywdgYGmL3 b2JYn0juZ2BpH8QdCLr32D4vJuK36vYKXWrwRXVmD/AkGowDGg2qCPkIKHGFgcQ/ QBC+N7Rt0S5krOCZP+KdDIPH2RAe6WCNoqs59mP1oAOuNolSx6P+P8Z9CbknCeTM kkOg6JPFTdI2x0wV2Cbh9scD9hK/0eyy28YolGYRsLjUMjRcOnNiPunzUdj8tgZs Gq79M8LwbW8bHUhx5dy8MsmIb3mZzv6QsXWMxgywGa6jGBDDSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2tDOSg+XeKG/RlwFiIQ0OHvjCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWIxYWYxZGQtYzBmMS0z N2RmLWFmNTQtYjA5MGU2OWVhYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaGO2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA8AAl34ASs6KlBo1X/sHZ4EWky1U/gNDCtAp4XXFiIwQSHe5wCybdu 1mqW2258uKQ4gLlOUD2tMy+/2mtIhw6izGijqM6DTnQxIgXGtB1U4zkiHyKKWiWE YOLcstrmpdV246c5PeH6cB6XDde15SPa0KN0c4ToQU6z8MjVPYkbg1CCK/0MOGrP EiShR+wwbCJTs7L+5TaB8/giYgakeUzbI0Cb3H4v9IRLjAqC/RIFu0WNMoUcF7bb AVIyXEA6gnKoPe94dXEVjEGLhByAmWp6QCj9OGaEjuhp0o9Kw4JwdOmHzRuWVQD7 bYDLl9xj/GjGAZozgxq0hgD93HNKnII= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:50 2025 by rpki-client