$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd43c25e-3e5a-31ac-8a9f-6edf2028beb4.roa File: cd43c25e-3e5a-31ac-8a9f-6edf2028beb4.roa (raw, json) Hash identifier: Q2lZl8AwinU0YyjAdRABHCR3ET0LWUrYNgrn751Hekk= Subject key identifier: C3:DA:6B:CC:B6:2B:0C:DD:56:01:6E:C9:A2:04:D8:2C:5F:35:39:5C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B328C507F6C2BEE7E7D98E900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd43c25e-3e5a-31ac-8a9f-6edf2028beb4.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 33905 IP address blocks: 104.96.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:50:7f:6c:2b:ee:7e:7d:98:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=59a27fd6-391d-4eed-b54a-148b09bdeefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d8:76:fb:a7:63:26:84:6d:41:7f:9f:a9:d2: 79:d5:07:83:0f:8b:ab:47:07:50:2d:a4:ac:46:cc: 4d:a2:13:c7:32:31:22:c9:95:9e:ca:d8:5f:c5:30: fe:8e:4f:ac:6a:77:35:3a:50:d3:7a:ba:b2:ca:49: 1b:65:24:00:35:21:50:2d:5b:66:43:84:94:79:d4: a5:06:a9:f2:a7:3c:63:2f:62:cf:0d:c9:3f:43:a0: 42:81:33:2f:a5:ad:54:85:48:50:d8:ec:0c:db:ba: c4:cf:a7:d7:8d:a3:1b:a4:f0:4a:97:68:c0:0c:b9: e0:ff:56:f9:07:7d:98:a4:52:d0:81:8f:14:cc:99: e0:36:fb:8d:ed:88:d9:07:1d:b3:9f:49:f0:d1:72: 0e:56:4a:9c:90:92:43:5a:7f:98:5f:ae:f7:d0:d2: 03:c6:e8:72:a1:5a:30:dc:72:ab:37:23:a7:2e:2b: c2:71:0f:9f:76:2a:11:bf:80:e4:53:27:32:12:b1: b6:07:16:5e:f6:7e:48:34:5e:79:5c:85:77:6b:e6: cd:0c:b7:17:c1:c7:73:ed:e3:16:29:d3:b6:d2:68: a0:39:ee:57:d5:75:b9:41:02:0e:83:3a:b8:e8:f3: 70:db:ea:e0:0b:1d:7f:85:cd:cc:4c:1d:2c:dc:80: f8:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DA:6B:CC:B6:2B:0C:DD:56:01:6E:C9:A2:04:D8:2C:5F:35:39:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd43c25e-3e5a-31ac-8a9f-6edf2028beb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.96.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0d:78:08:f5:f8:13:1b:df:c4:96:95:81:d8:1c:c4:dd:f3: 88:20:90:ee:6d:39:0e:fb:89:c5:e4:b1:fe:fe:a3:16:4f:9f: ac:1a:74:d9:70:5e:f9:7d:ed:b2:2f:fb:a3:39:06:e9:70:04: 3e:58:ae:c6:47:02:9a:d1:e8:03:c8:c9:0a:60:39:60:b6:26: c0:26:52:42:db:e3:65:d7:93:f4:bc:9c:79:e6:84:27:89:da: 50:c1:6a:ce:42:bb:8a:a2:c2:70:66:7f:3b:b2:d3:0d:b5:cf: 93:d3:e9:b5:12:3f:57:d6:b8:e9:d3:1b:3a:fe:c0:80:34:93: 5d:d2:a2:fe:b2:ef:43:8a:47:df:16:8d:9a:6b:b3:08:4d:2c: b0:76:6c:aa:42:24:3e:d4:b3:bb:9c:32:0c:46:d6:33:f1:45: 5d:61:02:e7:07:e0:9d:03:39:dd:52:3a:4f:62:b8:79:b4:9f: f4:49:da:fa:9e:f9:a9:a1:59:d8:c7:80:00:aa:50:4e:ca:0e: 44:0b:cb:88:86:95:20:ef:bd:9c:2c:c7:78:5e:77:c6:33:2e: ba:e3:94:80:2e:bc:80:07:5d:46:29:35:29:b2:7a:1d:db:0a: 62:ed:0a:38:e2:0f:04:3a:41:7a:2e:91:ad:39:99:af:ee:3a: 13:b0:54:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjFB/bCvufn2Y6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NTlhMjdmZDYtMzkxZC00ZWVkLWI1NGEtMTQ4YjA5YmRlZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nh2+6djJoRtQX+fqdJ51QeDD4urRwdQLaSs RsxNohPHMjEiyZWeythfxTD+jk+sanc1OlDTerqyykkbZSQANSFQLVtmQ4SUedSl BqnypzxjL2LPDck/Q6BCgTMvpa1UhUhQ2OwM27rEz6fXjaMbpPBKl2jADLng/1b5 B32YpFLQgY8UzJngNvuN7YjZBx2zn0nw0XIOVkqckJJDWn+YX6730NIDxuhyoVow 3HKrNyOnLivCcQ+fdioRv4DkUycyErG2BxZe9n5INF55XIV3a+bNDLcXwcdz7eMW KdO20migOe5X1XW5QQIOgzq46PNw2+rgCx1/hc3MTB0s3ID4DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPaa8y2KwzdVgFuyaIE2CxfNTlcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Q0M2MyNWUtM2U1YS0z MWFjLThhOWYtNmVkZjIwMjhiZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcNeAj1+BMb38SWlYHYHMTd84ggkO5tOQ77icXksf7+oxZPn6wadNlw Xvl97bIv+6M5BulwBD5YrsZHAprR6APIyQpgOWC2JsAmUkLb42XXk/S8nHnmhCeJ 2lDBas5Cu4qiwnBmfzuy0w21z5PT6bUSP1fWuOnTGzr+wIA0k13Sov6y70OKR98W jZprswhNLLB2bKpCJD7Us7ucMgxG1jPxRV1hAucH4J0DOd1SOk9iuHm0n/RJ2vqe +amhWdjHgACqUE7KDkQLy4iGlSDvvZwsx3hed8YzLrrjlIAuvIAHXUYpNSmyeh3b CmLtCjjiDwQ6QXouka05ma/uOhOwVBs= -----END CERTIFICATE-----Generated at Mon Oct 20 04:35:17 2025 by rpki-client