$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa File: d8bcab89-deac-3d68-b72a-3a4a20a98221.roa (raw, json) Hash identifier: dGn9LHTSjLKjUZG3ZcgolGJ9exBozDFYZqQb/GFUpTE= Subject key identifier: 2B:46:24:EE:F2:61:83:22:9F:27:92:DB:31:C5:02:B9:3F:F8:FF:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216CA26A8289AD76DDB900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 9443 IP address blocks: 104.99.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6c:a2:6a:82:89:ad:76:dd:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=2d70fce6-a5f0-4d40-be16-ee88522412e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1b:83:57:29:37:0d:09:26:cd:be:17:99:bb: b1:fb:02:18:28:ac:3a:b7:d1:13:4e:a0:fe:04:7b: bf:80:fb:94:ce:7e:28:aa:9a:0f:f8:30:79:83:18: fe:e6:8c:0d:2e:d6:11:8f:9a:ce:58:fd:c8:73:fc: e4:90:b1:3b:bd:6e:37:cc:b9:b8:93:cc:11:ea:01: 49:4b:c9:14:62:72:95:61:35:e8:d8:52:05:dc:5a: e8:16:54:59:f0:11:53:82:fd:5e:7a:88:7f:6b:fa: d1:07:de:b8:6f:34:20:4e:62:99:30:41:af:d1:cb: fc:b2:b4:f6:08:14:bf:95:e2:13:af:e7:bc:1a:b6: 7b:2f:57:e0:5a:cd:00:30:75:63:fa:9e:90:8e:87: f3:d5:01:b1:ad:05:7a:42:f8:72:6f:eb:fb:27:63: be:e6:de:61:a3:6d:f0:eb:ad:a7:bc:b6:d7:d6:3a: 90:e3:e9:8f:c4:40:6e:90:0e:8c:63:87:52:09:04: e7:f0:03:11:21:5d:5c:a5:6e:72:79:18:61:89:4e: 51:6b:34:59:cd:f9:9a:28:a7:2b:0d:3f:9e:99:d3: 96:89:e9:5b:cb:36:58:4d:77:89:30:c5:f1:e9:76: 22:03:70:d7:5d:8f:09:d8:9d:dd:cf:82:fa:36:99: a9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:46:24:EE:F2:61:83:22:9F:27:92:DB:31:C5:02:B9:3F:F8:FF:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d8bcab89-deac-3d68-b72a-3a4a20a98221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.99.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:f3:fa:68:29:2a:81:2e:33:1d:48:4d:d2:7c:50:9e:69:39: 16:84:5b:9a:86:f5:92:94:0d:95:5e:d9:d9:58:a9:55:7f:19: 97:53:7d:aa:41:dd:72:03:06:9c:e1:a8:56:1c:5c:be:96:91: bf:54:ee:1d:a6:9c:22:5d:54:43:71:1c:8a:91:a2:9a:1b:53: 16:be:4a:62:c2:48:31:de:b3:43:33:c7:76:7c:cc:f5:39:ed: 72:56:f6:81:61:77:6a:9a:34:f3:f8:da:cc:d6:af:e0:f0:24: bd:a2:32:a9:61:a4:38:a5:d6:33:a1:8b:2d:d4:dd:f0:7f:e1: f4:43:7a:0e:95:d7:8f:99:5d:67:e5:fd:7c:d0:c0:55:5a:2b: 5b:4b:04:15:96:98:69:bf:ee:a3:a3:75:07:13:b1:78:01:6c: bb:fb:65:69:28:bf:54:13:33:a4:e4:30:f3:73:e1:63:1f:14: 9c:0d:8f:6f:d8:28:8c:1d:d2:fb:a3:a9:ad:98:56:75:b2:cf: 1e:48:ad:10:7a:0b:b9:b3:ae:e4:cd:a0:ab:d2:ec:33:5b:d3: c4:04:e1:11:e0:a4:57:6a:4a:b6:e7:8e:a3:c4:6b:e2:6b:60: 08:5f:a4:01:91:3a:b7:9b:9a:46:8f:fb:50:4c:f8:31:45:06: 8f:c0:44:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWyiaoKJrXbduQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmQ3MGZjZTYtYTVmMC00ZDQwLWJlMTYtZWU4ODUyMjQxMmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhuDVyk3DQkmzb4Xmbux+wIYKKw6t9ETTqD+ BHu/gPuUzn4oqpoP+DB5gxj+5owNLtYRj5rOWP3Ic/zkkLE7vW43zLm4k8wR6gFJ S8kUYnKVYTXo2FIF3FroFlRZ8BFTgv1eeoh/a/rRB964bzQgTmKZMEGv0cv8srT2 CBS/leITr+e8GrZ7L1fgWs0AMHVj+p6Qjofz1QGxrQV6Qvhyb+v7J2O+5t5ho23w 662nvLbX1jqQ4+mPxEBukA6MY4dSCQTn8AMRIV1cpW5yeRhhiU5RazRZzfmaKKcr DT+emdOWielbyzZYTXeJMMXx6XYiA3DXXY8J2J3dz4L6NpmpPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtGJO7yYYMinyeS2zHFArk/+P97MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDhiY2FiODktZGVhYy0z ZDY4LWI3MmEtM2E0YTIwYTk4MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGO8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3z+mgpKoEuMx1ITdJ8UJ5pORaEW5qG9ZKUDZVe2dlYqVV/GZdTfapB 3XIDBpzhqFYcXL6Wkb9U7h2mnCJdVENxHIqRopobUxa+SmLCSDHes0Mzx3Z8zPU5 7XJW9oFhd2qaNPP42szWr+DwJL2iMqlhpDil1jOhiy3U3fB/4fRDeg6V14+ZXWfl /XzQwFVaK1tLBBWWmGm/7qOjdQcTsXgBbLv7ZWkov1QTM6TkMPNz4WMfFJwNj2/Y KIwd0vujqa2YVnWyzx5IrRB6C7mzruTNoKvS7DNb08QE4RHgpFdqSrbnjqPEa+Jr YAhfpAGROrebmkaP+1BM+DFFBo/ARMc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:05:46 2025 by rpki-client