$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa File: e38a345b-3007-3bfd-a88b-6b24141726d3.roa (raw, json) Hash identifier: 7TyeI9ztsZ8O2IS/LwbWwSz/NIgLDPr3J91xGpMZIkA= Subject key identifier: 29:C4:38:C1:D8:17:5F:60:78:80:64:37:FF:9D:75:1C:5C:2F:3D:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52167F1A503EDD060E13EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.86.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:67:f1:a5:03:ed:d0:60:e1:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=2d9e0f11-bb1d-40fb-8c1e-0b91ac81a2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:f5:f6:df:aa:e7:d5:1a:cd:46:52:fd:69: 05:ee:bf:56:f5:66:e9:d1:b6:09:a7:7d:0c:7e:90: a3:17:f0:08:9e:bb:ae:51:50:c3:dd:d7:f5:9c:e5: 3c:c7:a8:a6:15:0e:2c:37:10:97:e3:a1:0d:96:f9: 01:b5:74:ea:6c:51:32:e7:86:a1:71:c8:50:c4:22: b1:0e:99:eb:70:68:95:c7:55:80:b0:1c:2f:59:e5: b0:79:29:56:69:ac:a1:1f:58:3a:3c:8f:de:b4:59: 50:27:82:15:76:c7:5a:30:b8:bb:67:f3:28:1c:a9: 78:e6:25:d1:3e:4d:70:14:5f:93:3e:71:ba:5e:f1: 18:78:9c:c1:66:06:a4:b0:f9:1a:39:7b:2c:33:40: 83:b5:19:99:b7:90:8c:a7:55:41:e9:27:ee:a4:49: ec:af:14:33:ac:84:9a:75:75:ba:82:64:d9:ab:be: 73:94:14:7d:14:10:e7:88:f4:53:21:b8:dc:aa:32: 96:d7:30:b2:1a:f0:67:17:cf:33:f5:56:0e:67:07: 91:18:f7:76:a0:85:49:16:dc:7a:86:4a:d9:eb:a6: 6d:06:b6:7f:37:50:07:d8:ab:40:f3:0b:ac:ac:ba: 83:2a:27:32:4f:04:85:a2:6b:ae:00:dc:e8:0e:6e: 05:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C4:38:C1:D8:17:5F:60:78:80:64:37:FF:9D:75:1C:5C:2F:3D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e38a345b-3007-3bfd-a88b-6b24141726d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:d3:ef:af:08:00:29:f4:79:1f:bb:42:17:8c:a9:34:7e:04: 22:76:d3:43:57:66:a0:13:66:45:18:d4:48:5c:23:a5:3b:f5: 8a:25:2f:09:5e:bc:63:5b:3f:07:5e:a4:6e:fc:f9:cd:8b:03: c6:73:f9:d6:5d:97:78:83:9f:06:2e:a6:89:55:ab:0b:46:06: 9b:1a:91:15:e1:17:81:0f:a0:d5:a6:f0:fa:6d:ca:8b:1a:37: 2f:ca:de:fa:04:65:b1:ad:eb:4d:06:f2:53:e4:9d:8c:a6:e9: 84:66:c8:f4:29:d3:d2:5c:2d:9d:89:64:e0:62:a8:4c:64:21: f5:80:e5:64:ef:47:04:2f:ae:9d:28:36:23:c9:44:c1:56:b3: cd:29:42:a9:b0:a0:cb:10:f0:a0:a8:cd:ea:34:10:2e:bc:0a: 7a:b7:bf:0a:ea:ba:41:50:9f:17:bb:00:a9:bf:72:9c:11:df: cb:05:dc:b4:a8:62:aa:c4:11:0c:00:03:e9:02:8d:54:e9:bf: b5:37:10:00:b4:02:84:6f:3c:e1:6e:34:50:51:59:36:c8:3b: 1f:4c:f6:c0:30:2e:a2:c5:c2:31:dd:d5:d6:f4:8f:fc:7b:91: 24:6e:e7:5d:16:cf:ca:28:c2:6b:a2:69:8a:70:84:88:f5:70: 47:b3:23:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWfxpQPt0GDhPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmQ5ZTBmMTEtYmIxZC00MGZiLThjMWUtMGI5MWFjODFhMmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5n19t+q59UazUZS/WkF7r9W9Wbp0bYJp30M fpCjF/AInruuUVDD3df1nOU8x6imFQ4sNxCX46ENlvkBtXTqbFEy54ahcchQxCKx DpnrcGiVx1WAsBwvWeWweSlWaayhH1g6PI/etFlQJ4IVdsdaMLi7Z/MoHKl45iXR Pk1wFF+TPnG6XvEYeJzBZgaksPkaOXssM0CDtRmZt5CMp1VB6SfupEnsrxQzrISa dXW6gmTZq75zlBR9FBDniPRTIbjcqjKW1zCyGvBnF88z9VYOZweRGPd2oIVJFtx6 hkrZ66ZtBrZ/N1AH2KtA8wusrLqDKicyTwSFomuuANzoDm4FSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnEOMHYF19geIBkN/+ddRxcLz2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTM4YTM0NWItMzAwNy0z YmZkLWE4OGItNmIyNDE0MTcyNmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaFZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDT768IACn0eR+7QheMqTR+BCJ200NXZqATZkUY1EhcI6U79YolLwle vGNbPwdepG78+c2LA8Zz+dZdl3iDnwYupolVqwtGBpsakRXhF4EPoNWm8Pptyosa Ny/K3voEZbGt600G8lPknYym6YRmyPQp09JcLZ2JZOBiqExkIfWA5WTvRwQvrp0o NiPJRMFWs80pQqmwoMsQ8KCozeo0EC68Cnq3vwrqukFQnxe7AKm/cpwR38sF3LSo YqrEEQwAA+kCjVTpv7U3EAC0AoRvPOFuNFBRWTbIOx9M9sAwLqLFwjHd1db0j/x7 kSRu510Wz8oowmuiaYpwhIj1cEezIzg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:27:11 2025 by rpki-client