$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3ae72f5-5785-3cce-bec9-24fe8efef2a6.roa File: e3ae72f5-5785-3cce-bec9-24fe8efef2a6.roa (raw, json) Hash identifier: hzMcSASOYKGg5FwOvFMTxXX1JdQX3pyLj0goOYIZVXM= Subject key identifier: C0:8D:6B:FC:17:FA:43:FB:2D:97:12:E5:82:22:D5:15:EA:C7:02:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52164B214068D2F1C524580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3ae72f5-5785-3cce-bec9-24fe8efef2a6.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.104.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:64:b2:14:06:8d:2f:1c:52:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=a759da1e-403c-4d7f-8dc2-dc4ca60b4247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:04:53:8b:2a:e9:3e:9c:46:a8:42:9e:ac:f3: 28:5f:7c:48:23:ca:e5:ce:e1:1e:02:47:9c:67:53: d1:6a:d9:ee:ea:2b:26:1c:a1:0d:c0:3b:be:bf:9b: 23:c1:fe:b9:3e:6e:91:cb:e9:0c:8b:ce:01:79:e6: 8c:4d:0d:95:7a:6d:d3:d2:8c:d2:4c:0e:c4:df:4f: 47:70:1a:66:97:a5:4b:7d:8d:8a:31:45:23:21:15: e2:a6:f2:8c:ca:b6:72:f0:e3:51:80:33:d0:f5:cf: bb:e7:24:c6:cf:3c:8c:32:5f:1c:97:70:f7:bd:95: 33:4b:1d:ba:77:7a:7c:0b:71:04:12:d9:83:11:c4: b1:12:5d:32:bd:32:d2:2d:1b:f4:86:9d:7c:0d:52: b9:55:12:9a:73:74:fe:22:94:40:6d:12:55:2b:a6: ec:ce:e5:e1:e8:30:18:0c:4d:35:53:0f:65:bb:65: 68:49:0f:3a:92:dc:c7:9f:3f:65:8b:7f:da:66:95: 11:d7:93:0c:bc:2a:97:1d:de:2c:10:c9:1a:c7:23: cf:da:39:21:ca:06:2d:98:67:7a:0e:21:c5:a2:75: 1e:08:11:21:e9:f1:1b:20:5b:c5:33:35:e2:f7:73: 5f:68:c4:13:b0:4c:5b:9e:73:e1:d8:96:cd:84:14: 8c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8D:6B:FC:17:FA:43:FB:2D:97:12:E5:82:22:D5:15:EA:C7:02:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3ae72f5-5785-3cce-bec9-24fe8efef2a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.104.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:cb:5d:73:ee:d9:7c:65:6c:70:b6:99:ff:3f:3b:49:6b:41: 87:90:6a:89:fc:a7:04:bd:11:aa:9e:0d:35:65:f2:66:bf:15: 19:f8:14:be:15:4c:fe:7c:d8:5a:00:d6:8c:96:21:d9:c9:e2: 29:81:13:ff:c0:46:f3:d8:f0:3a:da:99:f0:53:bd:9d:53:2e: 64:a2:91:ec:ed:7d:31:b2:40:7d:c4:1a:ec:b2:18:84:0a:b7: 28:2e:ee:b6:35:3f:94:92:64:f7:16:fb:28:07:36:6d:b3:4a: 09:87:10:f5:cd:b6:a6:5c:cd:9c:c2:9a:64:e1:83:9e:6e:1a: cd:8c:09:47:0f:b6:2a:93:17:14:64:6e:c2:cb:8a:9e:30:60: 63:0f:2b:ea:63:64:68:ad:92:7f:73:e4:ec:0e:c8:19:e1:87: 2a:61:79:0e:86:03:2b:e9:14:a0:d7:72:84:7f:dd:34:ff:30: 5e:bc:e3:78:fd:03:c7:d2:66:99:b4:39:50:c9:9d:d7:8d:ef: a0:73:71:33:9b:74:4f:7f:cf:1b:ed:ed:6a:f6:e2:4f:06:91: ce:94:6b:a9:1f:4a:85:8f:62:84:d0:cc:a2:d1:78:29:05:62: 64:95:70:1b:3a:a6:2d:57:4e:71:c9:9b:dc:2a:c6:71:68:5e: a5:8c:3a:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWSyFAaNLxxSRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YTc1OWRhMWUtNDAzYy00ZDdmLThkYzItZGM0Y2E2MGI0MjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQRTiyrpPpxGqEKerPMoX3xII8rlzuEeAkec Z1PRatnu6ismHKENwDu+v5sjwf65Pm6Ry+kMi84BeeaMTQ2Vem3T0ozSTA7E309H cBpml6VLfY2KMUUjIRXipvKMyrZy8ONRgDPQ9c+75yTGzzyMMl8cl3D3vZUzSx26 d3p8C3EEEtmDEcSxEl0yvTLSLRv0hp18DVK5VRKac3T+IpRAbRJVK6bszuXh6DAY DE01Uw9lu2VoSQ86ktzHnz9li3/aZpUR15MMvCqXHd4sEMkaxyPP2jkhygYtmGd6 DiHFonUeCBEh6fEbIFvFMzXi93NfaMQTsExbnnPh2JbNhBSM6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCNa/wX+kP7LZcS5YIi1RXqxwJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNhZTcyZjUtNTc4NS0z Y2NlLWJlYzktMjRmZThlZmVmMmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnLXXPu2XxlbHC2mf8/O0lrQYeQaon8pwS9EaqeDTVl8ma/FRn4FL4V TP582FoA1oyWIdnJ4imBE//ARvPY8DramfBTvZ1TLmSikeztfTGyQH3EGuyyGIQK tygu7rY1P5SSZPcW+ygHNm2zSgmHEPXNtqZczZzCmmThg55uGs2MCUcPtiqTFxRk bsLLip4wYGMPK+pjZGitkn9z5OwOyBnhhypheQ6GAyvpFKDXcoR/3TT/MF6843j9 A8fSZpm0OVDJndeN76BzcTObdE9/zxvt7Wr24k8Gkc6Ua6kfSoWPYoTQzKLReCkF YmSVcBs6pi1XTnHJm9wqxnFoXqWMOv8= -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:33 2025 by rpki-client