$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/95c1ff63-f35f-3c6d-9175-0058dc8080a6.roa File: 95c1ff63-f35f-3c6d-9175-0058dc8080a6.roa (raw, json) Hash identifier: IPXQFn5fd/ZWjkEbzS4HVkH2Qys/dufHcSEe8lrQtws= Subject key identifier: 37:DC:B3:27:44:2E:D8:DF:42:E8:AC:CF:3C:99:58:36:15:70:90:E7 Certificate issuer: /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Certificate serial: 010D0C9F4328584B2496C464025C8A5F28271D40 Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/95c1ff63-f35f-3c6d-9175-0058dc8080a6.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 396298 IP address blocks: 104.193.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c4:64:02:5c:8a:5f:28:27:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=7696bb11-d170-4e17-b223-67d303e2bcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:32:1b:68:ec:3d:50:20:af:c5:19:3d:8e:1a: 97:4f:5d:12:5c:65:13:70:d6:c6:12:61:8d:d5:29: 6a:f3:8d:32:9f:2a:3a:45:c7:59:63:fa:a6:a7:65: fc:e2:8a:da:b5:a4:04:0b:18:f4:e3:3b:fe:92:a4: b3:25:e5:5c:c7:c2:da:34:f1:ae:18:32:70:ba:49: 8c:72:ae:88:da:c2:e4:40:3f:97:66:60:77:4c:b5: 24:e2:3b:c4:1b:30:91:84:39:8a:0c:8d:1e:96:12: 2a:0e:a7:48:26:ea:a9:3f:98:40:d6:d9:4f:2c:1c: 30:1f:3e:46:8b:c3:dd:66:06:c9:9b:7d:10:c1:40: c6:1b:38:eb:49:50:b9:82:c9:70:d4:e2:f2:e2:8e: d1:98:ac:51:c7:8c:38:dd:0b:60:d0:3e:71:40:6b: 3b:bd:ba:8e:2f:bb:82:32:21:46:77:fe:c1:cc:9e: 7d:f7:04:75:c3:b0:4c:39:5f:b3:a6:61:36:b1:a4: a9:7a:a2:01:a6:07:c0:49:ec:66:92:d5:7b:dc:50: e1:8a:d2:1f:bf:b5:ff:81:24:26:08:00:c6:0f:ac: ce:aa:1e:f1:6e:ae:e6:e2:a4:0f:78:22:e5:8f:ee: 0b:e6:6f:f8:bf:50:5b:35:59:4c:e6:dd:fe:be:8c: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:DC:B3:27:44:2E:D8:DF:42:E8:AC:CF:3C:99:58:36:15:70:90:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/95c1ff63-f35f-3c6d-9175-0058dc8080a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl X509v3 Authority Key Identifier: keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer sbgp-ipAddrBlock: critical IPv4: 104.193.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6c:3b:fc:c2:0a:c6:38:11:cb:94:c0:56:10:c1:f1:15:05: 3b:48:da:8f:32:cd:91:e7:d2:a8:8f:45:6b:65:57:63:b3:84: de:13:14:d2:e7:d6:5b:cc:46:da:e6:97:2f:6f:78:a5:84:b1: 2d:62:c3:14:7c:9f:33:e7:80:1e:20:04:1d:82:6f:dd:49:24: 2c:8c:32:ab:29:0a:49:21:bb:d0:3c:bd:b0:17:01:e5:1b:a6: 18:27:2b:56:52:b5:d6:0f:6d:2a:19:f9:77:05:55:19:dd:11: 82:16:5d:fc:58:96:ec:34:f5:f1:ca:21:e9:6b:ee:fe:8f:44: dc:58:9f:d4:1c:39:34:bf:d2:d1:01:5a:e2:ba:41:12:5a:7e: 41:58:b4:15:44:5d:98:4e:76:96:47:a8:35:02:65:40:26:0e: d0:6d:6e:92:cf:39:2c:ab:4c:3a:5a:26:f3:c6:2d:f3:8c:7e: 53:42:ef:d6:8d:ce:e1:70:47:21:0b:b1:ab:4f:ed:31:56:12: 50:94:19:22:cf:db:50:8f:7e:3c:61:1d:c3:77:2d:63:ad:7e: d2:b2:36:c5:27:6e:2f:7c:03:3c:57:e1:de:56:2f:66:89:fd: f2:da:2a:7e:ab:48:b8:16:14:18:2d:56:95:f4:1d:01:d0:84: 85:6e:22:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsRkAlyKXygnHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiMzVmNzEtNTFhYy00M2ZmLWI2MDQtY2JhMzU1MmM0 YzhjMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NzY5NmJiMTEtZDE3MC00ZTE3LWIyMjMtNjdkMzAzZTJiY2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjIbaOw9UCCvxRk9jhqXT10SXGUTcNbGEmGN 1Slq840ynyo6RcdZY/qmp2X84orataQECxj04zv+kqSzJeVcx8LaNPGuGDJwukmM cq6I2sLkQD+XZmB3TLUk4jvEGzCRhDmKDI0elhIqDqdIJuqpP5hA1tlPLBwwHz5G i8PdZgbJm30QwUDGGzjrSVC5gslw1OLy4o7RmKxRx4w43Qtg0D5xQGs7vbqOL7uC MiFGd/7BzJ599wR1w7BMOV+zpmE2saSpeqIBpgfASexmktV73FDhitIfv7X/gSQm CADGD6zOqh7xbq7m4qQPeCLlj+4L5m/4v1BbNVlM5t3+vozKcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfcsydELtjfQuiszzyZWDYVcJDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIz NWY3MS01MWFjLTQzZmYtYjYwNC1jYmEzNTUyYzRjOGMvOTVjMWZmNjMtZjM1Zi0z YzZkLTkxNzUtMDA1OGRjODA4MGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODZiMzVmNzEtNTFhYy00M2ZmLWI2 MDQtY2JhMzU1MmM0YzhjLzg2YjM1ZjcxLTUxYWMtNDNmZi1iNjA0LWNiYTM1NTJj NGM4Yy5jcmwwHwYDVR0jBBgwFoAUZJw9/tPfPWtnvG286QW8wGzmHNcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84NmIzNWY3MS01MWFjLTQzZmYtYjYwNC1jYmEz NTUyYzRjOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaMGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9sO/zCCsY4EcuUwFYQwfEVBTtI2o8yzZHn0qiPRWtlV2OzhN4TFNLn 1lvMRtrmly9veKWEsS1iwxR8nzPngB4gBB2Cb91JJCyMMqspCkkhu9A8vbAXAeUb phgnK1ZStdYPbSoZ+XcFVRndEYIWXfxYluw09fHKIelr7v6PRNxYn9QcOTS/0tEB WuK6QRJafkFYtBVEXZhOdpZHqDUCZUAmDtBtbpLPOSyrTDpaJvPGLfOMflNC79aN zuFwRyELsatP7TFWElCUGSLP21CPfjxhHcN3LWOtftKyNsUnbi98AzxX4d5WL2aJ /fLaKn6rSLgWFBgtVpX0HQHQhIVuIsI= -----END CERTIFICATE-----Generated at Wed Sep 10 06:39:26 2025 by rpki-client