$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457c9b38-e5eb-3436-bbfb-9ea0c9e73f6f.roa File: 457c9b38-e5eb-3436-bbfb-9ea0c9e73f6f.roa (raw, json) Hash identifier: tp0Vzzu20DRRI4d6kFncCdPsP3X830XJzUPwyc13Z/c= Subject key identifier: 26:9A:B2:00:77:33:75:9F:AE:04:2C:52:C9:BA:9E:97:B7:0F:1F:41 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF52167E2731149026A7E69E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457c9b38-e5eb-3436-bbfb-9ea0c9e73f6f.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.86.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:67:e2:73:11:49:02:6a:7e:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=15706652-af98-454f-af4b-eaec02300a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:8b:a5:d2:67:46:a9:d8:62:1f:53:fc:02: 25:31:a8:1f:33:3e:76:85:8a:e5:a6:f6:ef:69:8e: 9b:f4:d9:5c:a7:8f:3d:f5:05:4e:7d:65:e5:48:fe: 5c:20:6b:ab:ae:27:b8:6c:66:77:c3:c3:bd:99:5c: f3:df:6a:21:a7:09:db:46:b1:98:99:94:2d:bc:d7: cb:27:a6:ab:56:67:06:29:0d:93:bd:84:f2:32:60: a3:77:46:a9:73:57:01:be:45:98:d6:b6:4b:9d:0d: a6:f2:d1:54:c5:77:fd:38:b9:9b:10:8a:6d:c4:4d: b1:de:b6:28:45:bf:0c:71:96:3f:8c:65:85:30:36: 47:9a:bc:47:27:f3:20:69:14:0b:ea:52:53:22:17: 91:41:fa:15:e5:19:e7:36:fa:6a:56:b3:88:a7:c2: 2a:3a:eb:28:21:76:e4:69:ed:6f:8b:ce:b2:9e:10: af:5f:40:90:03:c5:a7:a3:14:87:36:ce:a4:bc:b3: e6:0f:51:4e:81:a1:65:73:cf:c9:fa:ce:67:4b:2e: e9:13:7f:13:de:4d:51:50:64:c3:7b:29:41:9e:c2: 12:df:d6:81:0d:80:7c:e7:2e:ff:52:73:03:7e:c6: a6:65:01:71:ff:5d:22:19:bb:17:34:73:c5:32:cb: ca:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:9A:B2:00:77:33:75:9F:AE:04:2C:52:C9:BA:9E:97:B7:0F:1F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/457c9b38-e5eb-3436-bbfb-9ea0c9e73f6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.86.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:68:c6:0d:22:68:de:ee:59:26:86:b9:4c:31:82:93:77:3d: 51:84:4b:96:68:b4:7c:75:e7:58:e3:06:77:9b:13:b6:ad:52: be:7d:0a:1f:d2:8c:2b:90:0c:70:e8:13:9b:21:cc:02:ed:40: 3c:de:4b:19:9b:ee:74:21:cb:aa:7c:f1:9b:ff:f7:63:42:5a: fc:1f:21:e7:cb:d9:12:6c:be:a1:e9:4d:13:1b:30:59:b8:16: 2f:4d:8b:dd:80:b4:fe:4b:14:a1:1c:36:72:7c:bb:6b:e1:ca: 16:52:96:a7:25:fa:d9:68:fe:42:b9:7c:c0:d1:d0:c7:8d:d8: 40:ee:28:f7:72:ae:02:df:52:7f:f6:0e:34:f0:a6:d9:a6:22: 00:49:ea:b5:59:f5:49:ee:d5:d9:f7:d1:98:84:89:72:06:99: cf:7c:bd:9b:e8:62:d9:47:48:b8:61:a8:26:f0:5b:ee:5b:e3: 64:b0:da:2d:70:66:21:1b:8b:a7:26:34:8f:79:d1:83:b3:93: 5f:31:bd:5f:9d:ed:cc:31:fd:ba:68:01:d2:75:17:0e:db:ce: b5:42:9e:fa:cd:35:b3:02:2d:74:3f:c7:87:86:90:be:c6:e7: ac:e4:ac:26:e0:57:c9:a3:c0:5d:00:00:d6:db:40:89:27:08: 5d:bf:a1:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWficxFJAmp+aeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MTU3MDY2NTItYWY5OC00NTRmLWFmNGItZWFlYzAyMzAwYTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu2LpdJnRqnYYh9T/AIlMagfMz52hYrlpvbv aY6b9Nlcp4899QVOfWXlSP5cIGurrie4bGZ3w8O9mVzz32ohpwnbRrGYmZQtvNfL J6arVmcGKQ2TvYTyMmCjd0apc1cBvkWY1rZLnQ2m8tFUxXf9OLmbEIptxE2x3rYo Rb8McZY/jGWFMDZHmrxHJ/MgaRQL6lJTIheRQfoV5RnnNvpqVrOIp8IqOusoIXbk ae1vi86ynhCvX0CQA8WnoxSHNs6kvLPmD1FOgaFlc8/J+s5nSy7pE38T3k1RUGTD eylBnsIS39aBDYB85y7/UnMDfsamZQFx/10iGbsXNHPFMsvKlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaasgB3M3WfrgQsUsm6npe3Dx9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDU3YzliMzgtZTVlYi0z NDM2LWJiZmItOWVhMGM5ZTczZjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaFZkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1oxg0iaN7uWSaGuUwxgpN3PVGES5ZotHx151jjBnebE7atUr59Ch/S jCuQDHDoE5shzALtQDzeSxmb7nQhy6p88Zv/92NCWvwfIefL2RJsvqHpTRMbMFm4 Fi9Ni92AtP5LFKEcNnJ8u2vhyhZSlqcl+tlo/kK5fMDR0MeN2EDuKPdyrgLfUn/2 DjTwptmmIgBJ6rVZ9Unu1dn30ZiEiXIGmc98vZvoYtlHSLhhqCbwW+5b42Sw2i1w ZiEbi6cmNI950YOzk18xvV+d7cwx/bpoAdJ1Fw7bzrVCnvrNNbMCLXQ/x4eGkL7G 56zkrCbgV8mjwF0AANbbQIknCF2/oaw= -----END CERTIFICATE-----Generated at Sat Sep 6 01:12:34 2025 by rpki-client