$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa File: 49d29814-d109-355b-9890-c16ddcce635e.roa (raw, json) Hash identifier: c3LUYb6AHE9wX0YCt93HRBWxUfXV+7D+78dXRPyeRJ4= Subject key identifier: 30:12:C5:4D:09:34:1E:40:9D:B0:32:CE:C9:6F:50:12:45:2F:5E:DA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216BFA5AD220500C6C2E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 20940 IP address blocks: 104.98.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6b:fa:5a:d2:20:50:0c:6c:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=b23c8a39-5537-4174-9a17-31f4b7e47a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e0:fa:61:c2:d2:23:c8:df:68:17:01:c1:2c: 13:6b:f8:93:35:d8:ea:c7:2b:14:cb:03:55:e0:ed: 11:ef:a0:4a:47:a1:4e:13:29:2c:98:0a:93:6d:77: 52:28:07:d1:3f:3d:3c:b3:6a:b1:c6:4b:b5:e9:f2: 3c:47:45:fb:34:36:15:2e:94:c1:7f:e5:ab:f3:9c: 89:73:35:a3:46:ae:0a:d6:65:96:61:47:c7:52:7a: 9a:69:b7:eb:2f:be:83:c4:b6:52:4f:7c:ae:f4:b4: 91:f2:e9:9b:1c:e6:48:5b:c4:27:44:51:81:73:7c: 31:fc:2b:41:ab:13:ac:fe:78:2c:15:77:20:43:87: f1:43:61:04:63:05:26:ea:e1:4b:03:90:b4:2f:5f: 7e:c2:f2:89:d7:78:87:7c:62:18:20:be:22:b8:16: 8f:49:49:20:f6:c7:09:ac:7e:f3:d9:ee:01:73:05: 2b:b7:6b:7b:6f:0a:86:cf:39:36:0d:85:29:8f:b8: 4a:fe:95:9e:03:82:c3:d1:4d:0b:3a:2f:a2:d2:d9: a5:88:c9:76:97:8c:80:28:ef:05:ac:7b:f3:2c:eb: 88:59:cd:50:e0:b0:a8:29:72:a8:69:3a:bf:70:df: 55:58:37:81:32:ab:68:70:d4:6f:b6:85:14:f4:9c: 79:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:12:C5:4D:09:34:1E:40:9D:B0:32:CE:C9:6F:50:12:45:2F:5E:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49d29814-d109-355b-9890-c16ddcce635e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d4:78:7b:5f:cb:b1:46:14:84:00:4a:d0:34:c2:0f:55:4e: fa:f5:1c:80:22:f6:c6:3b:d6:9d:c2:eb:67:72:8d:d3:06:02: 23:3a:75:4f:6b:02:53:9d:69:09:8f:2f:3b:c1:c1:ae:90:f4: 47:0a:da:96:37:f3:f5:e5:8b:de:ef:2d:05:3b:d7:5f:89:d4: c7:19:3a:c1:ce:ae:9f:65:c3:bc:f4:59:0e:02:f2:18:b4:a3: 02:d0:ee:36:4d:9d:28:74:5a:e2:f9:41:f7:e9:7b:82:13:ed: 05:95:ea:7b:aa:58:0f:9e:bb:9e:ac:81:37:22:f0:ad:31:5a: ec:00:44:34:49:ab:bf:34:16:1d:03:e1:94:71:6f:b3:b8:e0: c5:57:28:c9:ff:ac:0a:74:32:a8:b4:b9:ed:27:6d:94:7b:76: 69:ad:20:d7:51:ea:ac:34:6a:6d:89:9f:90:81:27:33:c1:5e: 0e:60:ff:62:fb:6a:ba:0b:58:d2:cb:02:7b:11:03:74:68:55: 72:63:1f:d6:e8:36:71:02:42:0f:2a:79:54:54:79:74:ee:8b: 49:b9:a2:3b:7b:8d:bb:09:d0:32:18:b4:53:c8:d4:1a:49:ce: 05:0a:e3:80:71:90:42:07:0b:c2:6a:55:47:d0:40:1a:2b:7f: a2:e8:c5:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWv6WtIgUAxsLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk YjIzYzhhMzktNTUzNy00MTc0LTlhMTctMzFmNGI3ZTQ3YTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOD6YcLSI8jfaBcBwSwTa/iTNdjqxysUywNV 4O0R76BKR6FOEyksmAqTbXdSKAfRPz08s2qxxku16fI8R0X7NDYVLpTBf+Wr85yJ czWjRq4K1mWWYUfHUnqaabfrL76DxLZST3yu9LSR8umbHOZIW8QnRFGBc3wx/CtB qxOs/ngsFXcgQ4fxQ2EEYwUm6uFLA5C0L19+wvKJ13iHfGIYIL4iuBaPSUkg9scJ rH7z2e4BcwUrt2t7bwqGzzk2DYUpj7hK/pWeA4LD0U0LOi+i0tmliMl2l4yAKO8F rHvzLOuIWc1Q4LCoKXKoaTq/cN9VWDeBMqtocNRvtoUU9Jx5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDASxU0JNB5AnbAyzslvUBJFL17aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDlkMjk4MTQtZDEwOS0z NTViLTk4OTAtYzE2ZGRjY2U2MzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaGJ1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbUeHtfy7FGFIQAStA0wg9VTvr1HIAi9sY71p3C62dyjdMGAiM6dU9r AlOdaQmPLzvBwa6Q9EcK2pY38/Xli97vLQU711+J1McZOsHOrp9lw7z0WQ4C8hi0 owLQ7jZNnSh0WuL5Qffpe4IT7QWV6nuqWA+eu56sgTci8K0xWuwARDRJq780Fh0D 4ZRxb7O44MVXKMn/rAp0Mqi0ue0nbZR7dmmtINdR6qw0am2Jn5CBJzPBXg5g/2L7 aroLWNLLAnsRA3RoVXJjH9boNnECQg8qeVRUeXTui0m5ojt7jbsJ0DIYtFPI1BpJ zgUK44BxkEIHC8JqVUfQQBorf6LoxVM= -----END CERTIFICATE-----Generated at Sat Sep 6 05:14:36 2025 by rpki-client