$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa File: 6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa (raw, json) Hash identifier: NzdYH3Ro9pQfylId1pZuTOz8cGe9K8SOdpU/wTrGaVg= Subject key identifier: AF:59:08:BE:8B:EB:1E:DD:D9:73:C9:46:15:4A:3C:DE:B7:84:63:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF5216C1D0E736E6C27492700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 16625 IP address blocks: 104.98.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:6c:1d:0e:73:6e:6c:27:49:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=e7ba6466-dbb2-4e31-bd9c-3654480dee8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:82:72:4a:9a:52:a3:ae:3d:60:79:01:47: b2:47:93:53:d1:c2:71:bf:5d:01:ad:12:c8:92:61: f6:b7:7c:b0:35:a0:3a:8f:fd:37:ee:48:10:68:b8: 59:b5:21:70:50:04:93:34:97:1a:8e:66:0b:92:68: 1b:62:e4:74:7e:0c:be:96:b7:7d:08:16:4f:14:6a: 0f:23:98:c6:16:88:09:ca:30:bb:9d:c8:92:6f:5c: ef:da:51:29:53:e7:54:74:99:ad:71:25:95:e2:7e: 13:bb:ca:9d:3a:fb:8e:04:57:31:a7:03:98:07:be: f4:67:fa:7e:dc:46:27:b1:b9:78:91:34:3c:72:91: 61:bc:e2:0d:55:a7:71:d8:0a:38:d8:63:2d:43:7c: 30:f2:60:01:85:e7:71:8d:8f:e4:39:58:49:dc:c0: 5c:b1:3c:68:de:35:e9:90:38:6d:b6:ca:c0:92:b4: 3c:82:f1:fe:12:ff:a3:f0:00:e3:31:36:b0:f0:36: ab:84:8d:44:51:bc:1c:2b:52:b8:cf:b9:fb:e1:fd: 6e:3a:ad:29:e5:c7:08:d4:fe:04:21:4c:d9:49:44: 63:c1:58:e0:be:18:70:25:e5:7a:83:ca:03:c3:98: ab:f6:0b:69:6f:98:5f:1e:6a:f1:41:ca:1a:2d:3a: c2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:59:08:BE:8B:EB:1E:DD:D9:73:C9:46:15:4A:3C:DE:B7:84:63:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cb2bc80-efb0-35c8-85f5-7e09699fd1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.98.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:08:93:8b:65:6b:b6:a7:e3:d9:b9:05:76:5d:9f:ed:a3:86: 0d:1e:44:39:62:09:23:43:fa:85:08:2c:a9:57:76:c5:3c:98: 7e:f4:00:f7:25:4f:3e:16:80:2a:2a:3e:8f:30:8c:44:d0:a3: b0:3b:f4:5a:3f:28:7b:3e:23:a6:1e:52:15:10:b8:7d:f1:ac: 77:26:fa:cc:eb:8e:b8:f2:bc:89:3f:01:82:75:38:59:b0:9e: fb:7d:74:c2:f5:1f:05:9c:04:8f:ee:ef:b0:2b:18:34:e5:ac: 9c:7a:7a:68:ae:e4:30:66:be:38:55:8a:6c:06:62:24:e6:64: 21:88:fa:14:c4:10:1d:64:00:a9:7e:97:8e:93:96:19:d4:0e: ad:a6:81:79:8d:98:3f:fa:a0:ad:45:42:68:23:fc:94:eb:49: e7:80:0d:14:1e:b1:74:06:72:65:3b:54:38:f3:e4:cb:d1:43: 6a:35:b4:84:e0:89:08:ea:a3:51:51:ff:27:a5:66:a5:56:4d: 80:69:32:6d:8a:d8:4e:16:90:bb:84:fa:41:77:66:ea:a2:ae: 1f:57:9e:ef:17:04:9a:9f:f2:b2:eb:e0:bb:fd:71:32:7d:37: 8c:93:1b:15:5b:fb:4c:94:32:37:66:a8:57:46:28:ed:cc:44: 1e:66:02:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IWwdDnNubCdJJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTdiYTY0NjYtZGJiMi00ZTMxLWJkOWMtMzY1NDQ4MGRlZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY2CckqaUqOuPWB5AUeyR5NT0cJxv10BrRLI kmH2t3ywNaA6j/037kgQaLhZtSFwUASTNJcajmYLkmgbYuR0fgy+lrd9CBZPFGoP I5jGFogJyjC7nciSb1zv2lEpU+dUdJmtcSWV4n4Tu8qdOvuOBFcxpwOYB770Z/p+ 3EYnsbl4kTQ8cpFhvOINVadx2Ao42GMtQ3ww8mABhedxjY/kOVhJ3MBcsTxo3jXp kDhttsrAkrQ8gvH+Ev+j8ADjMTaw8DarhI1EUbwcK1K4z7n74f1uOq0p5ccI1P4E IUzZSURjwVjgvhhwJeV6g8oDw5ir9gtpb5hfHmrxQcoaLTrCwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9ZCL6L6x7d2XPJRhVKPN63hGOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmNiMmJjODAtZWZiMC0z NWM4LTg1ZjUtN2UwOTY5OWZkMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaGLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMIk4tla7an49m5BXZdn+2jhg0eRDliCSND+oUILKlXdsU8mH70APcl Tz4WgCoqPo8wjETQo7A79Fo/KHs+I6YeUhUQuH3xrHcm+szrjrjyvIk/AYJ1OFmw nvt9dML1HwWcBI/u77ArGDTlrJx6emiu5DBmvjhVimwGYiTmZCGI+hTEEB1kAKl+ l46TlhnUDq2mgXmNmD/6oK1FQmgj/JTrSeeADRQesXQGcmU7VDjz5MvRQ2o1tITg iQjqo1FR/yelZqVWTYBpMm2K2E4WkLuE+kF3Zuqirh9Xnu8XBJqf8rLr4Lv9cTJ9 N4yTGxVb+0yUMjdmqFdGKO3MRB5mAsU= -----END CERTIFICATE-----Generated at Sat Sep 6 05:16:53 2025 by rpki-client