$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96483fe1-f562-33f2-956f-2a0d470c260c.roa File: 96483fe1-f562-33f2-956f-2a0d470c260c.roa (raw, json) Hash identifier: OPIhFzge5GKyrr8WoddbwlPrr6TBmfcLS5fCIUDk5hA= Subject key identifier: D2:04:56:97:99:D3:63:3C:CC:AA:79:4B:C1:14:C9:2B:8E:A2:39:D6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AF7EBE35C15D97D1B131548C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96483fe1-f562-33f2-956f-2a0d470c260c.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 9498 IP address blocks: 104.108.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:e3:5c:15:d9:7d:1b:13:15:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=6fafdfc3-b063-4739-a7c4-3f8f2dc80239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6f:81:a5:bc:29:60:d5:df:09:ad:b9:1d:32: bd:02:e1:17:cc:51:a4:30:48:f8:ca:1e:08:a0:b1: 17:8f:4d:f0:fb:e1:45:71:1b:6c:0e:25:38:50:3f: bf:7c:ad:b1:44:1c:2e:55:6b:4b:d1:61:c8:a3:dd: a2:c3:be:76:78:3d:05:cc:f7:ec:6b:eb:ce:19:e6: a4:29:c1:06:45:cf:20:a8:58:e4:91:9d:18:a9:44: 03:07:5a:45:2b:ed:6c:9d:81:ab:26:af:43:ff:fe: a0:c0:49:3a:ac:79:d3:60:be:98:0a:6b:22:cc:93: f1:c2:1a:83:dd:1f:78:fb:98:29:9b:31:fc:d7:ba: 63:f2:5b:66:ba:83:0d:a5:fe:67:5b:4e:19:8d:74: 96:b4:f0:9b:dd:71:77:df:c6:b4:eb:94:c6:c0:49: 66:eb:20:7a:d9:02:4d:70:4d:cd:62:5b:64:9b:e5: 31:41:7d:9d:62:60:fd:ca:d5:0f:a9:42:aa:7c:8c: 1e:a9:5c:c2:6a:0b:4b:3c:82:00:09:fe:dc:3e:35: 52:53:92:fc:92:ca:6a:c0:d4:92:94:53:cc:12:e8: 51:13:8b:7b:78:86:e3:ae:20:97:0a:cf:58:13:1a: c2:63:28:c6:08:87:9c:f6:a9:dc:76:cd:dd:96:e6: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:04:56:97:99:D3:63:3C:CC:AA:79:4B:C1:14:C9:2B:8E:A2:39:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/96483fe1-f562-33f2-956f-2a0d470c260c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 104.108.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:32:5c:74:16:bc:1f:a9:d0:13:4d:25:e5:ae:c1:94:b7:db: 28:b4:34:a9:a9:e2:28:3c:ca:59:35:28:54:35:fa:88:b4:f4: 60:94:a7:44:0e:04:f0:33:82:ca:7e:5e:8f:12:57:f1:05:b7: 0e:eb:94:d1:07:49:ca:04:ee:b5:9a:23:9c:30:e0:9d:43:ef: a1:a7:20:f7:1e:ef:5a:5a:25:6f:f6:02:79:ee:4b:c1:1e:cc: 76:f7:d6:8d:b2:a4:89:4d:1a:a5:18:da:9a:5d:21:79:1e:9b: 7a:19:79:bc:a6:62:66:ac:21:35:c9:5a:48:cf:a4:69:9f:89: ca:83:eb:ab:44:29:24:25:0b:ee:21:a0:31:0b:30:78:eb:bc: 3c:f6:8c:96:e2:57:06:44:7e:11:96:f8:49:c6:71:b0:d2:f6: 8e:00:68:f4:f5:34:00:f3:00:eb:12:1d:90:d2:aa:59:7c:c2: 15:e7:92:c3:57:73:1a:43:e5:77:36:fa:5a:f6:ef:1b:60:cd: a5:25:c8:06:85:bf:2b:e3:46:e3:a1:52:40:0b:78:e6:ef:9f: 1c:44:74:3c:30:73:ea:f2:4f:13:d9:27:ed:c5:4d:d5:92:f2: b3:1b:6d:06:0e:15:f3:b3:45:fe:26:39:9d:70:47:34:08:29: a5:b0:b4:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr36+NcFdl9GxMVSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk NmZhZmRmYzMtYjA2My00NzM5LWE3YzQtM2Y4ZjJkYzgwMjM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArm+BpbwpYNXfCa25HTK9AuEXzFGkMEj4yh4I oLEXj03w++FFcRtsDiU4UD+/fK2xRBwuVWtL0WHIo92iw752eD0FzPfsa+vOGeak KcEGRc8gqFjkkZ0YqUQDB1pFK+1snYGrJq9D//6gwEk6rHnTYL6YCmsizJPxwhqD 3R94+5gpmzH817pj8ltmuoMNpf5nW04ZjXSWtPCb3XF338a065TGwElm6yB62QJN cE3NYltkm+UxQX2dYmD9ytUPqUKqfIweqVzCagtLPIIACf7cPjVSU5L8kspqwNSS lFPMEuhRE4t7eIbjriCXCs9YExrCYyjGCIec9qncds3dluZOAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIEVpeZ02M8zKp5S8EUySuOojnWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTY0ODNmZTEtZjU2Mi0z M2YyLTk1NmYtMmEwZDQ3MGMyNjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaGyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIyXHQWvB+p0BNNJeWuwZS32yi0NKmp4ig8ylk1KFQ1+oi09GCUp0QO BPAzgsp+Xo8SV/EFtw7rlNEHScoE7rWaI5ww4J1D76GnIPce71paJW/2AnnuS8Ee zHb31o2ypIlNGqUY2ppdIXkem3oZebymYmasITXJWkjPpGmficqD66tEKSQlC+4h oDELMHjrvDz2jJbiVwZEfhGW+EnGcbDS9o4AaPT1NADzAOsSHZDSqll8whXnksNX cxpD5Xc2+lr27xtgzaUlyAaFvyvjRuOhUkALeObvnxxEdDwwc+ryTxPZJ+3FTdWS 8rMbbQYOFfOzRf4mOZ1wRzQIKaWwtNc= -----END CERTIFICATE-----Generated at Sat Sep 6 12:29:22 2025 by rpki-client