$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b975770-c13d-3c06-9fda-5f186cb72432.roa File: 0b975770-c13d-3c06-9fda-5f186cb72432.roa (raw, json) Hash identifier: sA0UavTMfw2TZWROSb2rlDHXpQOEGHxjSa73XJIM5HE= Subject key identifier: 53:D6:FD:BD:CD:8D:23:37:8E:E0:2D:BE:09:0B:3E:59:41:1C:87:5B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AD43398223209B14836593500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b975770-c13d-3c06-9fda-5f186cb72432.roa Signing time: Tue 12 Aug 2025 05:56:05 +0000 ROA not before: Tue 12 Aug 2025 05:56:05 +0000 ROA not after: Mon 10 Nov 2025 06:56:05 +0000 asID: 213990 IP address blocks: 104.250.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d4:33:98:22:32:09:b1:48:36:59:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 12 05:56:05 2025 GMT Not After : Nov 10 06:56:05 2025 GMT Subject: CN=b8fb3229-2175-4b70-8d62-b17ff9712fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:e0:ea:19:4f:50:e3:fa:30:f2:70:63:99: 70:60:f9:67:ff:2c:22:68:f6:84:e2:b2:03:70:e6: e1:b0:6c:9c:4f:f7:6e:b0:f0:4b:f9:c2:cd:ba:ad: 6a:13:e9:ae:85:c1:2c:eb:89:71:f0:d4:e8:26:23: 89:4e:dd:17:25:9f:a2:85:12:a7:f7:88:04:20:f1: 1d:17:1a:79:08:2a:e9:28:f8:62:eb:24:15:56:1f: 85:61:28:59:1b:aa:58:c8:b5:d6:ea:37:6f:f7:1d: 42:87:62:46:1b:bb:9d:d5:e1:94:d3:7c:90:a6:16: 1f:5f:ca:51:9f:d2:e2:91:11:4f:bc:c9:8e:f1:c5: 9b:bc:cd:d0:8b:8e:06:4f:49:56:10:43:64:96:5a: cc:49:23:9e:23:ab:98:fc:35:d5:c4:68:3d:35:cd: 5b:27:12:21:5a:bd:50:56:3d:67:bb:83:fb:42:43: d5:9d:ee:aa:15:3d:d7:78:2d:01:ea:ca:a8:5f:d4: 3b:37:67:9b:15:4f:7f:ad:c4:db:02:6b:f0:98:cb: c8:c9:26:5b:48:df:a0:4f:80:96:0b:a3:78:37:e4: f7:54:40:91:f1:ac:21:66:4b:88:20:15:aa:bd:7a: fb:e6:af:ac:d4:a0:f2:3b:64:38:29:a4:53:ff:89: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D6:FD:BD:CD:8D:23:37:8E:E0:2D:BE:09:0B:3E:59:41:1C:87:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0b975770-c13d-3c06-9fda-5f186cb72432.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:c8:2e:48:f9:95:0c:23:c0:82:eb:5e:65:d4:da:a3:02:71: af:eb:24:ce:4e:f3:2b:23:50:70:7b:91:5d:d2:32:ff:24:66: ba:5a:c2:b5:4f:da:a5:d8:a2:4d:44:0f:ed:e3:62:c1:dc:f1: 96:4b:cf:81:65:0b:44:23:43:bf:74:5b:c0:24:98:82:78:aa: 81:2a:2e:b1:64:68:76:8e:46:5d:cd:fa:cf:64:ad:67:9c:27: 7e:12:11:aa:f6:28:26:06:89:f9:3a:be:2d:d2:50:20:30:43: c5:87:be:e0:dc:f4:1d:10:ac:12:a1:6c:09:09:87:2d:10:76: 45:ea:4a:eb:73:76:ad:5d:97:10:8c:46:f8:b6:cf:66:3f:ab: 37:08:7b:44:f5:f2:de:4a:ee:67:49:47:13:f9:5b:1e:07:15: dc:1b:55:62:0e:87:90:a8:0c:aa:3a:c7:a7:b3:b2:71:99:21: 77:fc:7d:b9:ed:08:ee:f3:60:e6:19:95:ee:61:b5:da:d8:db: 39:69:3b:56:e9:b8:ef:7d:d0:7f:3e:46:c8:db:53:a4:ae:c0: 23:2b:8c:13:4e:86:29:33:87:0a:76:f1:c0:75:21:71:5b:e2: 72:d2:39:d4:7e:73:09:84:19:d3:55:8e:49:f8:49:e5:4d:5a: 7a:15:dc:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErUM5giMgmxSDZZNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgxMjA1NTYwNVoXDTI1MTExMDA2NTYwNVowLzEtMCsGA1UEAxMk YjhmYjMyMjktMjE3NS00YjcwLThkNjItYjE3ZmY5NzEyZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9ng6hlPUOP6MPJwY5lwYPln/ywiaPaE4rID cObhsGycT/dusPBL+cLNuq1qE+muhcEs64lx8NToJiOJTt0XJZ+ihRKn94gEIPEd Fxp5CCrpKPhi6yQVVh+FYShZG6pYyLXW6jdv9x1Ch2JGG7ud1eGU03yQphYfX8pR n9LikRFPvMmO8cWbvM3Qi44GT0lWEENkllrMSSOeI6uY/DXVxGg9Nc1bJxIhWr1Q Vj1nu4P7QkPVne6qFT3XeC0B6sqoX9Q7N2ebFU9/rcTbAmvwmMvIySZbSN+gT4CW C6N4N+T3VECR8awhZkuIIBWqvXr75q+s1KDyO2Q4KaRT/4nomwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPW/b3NjSM3juAtvgkLPllBHIdbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMGI5NzU3NzAtYzEzZC0z YzA2LTlmZGEtNWYxODZjYjcyNDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7ILkj5lQwjwILrXmXU2qMCca/rJM5O8ysjUHB7kV3SMv8kZrpawrVP 2qXYok1ED+3jYsHc8ZZLz4FlC0QjQ790W8AkmIJ4qoEqLrFkaHaORl3N+s9krWec J34SEar2KCYGifk6vi3SUCAwQ8WHvuDc9B0QrBKhbAkJhy0QdkXqSutzdq1dlxCM Rvi2z2Y/qzcIe0T18t5K7mdJRxP5Wx4HFdwbVWIOh5CoDKo6x6ezsnGZIXf8fbnt CO7zYOYZle5htdrY2zlpO1bpuO990H8+RsjbU6SuwCMrjBNOhikzhwp28cB1IXFb 4nLSOdR+cwmEGdNVjkn4SeVNWnoV3ME= -----END CERTIFICATE-----Generated at Sat Aug 23 13:22:38 2025 by rpki-client