$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a5e2dbf-e88b-33f3-a656-989c80842e38.roa File: 1a5e2dbf-e88b-33f3-a656-989c80842e38.roa (raw, json) Hash identifier: l2JcU5ASNdyFMCRq63WH/8rA6eKt+y9lbNGCX1hazLg= Subject key identifier: 4E:2E:29:05:32:BB:C5:43:9E:C5:2D:45:8F:F8:C4:CE:93:28:51:8C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B76F2A273B2219DBE775DE310 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a5e2dbf-e88b-33f3-a656-989c80842e38.roa Signing time: Thu 09 Oct 2025 13:00:38 +0000 ROA not before: Thu 09 Oct 2025 13:00:38 +0000 ROA not after: Wed 07 Jan 2026 14:00:38 +0000 asID: 213990 IP address blocks: 104.243.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:76:f2:a2:73:b2:21:9d:be:77:5d:e3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 9 13:00:38 2025 GMT Not After : Jan 7 14:00:38 2026 GMT Subject: CN=20d31283-2db6-40be-9c6d-9d47389683ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b8:49:58:28:09:76:2d:5f:f7:ec:0f:c3:2d: 2c:e2:8f:5e:de:b9:47:9c:3c:6e:e6:56:56:c5:1e: 81:fb:04:ae:52:9a:d4:41:90:8a:69:de:95:cc:55: 9f:14:92:f5:2d:22:ff:f9:4b:36:00:f6:26:22:16: e6:56:8d:1e:41:10:39:6a:56:e6:16:ff:01:d8:4a: f4:bb:62:d8:d7:91:9f:d3:58:30:d9:dc:85:9a:21: be:4e:6b:ec:92:75:1c:bd:df:ff:7b:89:85:59:f6: c2:19:f6:19:08:5f:48:59:1a:4f:2f:68:c9:24:80: 65:06:04:1f:8f:ba:d9:41:36:25:07:55:92:af:98: d2:e4:b9:15:41:49:48:55:7b:27:8b:b9:b1:40:61: c2:e5:a4:f8:91:f2:83:58:62:66:bf:bb:2f:88:53: f5:8d:32:03:a9:7d:ed:f1:1f:50:1c:85:de:c7:a6: b6:5f:8a:78:92:e6:34:96:4d:6c:be:7b:a7:17:13: 9b:90:0d:b4:32:76:c6:c3:66:98:ee:f9:f2:4b:0c: 9c:61:56:de:e0:a7:8e:5d:8f:0e:62:fd:02:3e:bc: ea:e2:02:13:8a:0a:35:f4:db:30:0d:f9:99:d1:d2: 3c:10:a4:87:ad:33:a0:86:f9:7e:b6:d0:ed:16:ef: 24:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2E:29:05:32:BB:C5:43:9E:C5:2D:45:8F:F8:C4:CE:93:28:51:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a5e2dbf-e88b-33f3-a656-989c80842e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ff:e2:1a:33:1d:3b:23:f8:63:bf:a2:19:ad:74:a0:6d:d6: 92:56:4b:d4:4a:a3:a6:82:82:dd:00:72:55:3c:26:12:14:34: 21:7e:ef:c6:b2:fc:33:c8:16:c5:e9:5b:2b:8a:26:c9:71:b5: 41:ee:f7:dd:cb:18:a3:5b:89:d2:d5:ee:be:6c:89:e1:c7:1d: d9:a2:d6:c3:c6:5c:d5:39:2c:6d:23:ae:c1:dc:c9:d1:01:fb: c6:57:c1:d9:98:69:37:94:d5:f3:05:7d:7e:e1:37:c1:50:83: f0:46:a2:b0:6e:24:10:d2:75:63:13:d4:70:9f:79:c5:93:a9: 91:e1:fc:6e:96:d4:98:9b:1c:46:e1:7d:40:66:77:f5:a9:ee: e8:e1:25:be:bb:60:c8:6d:80:90:3f:79:a7:65:b3:cd:aa:83: 62:b5:45:75:84:8a:a0:76:f8:86:c4:de:ed:cf:00:e1:f4:0f: db:dc:bd:6b:ef:3c:9e:65:cb:1d:97:e4:36:f1:96:95:6e:09: 2c:93:ba:6f:d5:49:b2:91:f4:96:d0:d5:63:1c:76:8c:1b:5f: 72:1f:d6:68:8f:ab:36:5c:6d:b5:67:f6:fa:08:de:e3:55:b7: 1a:d1:aa:6a:c1:27:e3:41:06:90:b0:ad:e8:f0:43:d8:32:3c: af:54:a4:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28qJzsiGdvndd4xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk MjBkMzEyODMtMmRiNi00MGJlLTljNmQtOWQ0NzM4OTY4M2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7hJWCgJdi1f9+wPwy0s4o9e3rlHnDxu5lZW xR6B+wSuUprUQZCKad6VzFWfFJL1LSL/+Us2APYmIhbmVo0eQRA5albmFv8B2Er0 u2LY15Gf01gw2dyFmiG+TmvsknUcvd//e4mFWfbCGfYZCF9IWRpPL2jJJIBlBgQf j7rZQTYlB1WSr5jS5LkVQUlIVXsni7mxQGHC5aT4kfKDWGJmv7sviFP1jTIDqX3t 8R9QHIXex6a2X4p4kuY0lk1svnunFxObkA20MnbGw2aY7vnySwycYVbe4KeOXY8O Yv0CPrzq4gITigo19NswDfmZ0dI8EKSHrTOghvl+ttDtFu8ksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4uKQUyu8VDnsUtRY/4xM6TKFGMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWE1ZTJkYmYtZTg4Yi0z M2YzLWE2NTYtOTg5YzgwODQyZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7/4hozHTsj+GO/ohmtdKBt1pJWS9RKo6aCgt0AclU8JhIUNCF+78ay /DPIFsXpWyuKJslxtUHu993LGKNbidLV7r5sieHHHdmi1sPGXNU5LG0jrsHcydEB +8ZXwdmYaTeU1fMFfX7hN8FQg/BGorBuJBDSdWMT1HCfecWTqZHh/G6W1JibHEbh fUBmd/Wp7ujhJb67YMhtgJA/eadls82qg2K1RXWEiqB2+IbE3u3PAOH0D9vcvWvv PJ5lyx2X5DbxlpVuCSyTum/VSbKR9JbQ1WMcdowbX3If1miPqzZcbbVn9voI3uNV txrRqmrBJ+NBBpCwrejwQ9gyPK9UpHs= -----END CERTIFICATE-----Generated at Sun Oct 19 20:54:31 2025 by rpki-client