$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa File: 1e5f12cb-e855-3565-b100-bec476c1f053.roa (raw, json) Hash identifier: SRxH2KrETJJxDrH3GANc5ispHVzHgLeqjvLyj1dlsSI= Subject key identifier: 85:50:EE:6A:C0:81:3D:AE:C0:97:10:6B:BF:C2:8A:9B:0B:66:DD:E7 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC5AB9051CDC1890EC5EC4280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa Signing time: Thu 07 Aug 2025 01:00:33 +0000 ROA not before: Thu 07 Aug 2025 01:00:33 +0000 ROA not after: Wed 05 Nov 2025 02:00:33 +0000 asID: 3223 IP address blocks: 104.243.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:ab:90:51:cd:c1:89:0e:c5:ec:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 7 01:00:33 2025 GMT Not After : Nov 5 02:00:33 2025 GMT Subject: CN=965860b5-9212-44fd-89f4-edb54567a828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:93:68:68:87:c4:03:ca:38:f2:bc:1d:e6:8e: e4:cb:3c:b8:92:1f:cc:78:1b:4f:15:11:14:fc:1e: 62:d3:d3:8a:13:bf:5e:13:b2:da:88:0b:d1:92:ab: 55:d6:e5:b2:87:8b:1e:62:0d:26:4d:0a:35:9a:2e: 6a:53:40:69:b3:75:48:54:d4:b0:1c:a1:7b:8e:61: ea:30:57:d8:86:76:0e:e6:2c:20:cd:34:4e:55:37: 4d:1e:08:b7:f9:e0:63:99:2d:7f:66:9c:2f:e2:49: fc:e5:a2:49:5e:fb:78:75:83:2c:79:ad:0c:53:59: 4a:6c:19:3d:1b:fa:22:45:bf:d1:5e:9e:de:32:3f: 6f:be:84:cc:1b:aa:c4:72:2e:04:79:75:62:bd:d2: 9c:40:82:a4:52:b6:42:00:24:53:2c:d3:1b:09:b0: 0b:f1:31:08:b1:73:99:48:7f:a0:52:a9:82:69:55: 66:07:a0:53:4f:fd:2c:da:9b:c7:ea:2c:21:11:93: 58:36:4f:c6:d5:a2:e7:c5:9e:0d:c6:29:42:ec:33: f2:47:77:44:7b:7d:10:96:05:04:db:f7:89:ab:82: c2:f5:53:fe:b7:a4:b3:da:ba:79:3c:85:c9:da:07: 92:4c:f5:23:c3:3e:c6:13:0f:dd:65:01:e2:8b:10: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:50:EE:6A:C0:81:3D:AE:C0:97:10:6B:BF:C2:8A:9B:0B:66:DD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:33:2e:82:82:fb:bd:fc:bd:c3:5e:ff:73:3a:4e:9d:24:16: d0:d0:bd:01:9c:64:d6:88:f2:33:27:a9:9e:df:6b:2e:22:b5: ab:21:c0:83:c7:f8:ea:3a:83:98:23:e5:ed:52:5e:35:f1:81: 08:ab:df:d6:b8:8f:20:6b:c6:2e:ee:cb:6a:dc:f8:d6:65:20: f7:53:ce:db:7d:69:c1:b1:08:8b:dc:59:b7:85:4f:53:39:de: 29:22:9e:45:ca:bc:df:2e:f6:d4:44:03:e7:df:85:f6:47:5a: a7:9e:64:0f:8c:d3:43:e6:14:a2:0f:fc:80:b9:33:7c:62:4d: 01:f2:4c:61:c6:b5:1d:2c:32:3e:11:2a:1d:c1:dc:d9:b9:34: b2:67:aa:8c:c6:e9:30:70:1a:4f:a9:88:0f:96:67:13:dd:4c: a7:66:43:67:1c:f3:6f:86:3a:e5:35:f7:2c:ca:27:89:bc:45: 99:9a:25:9c:d7:dc:23:89:eb:f5:6b:0a:d8:bc:2c:c2:f9:66: b6:e9:1c:c8:4a:4c:82:35:e5:c8:68:65:30:2a:da:36:1b:45: 7f:00:e1:ce:99:90:3e:ac:b3:04:10:27:2e:4f:00:8a:76:7b: dc:61:e4:55:80:f0:d9:ff:39:97:3d:6f:1e:80:75:a4:7d:91: 85:f0:86:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq5BRzcGJDsXsQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk OTY1ODYwYjUtOTIxMi00NGZkLTg5ZjQtZWRiNTQ1NjdhODI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpNoaIfEA8o48rwd5o7kyzy4kh/MeBtPFREU /B5i09OKE79eE7LaiAvRkqtV1uWyh4seYg0mTQo1mi5qU0Bps3VIVNSwHKF7jmHq MFfYhnYO5iwgzTROVTdNHgi3+eBjmS1/Zpwv4kn85aJJXvt4dYMsea0MU1lKbBk9 G/oiRb/RXp7eMj9vvoTMG6rEci4EeXVivdKcQIKkUrZCACRTLNMbCbAL8TEIsXOZ SH+gUqmCaVVmB6BTT/0s2pvH6iwhEZNYNk/G1aLnxZ4NxilC7DPyR3dEe30QlgUE 2/eJq4LC9VP+t6Sz2rp5PIXJ2geSTPUjwz7GEw/dZQHiixCN4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIVQ7mrAgT2uwJcQa7/CipsLZt3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWU1ZjEyY2ItZTg1NS0z NTY1LWIxMDAtYmVjNDc2YzFmMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUzLoKC+738vcNe/3M6Tp0kFtDQvQGcZNaI8jMnqZ7fay4itashwIPH +Oo6g5gj5e1SXjXxgQir39a4jyBrxi7uy2rc+NZlIPdTztt9acGxCIvcWbeFT1M5 3ikinkXKvN8u9tREA+ffhfZHWqeeZA+M00PmFKIP/IC5M3xiTQHyTGHGtR0sMj4R Kh3B3Nm5NLJnqozG6TBwGk+piA+WZxPdTKdmQ2cc82+GOuU19yzKJ4m8RZmaJZzX 3COJ6/VrCti8LML5ZrbpHMhKTII15choZTAq2jYbRX8A4c6ZkD6sswQQJy5PAIp2 e9xh5FWA8Nn/OZc9bx6AdaR9kYXwhmk= -----END CERTIFICATE-----Generated at Sat Aug 23 08:26:39 2025 by rpki-client