$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22eda990-1d62-328f-98c6-8d0926c65324.roa File: 22eda990-1d62-328f-98c6-8d0926c65324.roa (raw, json) Hash identifier: DVPYxByE+bfdZMh1Q9ti4lfBT9wD/ehaAADk6aTcB1Y= Subject key identifier: B6:B3:7E:E4:6D:39:17:80:0D:01:92:8F:7F:36:D5:21:86:F5:A0:1E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B797D3B2BDFBCC7F823BC8C2A Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22eda990-1d62-328f-98c6-8d0926c65324.roa Signing time: Fri 10 Oct 2025 10:52:50 +0000 ROA not before: Fri 10 Oct 2025 10:52:50 +0000 ROA not after: Thu 08 Jan 2026 11:52:50 +0000 asID: 11972 IP address blocks: 104.243.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:7d:3b:2b:df:bc:c7:f8:23:bc:8c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 10:52:50 2025 GMT Not After : Jan 8 11:52:50 2026 GMT Subject: CN=142482be-4006-42ea-9dd8-0ca13e0263f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:40:46:a9:59:f2:b0:5d:90:e4:bc:39:f5:f4: 34:fb:95:bc:d6:25:db:3e:18:f8:92:a4:e4:db:1b: cb:35:63:f7:2f:0e:84:55:7a:b5:7b:24:cc:34:79: 47:5e:fe:41:8d:c1:fa:cb:44:23:c6:4f:f2:03:c8: ad:26:66:1a:57:26:7e:7a:83:a9:cc:9e:dc:60:f5: 7c:6f:11:f8:09:16:a3:91:1c:b2:5c:32:38:de:fd: ab:78:7e:11:c1:42:5d:f9:36:d4:06:96:37:e5:99: 4f:44:e3:47:48:b0:ef:7f:e6:3f:65:bb:64:0f:b4: f1:17:8f:fe:34:c1:72:c5:b1:19:87:aa:68:f3:7f: 25:b4:5c:d9:08:94:90:af:7e:28:84:68:3b:85:aa: cb:97:eb:60:d5:4e:31:dc:67:91:bd:1b:0d:77:ab: 4e:ba:8a:5f:ed:a4:bb:ab:7e:e1:53:1f:d1:5c:c5: 85:52:97:c5:a0:4e:0b:3e:e7:a9:15:39:ee:79:85: bd:53:6c:0f:ad:99:3a:d1:2c:26:45:ae:44:f4:4d: 84:a4:27:e2:69:e0:d0:80:fb:e9:26:83:fa:11:af: dc:bb:bd:50:9b:3b:9d:85:79:d3:d2:f9:03:ed:e2: 75:29:a7:f8:d1:ce:78:a1:d6:d8:67:8d:f5:97:9a: 9d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:B3:7E:E4:6D:39:17:80:0D:01:92:8F:7F:36:D5:21:86:F5:A0:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/22eda990-1d62-328f-98c6-8d0926c65324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ca:a2:8e:83:25:52:d2:26:18:cb:67:5c:06:29:10:4a:f8: 15:68:ce:45:f4:1d:00:60:87:ef:40:57:88:58:fb:06:45:0b: 5a:36:bf:87:56:33:1f:80:bf:97:69:8c:ef:02:81:64:ba:8d: 76:e4:58:ae:2b:c7:47:cf:dc:42:32:b1:f6:5a:42:87:ea:51: 33:c4:58:3b:9c:83:cd:1c:09:4d:40:22:f2:ec:fd:df:cc:fb: 2c:7e:96:43:1c:62:9a:3e:92:15:c9:04:1c:c2:2d:ff:2e:6e: 28:18:c0:62:c3:e8:59:cd:9c:af:64:06:9e:05:93:ab:03:c9: fa:a7:5e:23:96:83:d9:e9:07:f2:f8:7a:2d:5e:3a:3a:9c:be: ff:38:08:f3:14:7b:d3:03:3e:ac:24:e0:1b:9e:0a:a3:c9:89: e9:46:93:d5:8a:dd:74:86:1d:ad:0d:c5:39:31:e7:93:5d:d0: f9:3e:b7:f7:e4:fd:ec:4c:f6:b1:95:fc:74:80:b4:6b:3b:1b: 03:82:3d:a6:f4:f1:7c:83:55:d1:f8:6d:89:bb:d5:65:4e:66: 14:df:80:42:23:a7:e0:cd:16:20:d9:0c:63:de:00:ee:b5:16: f6:46:39:56:91:14:34:0d:6b:c3:93:f1:74:2e:64:13:a8:9d: af:6b:8c:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5fTsr37zH+CO8jCowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEwNTI1MFoXDTI2MDEwODExNTI1MFowLzEtMCsGA1UEAxMk MTQyNDgyYmUtNDAwNi00MmVhLTlkZDgtMGNhMTNlMDI2M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0BGqVnysF2Q5Lw59fQ0+5W81iXbPhj4kqTk 2xvLNWP3Lw6EVXq1eyTMNHlHXv5BjcH6y0Qjxk/yA8itJmYaVyZ+eoOpzJ7cYPV8 bxH4CRajkRyyXDI43v2reH4RwUJd+TbUBpY35ZlPRONHSLDvf+Y/ZbtkD7TxF4/+ NMFyxbEZh6po838ltFzZCJSQr34ohGg7harLl+tg1U4x3GeRvRsNd6tOuopf7aS7 q37hUx/RXMWFUpfFoE4LPuepFTnueYW9U2wPrZk60SwmRa5E9E2EpCfiaeDQgPvp JoP6Ea/cu71QmzudhXnT0vkD7eJ1Kaf40c54odbYZ431l5qdNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLazfuRtOReADQGSj3821SGG9aAeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjJlZGE5OTAtMWQ2Mi0z MjhmLTk4YzYtOGQwOTI2YzY1MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrKoo6DJVLSJhjLZ1wGKRBK+BVozkX0HQBgh+9AV4hY+wZFC1o2v4dW Mx+Av5dpjO8CgWS6jXbkWK4rx0fP3EIysfZaQofqUTPEWDucg80cCU1AIvLs/d/M +yx+lkMcYpo+khXJBBzCLf8ubigYwGLD6FnNnK9kBp4Fk6sDyfqnXiOWg9npB/L4 ei1eOjqcvv84CPMUe9MDPqwk4BueCqPJielGk9WK3XSGHa0NxTkx55Nd0Pk+t/fk /exM9rGV/HSAtGs7GwOCPab08XyDVdH4bYm71WVOZhTfgEIjp+DNFiDZDGPeAO61 FvZGOVaRFDQNa8OT8XQuZBOona9rjKc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:18:35 2025 by rpki-client