$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e685895-2bad-3c7e-addb-e7c8cab0505f.roa File: 2e685895-2bad-3c7e-addb-e7c8cab0505f.roa (raw, json) Hash identifier: wkrtUam2rkYlmCsQYltbZBknPYwBtU2J7foVKXvr2G0= Subject key identifier: F1:A7:8E:4B:83:BF:98:8F:5D:D6:D0:5A:35:5B:04:E3:2D:6F:91:67 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B79AE388BF5B69CA424511B40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e685895-2bad-3c7e-addb-e7c8cab0505f.roa Signing time: Fri 10 Oct 2025 12:31:33 +0000 ROA not before: Fri 10 Oct 2025 12:31:33 +0000 ROA not after: Thu 08 Jan 2026 13:31:33 +0000 asID: 397630 IP address blocks: 104.243.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ae:38:8b:f5:b6:9c:a4:24:51:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 12:31:33 2025 GMT Not After : Jan 8 13:31:33 2026 GMT Subject: CN=6c45ddff-700a-4cf6-9d6b-8e2ac61c2479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:70:65:49:5a:7e:b9:51:2e:4c:4e:ed:85: c9:11:93:cc:e4:62:a8:68:cc:fe:f4:ab:5e:8f:88: b2:b5:48:a6:b4:30:56:61:2b:e8:e9:e8:c8:8f:16: b0:c1:fc:ef:21:b9:c1:05:fc:87:c7:7e:b0:4c:69: a5:12:3e:cf:ed:3e:32:d1:1f:bd:4b:17:53:3c:56: 38:29:3b:37:48:f9:65:b0:71:ad:e7:69:13:12:81: c1:c4:31:2d:9a:e1:b0:8e:5e:11:77:72:f8:44:f3: 54:0a:f2:b9:fc:f4:16:66:63:2c:5b:18:7a:8f:ec: 9c:22:69:5a:69:3f:56:6c:b0:0b:58:17:09:65:5d: dc:fe:24:42:a1:a1:1d:96:7a:9d:da:ef:d8:f3:41: 27:dc:69:aa:ea:5f:ff:74:7d:d5:65:58:70:c2:60: c9:9a:ae:7c:91:d6:2c:d5:4c:98:c0:ec:18:90:30: a2:2c:55:cd:db:19:bb:e6:1b:f1:18:db:0d:fe:1a: 3d:22:eb:48:9a:ab:06:6d:cd:60:16:db:eb:5e:08: 7a:70:2c:4d:6f:7b:76:34:bf:9f:b5:72:ad:99:3f: 27:5e:de:7f:d4:75:1e:f7:45:11:19:63:05:c6:0a: 0c:5e:9c:5d:bf:d0:1b:d7:40:cc:a7:d3:1a:11:d6: 23:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A7:8E:4B:83:BF:98:8F:5D:D6:D0:5A:35:5B:04:E3:2D:6F:91:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2e685895-2bad-3c7e-addb-e7c8cab0505f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:40:59:94:9e:02:6a:36:8d:31:5d:2e:b6:ed:eb:17:75:3c: cc:4a:89:54:c2:89:1f:90:4f:55:3b:a5:a4:6d:a2:9e:49:ca: 5a:b7:df:f4:52:7c:57:57:ea:91:a5:c9:c0:94:24:06:e4:e9: 3a:ae:a7:c1:1c:d5:99:30:6a:ba:c0:40:ce:da:61:6c:e7:bf: 0c:81:46:1d:16:4d:fe:74:b4:90:5d:ee:fb:52:6a:1a:55:f5: cc:c1:5a:b6:58:e7:92:5f:4e:f2:44:33:3a:af:9a:b0:63:10: 04:a2:51:f0:69:ca:33:3d:12:3a:31:94:75:8a:03:6c:8c:df: 5e:3d:74:01:15:1b:15:be:d1:ff:c9:70:77:2c:20:e4:a5:20: b8:e1:78:81:67:5e:c4:f5:bc:ec:3b:73:9b:bb:06:ac:85:c1: c5:76:4d:25:8a:da:a7:14:aa:4a:93:8f:55:8c:c7:87:c0:05: f5:3a:c4:b8:71:3b:a0:90:e4:ab:8f:7e:ad:54:5e:c8:eb:29: 91:bb:dd:29:bc:0b:94:5e:64:79:04:5a:49:06:5f:07:8e:40: a8:b8:a7:51:06:5c:60:65:19:b5:bf:62:3e:08:8b:ca:fb:19: 98:17:a1:f1:51:0d:70:8b:d4:ad:bf:5c:d6:07:29:f1:3d:1a: 29:07:7e:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5rjiL9bacpCRRG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEyMzEzM1oXDTI2MDEwODEzMzEzM1owLzEtMCsGA1UEAxMk NmM0NWRkZmYtNzAwYS00Y2Y2LTlkNmItOGUyYWM2MWMyNDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlVwZUlafrlRLkxO7YXJEZPM5GKoaMz+9Kte j4iytUimtDBWYSvo6ejIjxawwfzvIbnBBfyHx36wTGmlEj7P7T4y0R+9SxdTPFY4 KTs3SPllsHGt52kTEoHBxDEtmuGwjl4Rd3L4RPNUCvK5/PQWZmMsWxh6j+ycImla aT9WbLALWBcJZV3c/iRCoaEdlnqd2u/Y80En3Gmq6l//dH3VZVhwwmDJmq58kdYs 1UyYwOwYkDCiLFXN2xm75hvxGNsN/ho9IutImqsGbc1gFtvrXgh6cCxNb3t2NL+f tXKtmT8nXt5/1HUe90URGWMFxgoMXpxdv9Ab10DMp9MaEdYjlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGnjkuDv5iPXdbQWjVbBOMtb5FnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmU2ODU4OTUtMmJhZC0z YzdlLWFkZGItZTdjOGNhYjA1MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpAWZSeAmo2jTFdLrbt6xd1PMxKiVTCiR+QT1U7paRtop5Jylq33/RS fFdX6pGlycCUJAbk6Tqup8Ec1ZkwarrAQM7aYWznvwyBRh0WTf50tJBd7vtSahpV 9czBWrZY55JfTvJEMzqvmrBjEASiUfBpyjM9EjoxlHWKA2yM3149dAEVGxW+0f/J cHcsIOSlILjheIFnXsT1vOw7c5u7BqyFwcV2TSWK2qcUqkqTj1WMx4fABfU6xLhx O6CQ5KuPfq1UXsjrKZG73Sm8C5ReZHkEWkkGXweOQKi4p1EGXGBlGbW/Yj4Ii8r7 GZgXofFRDXCL1K2/XNYHKfE9GikHfk0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:28 2025 by rpki-client