$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58e96d59-794f-3449-8df4-3e14e55cd5b4.roa File: 58e96d59-794f-3449-8df4-3e14e55cd5b4.roa (raw, json) Hash identifier: JdrY3IJOfumegMjw90Nl+JAaHPRgnN0qUg6lIX6TzaE= Subject key identifier: 3A:20:DB:3C:F5:F8:16:72:82:EE:64:D2:EF:F7:46:9D:FC:3B:51:16 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF0F140C429D4D9B90E27F400 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58e96d59-794f-3449-8df4-3e14e55cd5b4.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 212238 IP address blocks: 104.250.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:40:c4:29:d4:d9:b9:0e:27:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=71eb95e6-94eb-482f-bf89-fdfd7c75fdf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fe:1f:69:d3:a9:01:97:f8:3e:ca:a4:cc:da: 9d:a3:1d:ef:04:1c:aa:0d:7c:0c:92:d5:2d:39:de: e7:cf:9d:e9:e8:43:6a:3c:65:f0:7f:8a:30:18:8c: de:1c:e8:7e:a9:ff:1f:c8:33:6f:17:d6:62:8c:b4: fd:e6:84:eb:ea:6a:1c:7a:ce:fe:f4:69:f0:65:f5: cc:5f:4f:dd:d5:e4:f8:1b:40:09:f3:54:be:38:d3: 6f:83:0b:50:37:80:53:a7:06:c3:ef:af:69:9d:11: 91:cb:1b:a0:b0:18:93:e5:0c:20:f0:8b:7d:75:c2: 85:97:ba:d6:50:88:3c:14:28:56:06:3a:e3:a2:d0: 49:0b:97:a6:1c:e4:2e:9e:d7:80:2d:90:59:15:20: 6f:46:c5:fa:7f:c6:f5:ea:4d:8c:1d:b6:d7:fb:1d: 43:b8:a2:ac:62:9f:05:7e:43:3e:71:dc:5e:57:ff: de:20:0d:22:31:3e:84:38:92:6f:7d:b0:60:6d:18: 02:2b:b4:5c:d1:e9:23:2f:cc:ee:8e:b2:22:22:92: da:2d:54:d3:08:44:33:f1:80:79:bf:da:c5:ed:56: 7b:6f:77:b9:21:73:3e:13:40:10:76:e2:24:5b:34: c2:66:bd:92:e5:f0:d9:91:45:e9:8b:51:17:dd:7a: 1d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:20:DB:3C:F5:F8:16:72:82:EE:64:D2:EF:F7:46:9D:FC:3B:51:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/58e96d59-794f-3449-8df4-3e14e55cd5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:87:e6:7b:72:e4:5c:a0:c4:c2:e6:c5:a2:71:1b:5f:53:c0: 03:62:5d:9b:6e:69:78:4a:78:3b:d8:92:ff:e5:ab:0c:50:c5: e2:f1:7f:50:be:16:93:4a:e2:4b:8c:70:cc:a1:e3:35:fe:28: c1:3c:d0:5e:90:42:37:b5:32:92:9b:30:59:b1:f6:af:95:fb: a8:ae:dc:8c:05:ba:77:87:bf:f4:a8:e4:76:e3:ba:1a:fc:5c: 4f:29:79:3c:de:51:f6:c7:cb:df:ff:a1:d0:89:72:fe:30:bd: 6f:4a:3e:93:8d:bf:a1:7d:b0:95:7a:c5:06:89:ff:15:1e:b6: 16:50:cd:cc:f1:da:bf:00:9c:30:97:b7:71:0c:ec:ea:e9:e0: b5:9a:9f:2b:9e:cd:cb:19:69:10:23:10:66:ba:98:46:e8:31: 86:ab:39:3e:0e:c5:90:10:70:1c:19:45:07:e5:6d:49:5f:e8: 92:18:3f:4d:eb:65:e3:9c:ab:30:f2:8e:9c:07:90:24:e6:88: 3e:24:59:e4:a9:a6:15:ac:22:a4:25:5c:6c:05:ea:1b:fd:aa: b7:be:09:de:b9:fa:df:fc:d2:e7:42:64:6f:18:d0:58:33:dc: d6:a8:a4:4b:64:14:ef:82:39:73:a6:0b:34:e0:c8:d9:41:3b: 45:d7:a8:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UDEKdTZuQ4n9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk NzFlYjk1ZTYtOTRlYi00ODJmLWJmODktZmRmZDdjNzVmZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf4fadOpAZf4PsqkzNqdox3vBByqDXwMktUt Od7nz53p6ENqPGXwf4owGIzeHOh+qf8fyDNvF9ZijLT95oTr6moces7+9GnwZfXM X0/d1eT4G0AJ81S+ONNvgwtQN4BTpwbD769pnRGRyxugsBiT5Qwg8It9dcKFl7rW UIg8FChWBjrjotBJC5emHOQunteALZBZFSBvRsX6f8b16k2MHbbX+x1DuKKsYp8F fkM+cdxeV//eIA0iMT6EOJJvfbBgbRgCK7Rc0ekjL8zujrIiIpLaLVTTCEQz8YB5 v9rF7VZ7b3e5IXM+E0AQduIkWzTCZr2S5fDZkUXpi1EX3XodsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDog2zz1+BZygu5k0u/3Rp38O1EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNThlOTZkNTktNzk0Zi0z NDQ5LThkZjQtM2UxNGU1NWNkNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmH5nty5FygxMLmxaJxG19TwANiXZtuaXhKeDvYkv/lqwxQxeLxf1C+ FpNK4kuMcMyh4zX+KME80F6QQje1MpKbMFmx9q+V+6iu3IwFuneHv/So5Hbjuhr8 XE8peTzeUfbHy9//odCJcv4wvW9KPpONv6F9sJV6xQaJ/xUethZQzczx2r8AnDCX t3EM7Orp4LWanyuezcsZaRAjEGa6mEboMYarOT4OxZAQcBwZRQflbUlf6JIYP03r ZeOcqzDyjpwHkCTmiD4kWeSpphWsIqQlXGwF6hv9qre+Cd65+t/80udCZG8Y0Fgz 3NaopEtkFO+COXOmCzTgyNlBO0XXqKY= -----END CERTIFICATE-----Generated at Sat Aug 23 13:20:00 2025 by rpki-client