$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b2382d7-8f04-3402-81b9-4792abfb41f8.roa File: 5b2382d7-8f04-3402-81b9-4792abfb41f8.roa (raw, json) Hash identifier: 9nwGSMeqm4qBiYeGqjqZurO3vj+5uBOoRuAR2PGPC6k= Subject key identifier: F5:23:4E:12:27:4D:55:F3:CC:10:82:92:1C:26:C0:80:1E:EA:FD:DD Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A51E5583D6CABC6A44CEFDC00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b2382d7-8f04-3402-81b9-4792abfb41f8.roa Signing time: Thu 26 Jun 2025 13:43:20 +0000 ROA not before: Thu 26 Jun 2025 13:43:20 +0000 ROA not after: Wed 24 Sep 2025 13:43:20 +0000 asID: 329007 IP address blocks: 104.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:51:e5:58:3d:6c:ab:c6:a4:4c:ef:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 26 13:43:20 2025 GMT Not After : Sep 24 13:43:20 2025 GMT Subject: CN=92aa1821-cdc1-4f7d-8951-f0cd3cb73adc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:c7:ae:49:03:87:7d:da:f6:ef:3e:fd:da: aa:9b:5b:de:17:6c:df:ad:9c:02:c6:20:44:a3:cc: 3c:41:b8:90:63:ca:84:3f:31:dc:4c:80:88:92:b9: f6:d7:29:9b:fc:36:98:77:7d:73:83:01:65:01:04: e2:f0:16:14:1e:2a:1c:93:e6:f3:39:7b:93:f2:b6: ee:89:f7:02:20:ba:10:58:42:54:1f:85:1e:3d:45: 7e:2d:6b:16:f8:27:7c:b7:ab:ec:c5:9e:c0:ec:42: 9c:2f:d3:3d:24:16:af:4a:28:fc:45:38:aa:e2:09: 3f:5e:8d:e2:92:cc:b8:32:9f:55:cb:66:89:99:56: 06:f8:93:0d:38:c4:e2:29:e0:d6:fe:ac:90:6e:e8: 5c:87:1a:ff:5c:8a:39:d0:9f:8f:55:2d:53:a9:00: c0:18:63:e8:6a:8c:46:f8:14:cc:52:23:ed:f3:35: 81:77:88:bc:1f:a9:ac:12:62:42:2a:77:79:d3:de: b2:2f:9a:6c:9e:b6:42:a6:0d:f8:c5:f5:76:12:fa: 20:74:48:82:a3:f2:15:cc:fe:ed:18:60:ae:8a:ff: 54:e9:44:f3:b9:93:06:13:94:eb:17:35:bc:85:86: 07:43:77:36:59:52:ee:bd:07:86:66:17:14:00:4a: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:23:4E:12:27:4D:55:F3:CC:10:82:92:1C:26:C0:80:1E:EA:FD:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5b2382d7-8f04-3402-81b9-4792abfb41f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:76:9e:0f:02:78:14:51:46:43:fe:f8:78:16:59:41:8a:bf: fb:3d:57:97:ba:24:36:ea:a1:81:5f:aa:86:6a:05:95:0d:00: 38:2e:aa:df:72:a5:3e:3d:21:99:9e:e9:e8:88:d5:75:1d:99: 5b:23:64:3c:86:5e:3a:74:7d:cc:5d:0f:bd:6a:ee:70:fd:3c: 8c:82:7e:38:1d:44:79:16:d0:91:a4:67:d2:d2:4b:42:f4:59: d7:04:78:c4:9e:dd:55:b0:04:ae:67:ec:0f:f0:b3:b3:bd:8a: 66:15:8b:59:43:c8:58:66:1e:63:07:bf:32:d3:8c:57:3c:8c: d7:79:f4:24:e5:1c:24:d9:3e:61:bc:e2:16:d0:9e:d3:4f:f6: cd:22:fc:25:3d:2d:71:e6:f8:e0:7e:97:5f:c3:21:02:44:ee: 74:65:af:8f:a5:55:b8:7e:72:48:67:2d:ea:52:84:fa:65:89: 6b:9a:9c:c6:73:2c:e2:7d:bb:b8:1b:62:3c:b5:c0:d2:ab:06: 73:ce:89:0f:18:66:6c:ff:a9:24:fa:8e:a9:28:52:15:b7:8e: fb:f9:10:1a:26:83:03:52:16:9f:2d:5b:6e:ad:40:1d:d1:b8: f8:59:0f:7b:21:d2:4b:40:64:ca:76:74:17:46:c8:09:d2:84: 7b:fd:dc:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR5Vg9bKvGpEzv3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDYyNjEzNDMyMFoXDTI1MDkyNDEzNDMyMFowLzEtMCsGA1UEAxMk OTJhYTE4MjEtY2RjMS00ZjdkLTg5NTEtZjBjZDNjYjczYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpPHrkkDh33a9u8+/dqqm1veF2zfrZwCxiBE o8w8QbiQY8qEPzHcTICIkrn21ymb/DaYd31zgwFlAQTi8BYUHiock+bzOXuT8rbu ifcCILoQWEJUH4UePUV+LWsW+Cd8t6vsxZ7A7EKcL9M9JBavSij8RTiq4gk/Xo3i ksy4Mp9Vy2aJmVYG+JMNOMTiKeDW/qyQbuhchxr/XIo50J+PVS1TqQDAGGPoaoxG +BTMUiPt8zWBd4i8H6msEmJCKnd5096yL5psnrZCpg34xfV2EvogdEiCo/IVzP7t GGCuiv9U6UTzuZMGE5TrFzW8hYYHQ3c2WVLuvQeGZhcUAEpNOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUjThInTVXzzBCCkhwmwIAe6v3dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNWIyMzgyZDctOGYwNC0z NDAyLTgxYjktNDc5MmFiZmI0MWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAN2ng8CeBRRRkP++HgWWUGKv/s9V5e6JDbqoYFfqoZqBZUNADguqt9y pT49IZme6eiI1XUdmVsjZDyGXjp0fcxdD71q7nD9PIyCfjgdRHkW0JGkZ9LSS0L0 WdcEeMSe3VWwBK5n7A/ws7O9imYVi1lDyFhmHmMHvzLTjFc8jNd59CTlHCTZPmG8 4hbQntNP9s0i/CU9LXHm+OB+l1/DIQJE7nRlr4+lVbh+ckhnLepShPpliWuanMZz LOJ9u7gbYjy1wNKrBnPOiQ8YZmz/qST6jqkoUhW3jvv5EBomgwNSFp8tW26tQB3R uPhZD3sh0ktAZMp2dBdGyAnShHv93HE= -----END CERTIFICATE-----Generated at Sun Jun 29 17:49:14 2025 by rpki-client