$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7207a3a3-71cd-3fe2-b2f5-77a087eeb69a.roa File: 7207a3a3-71cd-3fe2-b2f5-77a087eeb69a.roa (raw, json) Hash identifier: Ud8Uf65ulL/7MZQc4iOC8b2o20juIyuaIEm9B6g9fr8= Subject key identifier: 73:D8:E7:64:D2:B0:3A:EB:F4:B7:2D:D3:29:05:7D:6B:4B:BB:50:57 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B79AE0ED5AA172859B082EB00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7207a3a3-71cd-3fe2-b2f5-77a087eeb69a.roa Signing time: Fri 10 Oct 2025 12:31:13 +0000 ROA not before: Fri 10 Oct 2025 12:31:13 +0000 ROA not after: Thu 08 Jan 2026 13:31:13 +0000 asID: 54252 IP address blocks: 104.243.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ae:0e:d5:aa:17:28:59:b0:82:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 12:31:13 2025 GMT Not After : Jan 8 13:31:13 2026 GMT Subject: CN=802dd261-6ed6-4d31-9d2e-634c8bb081d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ae:a1:bd:22:7a:1f:19:01:f9:45:ec:f4:27: aa:ce:3e:d5:ed:00:39:5c:19:8c:37:af:a9:77:e2: 5c:de:56:a7:17:55:e2:51:fa:9f:a8:41:79:7a:e0: e5:15:b3:bd:9d:33:35:d5:06:e9:58:23:b7:8a:57: 13:02:f5:e1:d2:89:22:c9:de:2b:42:17:bf:c9:b8: 04:a5:1a:ae:7c:86:76:ce:d6:91:27:40:bd:ff:6a: 09:97:e7:5c:8f:0c:97:4e:bc:65:ee:20:81:e7:ad: 71:a1:36:9e:3e:9a:4a:f8:5b:7c:93:32:73:ef:53: 80:aa:0c:5d:b4:1b:66:b3:3b:69:a2:be:3b:20:f1: 76:33:13:c8:11:db:14:2f:fa:de:b7:e9:94:65:76: 7a:1d:6a:58:6c:8e:6e:37:c8:e5:b4:f1:7e:3c:9d: 5d:ab:53:7d:c1:96:3a:3e:56:e9:b6:1b:d7:a0:ca: 24:2d:24:a3:3f:b2:ce:18:46:7f:5d:0e:5c:02:e3: a4:32:1a:50:c3:6d:94:6d:e5:c1:4c:fa:74:58:29: 36:e8:da:65:56:1b:95:0f:18:31:7c:48:c5:b2:11: 2d:e4:53:bd:38:21:32:56:1a:44:be:13:28:64:6d: 0b:0c:45:05:a1:77:9f:54:fb:7a:73:dc:6f:63:94: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D8:E7:64:D2:B0:3A:EB:F4:B7:2D:D3:29:05:7D:6B:4B:BB:50:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/7207a3a3-71cd-3fe2-b2f5-77a087eeb69a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a0:f4:d3:db:a9:72:56:38:03:d9:48:07:69:ba:9b:56:c5: 4e:b8:07:09:ea:d0:e8:ee:16:c4:c3:73:5e:61:8c:62:b7:8e: 08:53:6b:8d:66:cc:f3:b2:44:ab:b9:aa:77:b7:15:17:2e:fc: a5:c5:9e:ad:77:34:2a:6b:89:05:1f:9a:b0:9c:23:43:40:99: f2:b4:bc:94:4d:18:68:a2:8e:35:c2:e4:61:56:3d:55:06:f1: 3c:44:17:1b:f4:c6:f9:e8:8f:e4:2d:35:6f:43:70:fc:79:ea: b0:dc:61:bb:e7:c8:7d:48:d4:83:4c:df:8c:ab:26:0c:b5:9b: 78:c1:a2:49:88:29:f7:a5:59:e9:50:d6:25:1d:f2:97:7b:a8: d4:74:45:7f:bc:93:9c:6c:26:90:f2:d1:27:a4:03:19:22:6c: 64:63:cc:12:59:69:26:a7:b1:9b:6d:27:f0:43:5a:a2:26:ae: e5:3d:8c:f0:e8:d3:1a:00:6e:66:3d:b9:a0:ef:ea:95:41:d1: b9:8f:25:56:4d:ea:70:46:42:30:fa:4f:ae:e0:f2:82:c1:e5: 5d:a7:c8:5e:09:1a:f6:2b:27:d6:b9:80:77:77:05:8b:5b:7d: cd:d0:68:0e:d6:d8:56:27:e1:34:11:ec:42:3b:b4:bc:4b:cd: 63:a5:b9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5rg7VqhcoWbCC6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDEyMzExM1oXDTI2MDEwODEzMzExM1owLzEtMCsGA1UEAxMk ODAyZGQyNjEtNmVkNi00ZDMxLTlkMmUtNjM0YzhiYjA4MWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa6hvSJ6HxkB+UXs9Ceqzj7V7QA5XBmMN6+p d+Jc3lanF1XiUfqfqEF5euDlFbO9nTM11QbpWCO3ilcTAvXh0okiyd4rQhe/ybgE pRqufIZ2ztaRJ0C9/2oJl+dcjwyXTrxl7iCB561xoTaePppK+Ft8kzJz71OAqgxd tBtmsztpor47IPF2MxPIEdsUL/ret+mUZXZ6HWpYbI5uN8jltPF+PJ1dq1N9wZY6 PlbpthvXoMokLSSjP7LOGEZ/XQ5cAuOkMhpQw22UbeXBTPp0WCk26NplVhuVDxgx fEjFshEt5FO9OCEyVhpEvhMoZG0LDEUFoXefVPt6c9xvY5QZgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPY52TSsDrr9Lct0ykFfWtLu1BXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzIwN2EzYTMtNzFjZC0z ZmUyLWIyZjUtNzdhMDg3ZWViNjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOg9NPbqXJWOAPZSAdpuptWxU64Bwnq0OjuFsTDc15hjGK3jghTa41m zPOyRKu5qne3FRcu/KXFnq13NCpriQUfmrCcI0NAmfK0vJRNGGiijjXC5GFWPVUG 8TxEFxv0xvnoj+QtNW9DcPx56rDcYbvnyH1I1INM34yrJgy1m3jBokmIKfelWelQ 1iUd8pd7qNR0RX+8k5xsJpDy0SekAxkibGRjzBJZaSansZttJ/BDWqImruU9jPDo 0xoAbmY9uaDv6pVB0bmPJVZN6nBGQjD6T67g8oLB5V2nyF4JGvYrJ9a5gHd3BYtb fc3QaA7W2FYn4TQR7EI7tLxLzWOluWI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:36 2025 by rpki-client