$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa File: 968332ec-c5e0-337e-84e2-d19764525274.roa (raw, json) Hash identifier: Qgp3XzNOqRP3XI+DiAp1vVFgpp9qimdcjmQuA2M02ss= Subject key identifier: 7D:D5:27:CF:C4:3E:DD:FB:34:71:7F:45:03:07:28:85:C1:D9:F0:B6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B8EACEC24E95B07E5890B6D20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 3223 IP address blocks: 104.37.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ec:24:e9:5b:07:e5:89:0b:6d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d2ef6d09-fd55-4616-b5cf-93f2159c36e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1b:79:41:9b:5c:c7:f5:bc:e8:ee:27:53:97: e2:28:a8:11:42:9a:67:12:51:4d:c6:be:c6:ca:df: f9:04:d7:61:d3:83:05:f4:73:ab:69:26:d2:7a:ca: d8:a6:f4:43:51:95:02:ab:55:4c:9f:0c:72:60:69: be:46:c3:60:a0:c8:83:39:c3:ea:34:49:19:08:0e: f8:f4:db:a4:82:6e:b4:46:8e:df:a8:e9:b7:04:2a: 3a:8b:a9:a3:39:64:bc:2a:32:95:ab:67:40:4e:a5: 2e:ea:2a:c7:a6:e0:15:d8:8e:f4:80:dd:64:12:fa: 2f:28:ba:75:e0:07:75:71:4e:7d:74:71:62:7a:a1: 64:2b:79:24:56:bb:87:3f:86:ee:ef:91:5e:cc:6f: b2:e3:02:e0:8c:0a:da:3f:00:48:6f:41:82:10:79: ee:4a:2b:37:e7:7e:9b:ba:30:cd:15:44:37:72:7b: 2c:07:46:44:a4:33:c3:01:75:d2:e8:da:19:29:3b: 35:28:d7:4e:19:e2:09:ef:7b:65:f2:0a:bb:f0:c4: be:95:f8:22:ce:0a:4e:ee:24:c4:57:b9:ae:51:c2: a5:5f:95:42:68:92:7c:9e:07:ae:42:64:53:01:da: f8:38:98:1d:99:30:6f:a6:a8:18:5c:ae:44:ab:db: 37:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D5:27:CF:C4:3E:DD:FB:34:71:7F:45:03:07:28:85:C1:D9:F0:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/968332ec-c5e0-337e-84e2-d19764525274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:05:2d:70:9f:56:0d:50:7e:08:92:ef:3c:86:7e:d3:ea:d8: 74:e6:b6:69:1d:9b:f7:99:fb:6f:8a:12:61:55:cc:73:b0:d3: e3:9b:8d:45:8b:a0:a8:5f:3c:45:52:7c:4e:5a:0f:1f:3f:bb: a2:e8:96:1f:8b:4d:b2:51:f3:c5:a6:43:47:e1:23:e9:35:59: 07:bd:cd:4a:bb:7a:97:d2:3e:25:6a:4e:1d:77:57:e0:a8:cb: 5b:d9:a2:c6:61:fe:a3:e0:fd:a3:f1:81:5e:6c:cf:b5:2e:e2: 72:87:4d:52:5f:ee:33:8d:46:2b:d6:35:16:0d:45:4b:22:7c: 21:33:bf:d4:44:ae:e5:03:41:d5:6c:39:d1:1f:79:fa:0f:e8: 11:76:da:3b:44:ad:90:c0:4c:c9:e1:73:bf:9e:cd:42:e3:02: 6e:c5:1c:41:25:b7:f7:9a:de:4f:cb:18:94:e6:7a:06:d4:30: d0:5f:88:e1:f7:5b:c6:40:aa:e3:f6:9e:b8:04:3e:b3:1d:d2: 47:70:e9:27:9d:ef:2f:bb:96:af:62:96:f8:aa:f5:a3:2d:94: 6c:57:02:c6:43:66:b9:39:60:8d:bc:55:5e:2a:6a:cb:26:30: 05:50:da:e9:17:cf:57:4a:7a:05:f5:52:d6:54:45:04:71:35: 98:f2:41:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOwk6VsH5YkLbSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDJlZjZkMDktZmQ1NS00NjE2LWI1Y2YtOTNmMjE1OWMzNmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxt5QZtcx/W86O4nU5fiKKgRQppnElFNxr7G yt/5BNdh04MF9HOraSbSesrYpvRDUZUCq1VMnwxyYGm+RsNgoMiDOcPqNEkZCA74 9Nukgm60Ro7fqOm3BCo6i6mjOWS8KjKVq2dATqUu6irHpuAV2I70gN1kEvovKLp1 4Ad1cU59dHFieqFkK3kkVruHP4bu75FezG+y4wLgjAraPwBIb0GCEHnuSis3536b ujDNFUQ3cnssB0ZEpDPDAXXS6NoZKTs1KNdOGeIJ73tl8gq78MS+lfgizgpO7iTE V7muUcKlX5VCaJJ8ngeuQmRTAdr4OJgdmTBvpqgYXK5Eq9s3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3VJ8/EPt37NHF/RQMHKIXB2fC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOTY4MzMyZWMtYzVlMC0z MzdlLTg0ZTItZDE5NzY0NTI1Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUFLXCfVg1QfgiS7zyGftPq2HTmtmkdm/eZ+2+KEmFVzHOw0+ObjUWL oKhfPEVSfE5aDx8/u6Lolh+LTbJR88WmQ0fhI+k1WQe9zUq7epfSPiVqTh13V+Co y1vZosZh/qPg/aPxgV5sz7Uu4nKHTVJf7jONRivWNRYNRUsifCEzv9REruUDQdVs OdEfefoP6BF22jtErZDATMnhc7+ezULjAm7FHEElt/ea3k/LGJTmegbUMNBfiOH3 W8ZAquP2nrgEPrMd0kdw6Sed7y+7lq9ilviq9aMtlGxXAsZDZrk5YI28VV4qassm MAVQ2ukXz1dKegX1UtZURQRxNZjyQY0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:14 2025 by rpki-client