$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0baf09d-eb50-3956-96e4-cbc2d960be7d.roa File: a0baf09d-eb50-3956-96e4-cbc2d960be7d.roa (raw, json) Hash identifier: J4xAlwnwuT6DMf9HYZ8/FD5Qhd4/fDfX65NmcKB2aos= Subject key identifier: 80:48:64:7D:5C:98:38:67:35:91:E4:89:B3:49:A6:B1:74:F2:2D:89 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B389EA92BB4E05EC757453780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0baf09d-eb50-3956-96e4-cbc2d960be7d.roa Signing time: Wed 17 Sep 2025 05:12:39 +0000 ROA not before: Wed 17 Sep 2025 05:12:39 +0000 ROA not after: Tue 16 Dec 2025 06:12:39 +0000 asID: 205220 IP address blocks: 104.250.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:9e:a9:2b:b4:e0:5e:c7:57:45:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 17 05:12:39 2025 GMT Not After : Dec 16 06:12:39 2025 GMT Subject: CN=aa64bc0f-7651-4365-8567-c6c686d6c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:1e:ea:0a:9f:42:ed:ba:3c:ea:54:34:1a: 81:fa:e4:58:92:94:8e:bd:cc:e7:1c:40:4c:07:71: 39:e3:0c:02:5d:2c:c8:08:8c:5b:31:80:2a:d5:21: 53:6e:6a:0a:31:dc:ba:65:b9:91:c8:e3:59:60:89: fc:11:04:ae:95:31:43:0e:e2:90:1c:30:7d:c6:16: 78:41:66:b2:ed:77:51:81:24:b9:c7:df:86:fd:c8: 0d:73:9e:d3:06:32:ed:fb:8c:1f:7e:20:f8:be:ac: 4a:a7:1f:0a:fb:88:7a:68:ef:90:10:00:5f:d0:bb: 51:4d:e0:97:89:c7:e9:da:00:68:ef:cf:9a:29:cb: 0b:50:ae:c3:33:c9:9e:e2:a0:bc:0b:cb:d6:5f:23: 81:95:72:9f:0a:5a:9a:d1:bf:a2:c7:15:f7:dc:17: 56:ef:a8:cb:8e:34:d4:6b:cb:5c:a2:6f:83:ec:36: 11:ba:cb:e6:45:b9:96:b7:6f:18:01:00:7e:e9:1e: b6:75:4f:c1:b1:d6:ff:2c:ba:5a:d5:ee:9e:d4:70: 00:08:90:f3:83:05:4c:dd:fb:0c:9c:1b:2b:40:31: 44:ba:2b:99:f3:f3:89:d9:6a:77:12:eb:9e:bd:89: ca:bc:97:17:8d:68:8a:36:4e:aa:14:17:9e:48:11: 81:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:48:64:7D:5C:98:38:67:35:91:E4:89:B3:49:A6:B1:74:F2:2D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a0baf09d-eb50-3956-96e4-cbc2d960be7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9a:02:31:3f:06:ef:a5:17:7d:de:6d:22:9a:ac:8e:90:04: 22:8e:48:18:0c:e5:b9:b0:ca:4c:d3:98:51:ee:81:c3:2c:fe: b8:67:9d:3c:c1:7a:62:dd:10:87:72:a2:b5:0a:ac:55:ce:f9: 19:bc:10:8d:6c:f3:9b:a9:e0:bc:c0:5a:41:8f:1e:f3:a4:80: 40:2d:25:ea:cb:85:db:e9:c8:ac:7c:88:8e:43:ff:ba:cb:d5: b5:07:81:9d:99:e4:57:59:0b:d6:f1:e0:29:0c:65:2e:64:ad: 54:8e:d8:5e:03:44:ce:b6:17:5b:96:69:c2:bb:b5:b3:3b:46: b8:b7:81:80:fc:66:7b:35:ad:7b:c1:8e:bc:a9:68:45:1c:ea: 74:55:aa:77:01:46:d6:fb:c3:c8:64:c9:a3:aa:49:25:50:76: 5f:bd:09:e0:1b:5f:be:6f:47:16:f4:84:fe:2e:7e:9e:be:df: 53:71:38:73:27:74:c9:72:f3:da:9e:f9:ce:19:ba:ae:ac:9c: ff:b6:05:65:d5:16:13:f4:ec:e5:e4:ec:38:23:0e:ce:d8:f8: 48:65:44:01:0c:b9:5c:0e:98:ae:b1:bf:30:55:61:84:ef:ab: 5f:3b:32:df:7c:0b:14:eb:0d:ae:26:bc:3e:4e:85:aa:25:ab: 12:04:05:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4nqkrtOBex1dFN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNzA1MTIzOVoXDTI1MTIxNjA2MTIzOVowLzEtMCsGA1UEAxMk YWE2NGJjMGYtNzY1MS00MzY1LTg1NjctYzZjNjg2ZDZjNzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAQe6gqfQu26POpUNBqB+uRYkpSOvcznHEBM B3E54wwCXSzICIxbMYAq1SFTbmoKMdy6ZbmRyONZYIn8EQSulTFDDuKQHDB9xhZ4 QWay7XdRgSS5x9+G/cgNc57TBjLt+4wffiD4vqxKpx8K+4h6aO+QEABf0LtRTeCX icfp2gBo78+aKcsLUK7DM8me4qC8C8vWXyOBlXKfClqa0b+ixxX33BdW76jLjjTU a8tcom+D7DYRusvmRbmWt28YAQB+6R62dU/Bsdb/LLpa1e6e1HAACJDzgwVM3fsM nBsrQDFEuiuZ8/OJ2Wp3EuuevYnKvJcXjWiKNk6qFBeeSBGBcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBIZH1cmDhnNZHkibNJprF08i2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTBiYWYwOWQtZWI1MC0z OTU2LTk2ZTQtY2JjMmQ5NjBiZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiaAjE/Bu+lF33ebSKarI6QBCKOSBgM5bmwykzTmFHugcMs/rhnnTzB emLdEIdyorUKrFXO+Rm8EI1s85up4LzAWkGPHvOkgEAtJerLhdvpyKx8iI5D/7rL 1bUHgZ2Z5FdZC9bx4CkMZS5krVSO2F4DRM62F1uWacK7tbM7Rri3gYD8Zns1rXvB jrypaEUc6nRVqncBRtb7w8hkyaOqSSVQdl+9CeAbX75vRxb0hP4ufp6+31NxOHMn dMly89qe+c4Zuq6snP+2BWXVFhP07OXk7DgjDs7Y+EhlRAEMuVwOmK6xvzBVYYTv q187Mt98CxTrDa4mvD5OhaolqxIEBbQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:48:16 2025 by rpki-client