$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b553b93e-1d4f-32ac-8fef-6bdfe0503007.roa File: b553b93e-1d4f-32ac-8fef-6bdfe0503007.roa (raw, json) Hash identifier: qeKH5Rf406flkiMDM7Vk+w3T3tBHyqZFxTKtXTaLqQI= Subject key identifier: 34:D8:A1:28:88:99:B3:B1:5D:28:35:63:D9:0D:26:7A:04:6E:6C:55 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AEE269D5F598F3C50C95AFC06 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b553b93e-1d4f-32ac-8fef-6bdfe0503007.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 104.250.182.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9d:5f:59:8f:3c:50:c9:5a:fc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=24dee030-c9ea-4722-b289-1c92f519fc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:31:13:68:ac:99:ba:56:78:45:4d:24:10:e1: 0a:68:da:fd:e9:23:94:9e:95:ad:5c:73:1d:a1:74: 6b:89:a4:25:47:07:a5:91:55:c2:59:ab:d4:f2:a6: 9c:96:12:d2:30:c0:db:d3:41:db:82:db:5a:e1:39: a6:e0:b6:1a:90:4b:ee:6d:6d:16:fb:5b:5d:22:40: 63:be:0a:83:45:83:ef:fb:c4:15:ef:22:18:13:a7: eb:df:19:cc:22:a0:d4:02:34:40:7a:f7:ac:50:93: 65:f1:ac:ab:d1:5a:12:b7:38:b5:fe:7a:3f:36:13: b6:01:28:5d:fc:60:ee:27:ae:0e:e8:b8:0e:93:c4: 61:ec:6e:c2:40:ed:18:ff:2b:9f:e5:a3:3f:d9:e5: 6e:2b:a3:83:26:33:d3:11:3e:18:d2:86:d4:4c:ec: 6c:8a:1a:78:e1:73:5c:e2:4e:e5:a5:a2:f6:90:6d: 77:db:74:28:a5:51:50:09:01:c3:ba:13:e8:26:bc: 48:9c:5b:b2:4c:24:ab:af:a6:82:ec:2a:a8:71:72: b2:a8:69:48:87:9a:55:f0:f4:82:83:d9:8b:fc:32: 20:03:19:d6:3f:d5:70:58:db:04:dd:c1:0e:1e:af: 42:39:6a:0d:8d:e4:71:73:2b:e3:b5:76:1b:a4:30: f5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D8:A1:28:88:99:B3:B1:5D:28:35:63:D9:0D:26:7A:04:6E:6C:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b553b93e-1d4f-32ac-8fef-6bdfe0503007.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.182.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:58:53:5b:6b:3f:46:6f:cb:54:ae:bf:05:8d:6f:a4:fb:30: 18:9b:ac:9d:1e:fc:64:f1:87:9d:a6:bd:97:0d:d4:ea:b2:b1: 14:32:ee:32:8c:ef:71:d2:39:67:1c:af:b4:41:1f:30:ed:a2: 9c:b6:a4:77:7c:14:67:c9:22:d2:5b:75:aa:f0:80:62:66:54: dd:47:2d:9d:c0:8d:a8:8f:6c:27:95:7b:26:0a:4c:f7:e8:f5: 7d:dd:1c:f0:b6:a5:31:a6:7f:0d:82:ec:8d:fe:74:62:20:14: d1:5b:c1:3c:eb:13:93:05:cd:6f:ed:7f:82:b7:c3:29:75:91: e5:0d:50:3a:9b:5a:2a:be:09:88:9a:90:cc:8c:06:ae:46:a0: 80:97:cf:f1:8d:c8:88:bb:62:42:fd:ff:a6:4f:83:10:5b:34: 40:8e:4f:bc:37:39:0f:b9:fe:1e:50:8a:d0:71:30:1f:bc:35: 87:cd:6c:00:d6:1c:2c:70:44:a8:17:3a:3c:31:3c:a9:5c:aa: 51:d3:75:a0:71:0f:fa:4f:b0:a4:46:1f:77:ae:7b:5e:e4:12: f8:1f:d0:ab:7f:73:e1:57:03:74:1f:f9:6c:6a:b3:94:e1:b3: 7e:86:2e:0e:ac:48:c7:62:71:d8:b3:b8:ef:f3:0a:7a:28:dc: fa:6c:a1:bc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEruJp1fWY88UMla/AYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk MjRkZWUwMzAtYzllYS00NzIyLWIyODktMWM5MmY1MTlmYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTETaKyZulZ4RU0kEOEKaNr96SOUnpWtXHMd oXRriaQlRwelkVXCWavU8qaclhLSMMDb00Hbgtta4Tmm4LYakEvubW0W+1tdIkBj vgqDRYPv+8QV7yIYE6fr3xnMIqDUAjRAevesUJNl8ayr0VoStzi1/no/NhO2AShd /GDuJ64O6LgOk8Rh7G7CQO0Y/yuf5aM/2eVuK6ODJjPTET4Y0obUTOxsihp44XNc 4k7lpaL2kG1323QopVFQCQHDuhPoJrxInFuyTCSrr6aC7CqocXKyqGlIh5pV8PSC g9mL/DIgAxnWP9VwWNsE3cEOHq9COWoNjeRxcyvjtXYbpDD1xwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDTYoSiImbOxXSg1Y9kNJnoEbmxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYjU1M2I5M2UtMWQ0Zi0z MmFjLThmZWYtNmJkZmUwNTAzMDA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHaPq2gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2WFNbaz9Gb8tUrr8FjW+k+zAYm6ydHvxk8Yedpr2XDdTqsrEUMu4y jO9x0jlnHK+0QR8w7aKctqR3fBRnySLSW3Wq8IBiZlTdRy2dwI2oj2wnlXsmCkz3 6PV93RzwtqUxpn8NguyN/nRiIBTRW8E86xOTBc1v7X+Ct8MpdZHlDVA6m1oqvgmI mpDMjAauRqCAl8/xjciIu2JC/f+mT4MQWzRAjk+8NzkPuf4eUIrQcTAfvDWHzWwA 1hwscESoFzo8MTypXKpR03WgcQ/6T7CkRh93rnte5BL4H9Crf3PhVwN0H/lsarOU 4bN+hi4OrEjHYnHYs7jv8wp6KNz6bKG8 -----END CERTIFICATE-----Generated at Sat Aug 23 09:03:24 2025 by rpki-client