$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f57b8645-d22e-311b-b8a5-743320d98652.roa File: f57b8645-d22e-311b-b8a5-743320d98652.roa (raw, json) Hash identifier: 9XXBAA6AZnNTxgrqvz2wTB0hjPX8AOMe64Uq8y2e9hQ= Subject key identifier: 64:0D:B9:DC:53:70:73:19:64:A6:66:3C:56:89:D9:8D:28:83:9B:E2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AEE269D51CD727D6F45E20740 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f57b8645-d22e-311b-b8a5-743320d98652.roa Signing time: Thu 21 Aug 2025 13:00:41 +0000 ROA not before: Thu 21 Aug 2025 13:00:41 +0000 ROA not after: Wed 19 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 104.250.182.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:26:9d:51:cd:72:7d:6f:45:e2:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 21 13:00:41 2025 GMT Not After : Nov 19 14:00:41 2025 GMT Subject: CN=f0d59d60-be3a-43bd-95c2-4c80c57f7c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:34:f7:eb:53:d6:0a:30:8a:b1:f1:7a:bd: 8f:52:12:b9:0a:50:14:88:a1:90:4d:72:7e:cf:cc: 91:4a:d2:33:ec:04:ec:39:f4:05:91:6d:7e:22:10: 49:79:45:c1:95:b2:2c:65:c5:30:65:69:c6:5a:cd: fd:de:62:bc:ef:2a:79:f7:2f:a5:c9:8d:24:a2:8f: be:ce:94:cb:47:2c:66:c6:23:bf:06:20:16:d9:71: a3:91:84:65:dd:32:6a:c1:54:ce:e9:a9:bc:a2:c7: 10:b6:5a:a1:c0:01:b3:d0:54:f2:ff:a7:e7:d1:99: 99:9b:73:02:3c:05:6c:e8:03:17:d2:db:8a:10:2f: 4c:3a:4f:5a:b8:ca:52:fa:60:c4:0e:9c:1e:ce:0d: 66:c6:72:91:be:73:32:8a:18:d5:1d:e9:50:69:ee: da:a8:11:f4:d0:9b:fb:86:ca:8c:04:4e:ef:03:51: c2:fd:50:76:ff:09:ee:0e:7d:c9:24:26:b5:9d:ac: 7b:4f:cb:46:d1:2b:bc:1a:ab:4d:18:f2:10:cc:41: 62:92:59:66:7b:7e:f6:03:70:56:3a:e7:1b:76:c8: 04:a8:99:06:45:e1:ca:38:22:81:d9:60:93:1b:e5: d2:55:8f:21:90:74:06:8c:af:71:cd:b8:8f:d3:a3: 5e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0D:B9:DC:53:70:73:19:64:A6:66:3C:56:89:D9:8D:28:83:9B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f57b8645-d22e-311b-b8a5-743320d98652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.182.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:d0:b8:14:7d:39:07:bc:ba:9f:a4:99:1a:30:94:01:96:17: d7:2c:f0:69:d9:e3:83:ad:a6:fc:61:58:18:10:5b:e0:ef:b5: 9c:90:f5:f3:f2:d0:fb:00:ee:a7:7d:fc:72:a9:8b:a4:c8:33: b1:90:1f:74:1d:7c:5c:27:ed:ff:ad:73:03:3b:f9:47:52:13: 4e:1e:a5:78:7c:14:59:b7:cf:b4:61:f6:10:0b:53:a4:18:6d: 00:c6:0c:93:64:67:8a:c2:7b:b9:32:7e:7a:2d:1a:49:ce:75: 23:ee:8d:60:ae:9b:da:81:39:90:bb:37:dc:49:5a:4c:f8:c0: d1:f6:c3:81:bd:e8:7f:83:2d:c5:3f:c6:71:6e:91:f4:18:f5: 8a:66:d4:1d:c2:53:a1:f8:ee:66:d8:e5:b3:ec:cd:e4:bf:87: ce:39:39:53:e8:74:df:ab:b4:c0:f7:b1:16:1a:a2:02:15:a3: 0e:e5:28:9b:86:4b:fd:3e:24:a1:77:35:11:fb:fd:48:78:28: 66:c8:37:3c:ce:ad:04:cc:ca:48:95:de:04:9a:58:c8:d0:6a: e2:2d:1d:7b:61:37:3f:6d:33:5b:f7:9a:6d:65:6f:d0:18:75: 1b:a0:23:92:3a:d7:42:2e:a0:5d:57:77:d1:47:98:b8:b2:b4: 91:5d:94:5d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEruJp1RzXJ9b0XiB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMTEzMDA0MVoXDTI1MTExOTE0MDA0MVowLzEtMCsGA1UEAxMk ZjBkNTlkNjAtYmUzYS00M2JkLTk1YzItNGM4MGM1N2Y3YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ809+tT1gowirHxer2PUhK5ClAUiKGQTXJ+ z8yRStIz7ATsOfQFkW1+IhBJeUXBlbIsZcUwZWnGWs393mK87yp59y+lyY0koo++ zpTLRyxmxiO/BiAW2XGjkYRl3TJqwVTO6am8oscQtlqhwAGz0FTy/6fn0ZmZm3MC PAVs6AMX0tuKEC9MOk9auMpS+mDEDpwezg1mxnKRvnMyihjVHelQae7aqBH00Jv7 hsqMBE7vA1HC/VB2/wnuDn3JJCa1nax7T8tG0Su8GqtNGPIQzEFikllme372A3BW OucbdsgEqJkGReHKOCKB2WCTG+XSVY8hkHQGjK9xzbiP06NeJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGQNudxTcHMZZKZmPFaJ2Y0og5viMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjU3Yjg2NDUtZDIyZS0z MTFiLWI4YTUtNzQzMzIwZDk4NjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHaPq2ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAL0LgUfTkHvLqfpJkaMJQBlhfXLPBp2eODrab8YVgYEFvg77WckPXz 8tD7AO6nffxyqYukyDOxkB90HXxcJ+3/rXMDO/lHUhNOHqV4fBRZt8+0YfYQC1Ok GG0AxgyTZGeKwnu5Mn56LRpJznUj7o1grpvagTmQuzfcSVpM+MDR9sOBveh/gy3F P8ZxbpH0GPWKZtQdwlOh+O5m2OWz7M3kv4fOOTlT6HTfq7TA97EWGqICFaMO5Sib hkv9PiShdzUR+/1IeChmyDc8zq0EzMpIld4EmljI0GriLR17YTc/bTNb95ptZW/Q GHUboCOSOtdCLqBdV3fRR5i4srSRXZRd -----END CERTIFICATE-----Generated at Sat Aug 23 06:52:47 2025 by rpki-client