$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9138145-8119-3c92-b5aa-1a126c8d347f.roa File: f9138145-8119-3c92-b5aa-1a126c8d347f.roa (raw, json) Hash identifier: P0iFGZt7nGvFik2XcwjnqazwZ1MttdDMRCjD9kf2Ntc= Subject key identifier: 45:44:B2:9A:B1:CD:BF:42:0F:A7:11:9A:97:32:D9:97:4D:3E:9C:91 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B1C36C0DF76714CD535229780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9138145-8119-3c92-b5aa-1a126c8d347f.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 104.243.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c0:df:76:71:4c:d5:35:22:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=2d47bd4f-2a9f-4a9e-9391-53d66aa04563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:47:83:b3:8b:b8:7b:7c:73:a4:bf:9a:94:b8: 9b:23:4e:65:ce:f3:fd:f3:1d:ba:88:cf:3a:a6:d6: 10:1d:0a:be:7d:d6:4a:f7:ff:c9:d4:25:09:c8:0e: d0:15:d4:1a:95:5c:8a:92:53:18:a3:90:7f:ae:13: 01:d4:98:2c:7b:be:3d:62:09:57:9e:00:e3:ab:e9: 25:43:4c:05:21:42:d7:1c:fc:36:85:e3:75:68:83: 6b:61:5b:5d:1f:e1:3b:99:db:d7:36:18:8b:9d:c5: 5c:2c:bf:49:15:fc:b8:8f:1c:1d:21:ec:7d:eb:f9: c1:2d:de:04:6c:60:f9:e1:3a:1d:1f:f7:c9:02:d8: 4c:c0:54:16:67:26:ff:4c:3a:0d:80:bd:3b:64:75: c5:30:21:fa:a9:8d:6f:a1:0c:08:98:18:18:01:8e: 34:10:d0:6a:f6:59:ee:de:ef:fb:b3:b9:ee:16:58: ff:1c:d6:fa:fa:27:92:6d:24:d8:37:c5:be:27:af: 12:1a:61:2c:13:b5:d8:b0:7e:82:41:61:6f:d0:ef: a0:ed:df:99:72:f2:86:ff:c4:35:e3:3d:1a:92:ec: fe:3d:b8:13:4a:17:cf:89:99:d4:86:54:cd:9f:60: 62:9f:8d:c9:96:34:59:f9:86:b1:7c:54:f0:c4:fa: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:44:B2:9A:B1:CD:BF:42:0F:A7:11:9A:97:32:D9:97:4D:3E:9C:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f9138145-8119-3c92-b5aa-1a126c8d347f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:41:17:56:81:9b:e2:c3:b0:77:03:7d:22:2d:d6:17:da:0a: c1:1c:3d:c3:af:e1:3a:33:af:11:bd:ec:b5:6f:f6:ba:ad:e1: 5a:cb:ba:c0:b3:05:f8:92:19:e8:55:4b:80:b1:c0:27:a7:ac: 72:ae:2e:30:c4:62:13:6d:b3:14:0b:e3:1d:fc:b1:b2:9c:bb: 92:af:9a:ab:9a:7a:ae:60:05:e6:86:61:0a:f7:cc:96:3e:9d: 3a:20:c2:31:4e:13:e0:ce:a6:ad:fe:b4:8e:cd:a8:50:1b:61: a0:4e:f5:8f:5d:97:4f:fd:11:7e:0f:ae:e9:ef:83:27:ee:67: ff:7a:b2:e0:d6:dd:28:a1:61:6b:1b:3b:35:0d:c8:ba:a8:0b: 57:db:f8:d9:8a:4a:3f:9e:bc:0d:12:83:61:83:1a:c6:30:34: 52:63:24:65:fd:dd:6a:4d:7e:91:17:d9:6d:f6:8c:d8:37:f4: 05:42:1d:b7:10:01:ef:6d:9a:af:3b:f1:f8:d7:18:68:6b:ae: 96:9e:a6:8e:e5:dd:22:6b:90:f5:41:21:3b:b3:16:46:2b:82: 6e:b6:02:44:cf:c5:db:4e:d7:c8:8c:ae:1b:10:6f:05:30:5b: d8:b2:50:07:da:e6:57:9c:07:53:29:b8:2c:d7:10:42:78:82: fd:c1:42:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsDfdnFM1TUil4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk MmQ0N2JkNGYtMmE5Zi00YTllLTkzOTEtNTNkNjZhYTA0NTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20eDs4u4e3xzpL+alLibI05lzvP98x26iM86 ptYQHQq+fdZK9//J1CUJyA7QFdQalVyKklMYo5B/rhMB1Jgse749YglXngDjq+kl Q0wFIULXHPw2heN1aINrYVtdH+E7mdvXNhiLncVcLL9JFfy4jxwdIex96/nBLd4E bGD54TodH/fJAthMwFQWZyb/TDoNgL07ZHXFMCH6qY1voQwImBgYAY40ENBq9lnu 3u/7s7nuFlj/HNb6+ieSbSTYN8W+J68SGmEsE7XYsH6CQWFv0O+g7d+ZcvKG/8Q1 4z0akuz+PbgTShfPiZnUhlTNn2Bin43JljRZ+YaxfFTwxPo/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVEspqxzb9CD6cRmpcy2ZdNPpyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjkxMzgxNDUtODExOS0z YzkyLWI1YWEtMWExMjZjOGQzNDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRBF1aBm+LDsHcDfSIt1hfaCsEcPcOv4TozrxG97LVv9rqt4VrLusCz BfiSGehVS4CxwCenrHKuLjDEYhNtsxQL4x38sbKcu5Kvmquaeq5gBeaGYQr3zJY+ nTogwjFOE+DOpq3+tI7NqFAbYaBO9Y9dl0/9EX4PrunvgyfuZ/96suDW3SihYWsb OzUNyLqoC1fb+NmKSj+evA0Sg2GDGsYwNFJjJGX93WpNfpEX2W32jNg39AVCHbcQ Ae9tmq878fjXGGhrrpaepo7l3SJrkPVBITuzFkYrgm62AkTPxdtO18iMrhsQbwUw W9iyUAfa5lecB1MpuCzXEEJ4gv3BQmY= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:01 2025 by rpki-client