$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa File: 1414f136-8e5f-33be-a48e-615e862a5b02.roa (raw, json) Hash identifier: J5ZYk7LYyK/f47CMMhP0dfSCpvumT+aOdwTtN/St27Q= Subject key identifier: 71:94:D9:BC:9B:2E:A7:68:98:B7:2A:BD:D0:9B:3B:DD:F1:28:8B:89 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B99D7A1C4CD29D28F19E37500 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 9009 IP address blocks: 104.250.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a1:c4:cd:29:d2:8f:19:e3:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=d406f117-20ef-4db0-9f85-c2eb8fb0a903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:34:2d:3b:a7:33:26:57:96:e7:5f:2c:5d:27: 66:19:0e:16:92:4f:87:16:6a:f4:72:8f:94:f1:48: e0:3c:2a:8c:5f:9b:de:b7:bb:e4:76:22:a3:e9:e4: 94:33:16:c0:8f:21:a3:01:99:17:ba:26:4e:09:41: 75:24:e9:ee:9b:52:d2:b9:a5:13:2f:23:94:ea:ba: 52:3d:fe:36:f7:fc:7d:bd:22:9c:5b:5a:c6:49:2e: 6d:fb:ff:25:5c:41:cb:60:e0:2d:fb:70:c5:44:1d: fe:2e:d2:5b:57:71:09:20:12:e2:2d:b9:33:36:da: 6d:cc:97:0e:0c:fb:f4:4b:51:1c:d5:0a:f9:ad:eb: 33:68:f9:7a:19:0b:a8:5e:44:3e:ea:cd:95:7e:27: f9:78:ac:45:ee:48:a6:7c:b1:50:63:2d:75:09:f0: 92:15:0e:90:b0:79:21:17:31:14:2e:24:fd:4d:19: f1:4a:54:ba:be:cd:9a:e5:53:d5:2a:aa:80:10:d8: da:92:0f:c8:f6:f8:36:1d:27:53:02:c5:b8:8a:a8: 19:b2:e8:ae:f5:60:51:f2:4a:54:5f:14:a9:ae:23: 44:25:44:e0:0c:99:0b:85:2a:94:c7:5e:04:2a:c2: b1:e1:33:ab:79:f8:b9:14:5a:1f:b1:88:1c:0b:bc: a6:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:94:D9:BC:9B:2E:A7:68:98:B7:2A:BD:D0:9B:3B:DD:F1:28:8B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1414f136-8e5f-33be-a48e-615e862a5b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6e:6f:8b:1e:44:b0:6d:43:85:11:e9:42:01:72:83:5c:cc: 8e:88:e8:17:1c:70:79:57:f1:2a:12:1e:41:7b:a5:97:dd:09: 0e:35:b2:13:35:5c:06:58:f2:7b:71:41:56:e3:44:28:64:ed: f6:89:b0:a0:5b:49:90:58:d0:44:2c:be:26:7e:12:ed:97:bc: 73:3a:1c:71:b6:a3:c3:98:a1:81:c4:ee:4d:bd:9d:b0:0a:15: 2a:02:e2:42:7a:c7:dd:43:d2:01:f6:24:71:80:7b:05:3f:e7: 4c:11:e1:69:78:a4:82:24:17:fd:8b:85:c3:76:3a:33:52:92: 8a:57:e7:bd:94:d4:b1:14:7c:82:2a:cb:bf:7e:51:24:21:e6: e8:8a:4d:44:9d:5e:98:5c:ed:91:11:92:ae:1b:8e:52:35:a6: 0f:2d:36:00:94:7b:0c:1b:08:2e:e5:f3:99:32:66:99:55:c6: 33:74:89:30:b5:49:19:83:37:69:2d:8b:3d:70:1d:96:b6:8f: 10:20:ff:7d:9e:bd:34:98:4f:68:45:cd:c1:1e:20:f5:51:9f: 72:22:d5:cb:33:8b:60:cb:6d:7b:fb:5f:e3:e8:27:e4:c9:86: ba:8d:4a:ff:93:0f:6a:3f:95:2a:a9:45:77:e7:0f:47:20:2c: fe:53:8d:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16HEzSnSjxnjdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk ZDQwNmYxMTctMjBlZi00ZGIwLTlmODUtYzJlYjhmYjBhOTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzQtO6czJleW518sXSdmGQ4Wkk+HFmr0co+U 8UjgPCqMX5vet7vkdiKj6eSUMxbAjyGjAZkXuiZOCUF1JOnum1LSuaUTLyOU6rpS Pf429/x9vSKcW1rGSS5t+/8lXEHLYOAt+3DFRB3+LtJbV3EJIBLiLbkzNtptzJcO DPv0S1Ec1Qr5reszaPl6GQuoXkQ+6s2Vfif5eKxF7kimfLFQYy11CfCSFQ6QsHkh FzEULiT9TRnxSlS6vs2a5VPVKqqAENjakg/I9vg2HSdTAsW4iqgZsuiu9WBR8kpU XxSpriNEJUTgDJkLhSqUx14EKsKx4TOrefi5FFofsYgcC7ymJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGU2bybLqdomLcqvdCbO93xKIuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMTQxNGYxMzYtOGU1Zi0z M2JlLWE0OGUtNjE1ZTg2MmE1YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPq+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhub4seRLBtQ4UR6UIBcoNczI6I6BcccHlX8SoSHkF7pZfdCQ41shM1 XAZY8ntxQVbjRChk7faJsKBbSZBY0EQsviZ+Eu2XvHM6HHG2o8OYoYHE7k29nbAK FSoC4kJ6x91D0gH2JHGAewU/50wR4Wl4pIIkF/2LhcN2OjNSkopX572U1LEUfIIq y79+USQh5uiKTUSdXphc7ZERkq4bjlI1pg8tNgCUewwbCC7l85kyZplVxjN0iTC1 SRmDN2ktiz1wHZa2jxAg/32evTSYT2hFzcEeIPVRn3Ii1cszi2DLbXv7X+PoJ+TJ hrqNSv+TD2o/lSqpRXfnD0cgLP5Tjb4= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:06 2025 by rpki-client