$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa File: 1e5f12cb-e855-3565-b100-bec476c1f053.roa (raw, json) Hash identifier: CdTp65swK0umTEskDXHhCcITWoDEr0wYsVwr9DQ/RY4= Subject key identifier: 44:E3:60:2E:B6:64:20:6D:BC:2E:0F:0C:FF:CD:BE:72:97:DB:5D:4E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA667AB7A957CE75226775E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 3223 IP address blocks: 104.243.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ab:7a:95:7c:e7:52:26:77:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=f3355465-b09d-4012-91ac-ff4dc677f852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:69:90:f6:f6:c9:d8:7b:b2:06:48:a7:70: e4:b1:2a:53:bf:1e:72:f4:4a:06:f7:6d:dd:76:76: 57:7e:02:08:90:2c:2e:37:56:54:e9:ec:d1:69:49: bb:68:90:a8:88:e4:18:61:07:f0:41:db:74:ae:6b: a9:e0:62:f9:6b:49:98:6f:c8:e4:58:85:be:05:4d: cc:19:86:40:5a:b5:37:d4:34:91:c3:a0:50:cb:36: 12:ad:a3:ed:27:d5:13:2f:ef:29:32:15:b0:e8:84: fb:b3:59:75:c7:5d:f8:63:72:d4:25:d2:0c:f8:07: ea:31:4d:40:86:ac:71:41:47:89:18:8f:6b:21:5e: f5:4a:50:81:c7:62:bd:5b:4d:3f:35:5a:90:90:99: 86:58:4f:03:8f:87:27:f4:80:a3:d0:9c:3f:1c:3d: 79:16:9c:ae:51:dd:c6:4a:79:d4:e9:cd:ee:c1:63: 81:b1:af:d6:47:d9:d8:14:94:08:de:a2:59:a0:b0: 7e:ec:2e:5c:39:33:e9:2e:e5:1a:6f:f9:5e:2e:00: 60:a1:b6:67:d2:c3:67:8c:26:63:d7:9d:48:54:bd: 4a:87:78:3f:a6:10:f1:f9:30:6a:13:4d:72:e7:a6: f8:66:aa:e0:ac:bf:61:6a:06:99:90:94:ad:3b:b7: f5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E3:60:2E:B6:64:20:6D:BC:2E:0F:0C:FF:CD:BE:72:97:DB:5D:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1e5f12cb-e855-3565-b100-bec476c1f053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:d0:2a:fc:3b:2b:ca:0f:b6:82:84:85:de:b5:16:e5:c7:2c: 93:31:6e:3f:f8:68:3e:1b:25:14:e8:4a:f4:1d:3f:7e:19:cd: a7:e5:3b:f5:b3:c6:ff:b2:8e:d1:64:5a:96:1c:3a:e5:a0:47: ab:56:38:e8:9c:10:4a:db:e5:b3:93:ed:40:a3:db:de:37:44: 70:60:e3:34:0f:13:9a:6d:a1:24:f9:d5:5c:b0:e2:41:e3:22: ce:d2:40:ad:a1:fb:37:ab:6d:a6:45:b7:c4:df:f8:8e:6e:b3: 45:9b:98:ef:c1:d4:6d:5d:df:73:58:48:62:6a:79:8e:ad:92: 62:22:cd:7e:e2:d0:b8:6b:ec:52:02:f6:67:eb:df:50:6b:55: 92:3c:75:68:c6:62:0e:8d:b8:c9:4d:7d:b7:30:37:7e:fc:36: d6:47:a3:23:3a:8a:01:c0:75:b5:ac:6a:f5:30:c1:6d:f8:48: 5f:58:d5:5d:ce:aa:57:68:28:11:7d:dc:cb:89:42:64:49:bc: 7d:3c:06:11:29:23:d9:16:e9:4c:97:b5:75:15:d8:e3:3c:cd: 86:cb:d3:71:e9:d7:45:b0:42:0c:ad:32:d1:9c:b0:8b:e5:87: 2c:98:48:00:a2:d9:10:42:31:3d:68:a0:a9:e6:94:17:d2:c6: 23:92:42:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6t6lXznUiZ3XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk ZjMzNTU0NjUtYjA5ZC00MDEyLTkxYWMtZmY0ZGM2NzdmODUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKRpkPb2ydh7sgZIp3DksSpTvx5y9EoG923d dnZXfgIIkCwuN1ZU6ezRaUm7aJCoiOQYYQfwQdt0rmup4GL5a0mYb8jkWIW+BU3M GYZAWrU31DSRw6BQyzYSraPtJ9UTL+8pMhWw6IT7s1l1x134Y3LUJdIM+AfqMU1A hqxxQUeJGI9rIV71SlCBx2K9W00/NVqQkJmGWE8Dj4cn9ICj0Jw/HD15FpyuUd3G SnnU6c3uwWOBsa/WR9nYFJQI3qJZoLB+7C5cOTPpLuUab/leLgBgobZn0sNnjCZj 151IVL1Kh3g/phDx+TBqE01y56b4ZqrgrL9hagaZkJStO7f1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETjYC62ZCBtvC4PDP/NvnKX211OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWU1ZjEyY2ItZTg1NS0z NTY1LWIxMDAtYmVjNDc2YzFmMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnQKvw7K8oPtoKEhd61FuXHLJMxbj/4aD4bJRToSvQdP34ZzaflO/Wz xv+yjtFkWpYcOuWgR6tWOOicEErb5bOT7UCj2943RHBg4zQPE5ptoST51Vyw4kHj Is7SQK2h+zerbaZFt8Tf+I5us0WbmO/B1G1d33NYSGJqeY6tkmIizX7i0Lhr7FIC 9mfr31BrVZI8dWjGYg6NuMlNfbcwN378NtZHoyM6igHAdbWsavUwwW34SF9Y1V3O qldoKBF93MuJQmRJvH08BhEpI9kW6UyXtXUV2OM8zYbL03Hp10WwQgytMtGcsIvl hyyYSACi2RBCMT1ooKnmlBfSxiOSQr4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:49:34 2025 by rpki-client