$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa File: 303511ae-00e0-3ae9-9384-2797153592ac.roa (raw, json) Hash identifier: F0VDqdxP5qLfkBmjZH3i5ibokI/nCCbVAXjzd2qUikQ= Subject key identifier: 1E:26:25:71:D6:39:7D:B0:8D:FA:77:1F:5C:32:FE:94:63:8D:92:2E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF5214ED08C245A6A84854B00 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 212238 IP address blocks: 104.243.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4e:d0:8c:24:5a:6a:84:85:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=73030a2e-589d-4ee8-9eee-e562e083185f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a7:3c:9e:81:d2:d4:63:04:47:7f:99:f8:7a: cc:66:d1:37:c8:04:c1:72:45:dc:43:ea:d6:e4:65: d8:36:8d:77:fb:27:05:2d:61:fc:ba:b7:73:5d:11: b4:84:25:53:34:ce:3a:9c:76:e6:29:22:c7:64:bf: 23:cd:2b:88:8d:3c:2b:d9:e9:9f:e9:82:94:34:5f: 1c:fd:b0:c3:25:46:f2:6b:74:ec:d2:67:ef:9c:dc: bd:51:0f:cb:4a:49:ac:f3:15:96:08:1c:c8:e6:b1: 93:44:e1:4f:69:7e:58:f9:81:23:01:36:8e:e5:de: 91:8e:25:32:bf:98:87:a1:08:62:f1:fb:fc:a4:3c: fd:ca:65:b8:ee:61:29:8a:2e:8f:c0:33:e2:b6:53: 2e:1f:a5:fa:6c:f4:d0:bf:7c:79:05:0a:21:50:da: 99:a6:98:52:f0:7f:eb:7e:5a:67:be:a2:bf:54:a5: 0c:9d:75:3f:32:48:ca:2c:31:d1:e9:fc:c6:14:9a: d0:71:0e:c7:0c:ce:80:7e:87:ea:11:41:b8:93:f6: 7b:af:2a:cf:24:e9:10:9b:67:fc:7d:f2:70:93:c9: 28:e2:7e:79:7e:d5:49:37:69:75:ca:63:cd:82:7f: ab:32:9f:bb:60:46:4c:70:a8:2c:bb:28:7c:65:ed: 36:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:26:25:71:D6:39:7D:B0:8D:FA:77:1F:5C:32:FE:94:63:8D:92:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/303511ae-00e0-3ae9-9384-2797153592ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:95:87:87:ce:9e:fc:1c:02:49:71:93:13:62:af:f6:1a:26: 56:bd:a0:4f:d9:26:c8:16:12:39:3e:0a:e5:98:4c:fe:32:77: 3d:73:60:a9:3c:9e:b0:f8:f7:a9:dc:b5:78:c3:a4:70:01:19: 6a:27:87:b0:d2:4c:8d:6d:9c:d3:9d:7b:57:0e:af:b9:b2:04: 65:ae:8c:46:d3:14:0b:56:6a:b0:37:3c:3f:10:0b:0a:cb:11: cb:14:28:ab:22:2b:48:2c:da:b5:09:5a:bb:66:ba:6b:94:61: 38:60:f8:7a:e8:c4:05:7b:93:8d:d9:8a:82:84:63:94:2e:a5: 45:6b:06:1a:cc:26:b6:f4:fe:57:4e:1e:d1:2f:5f:13:f4:63: f2:3d:ca:90:84:cc:64:6b:4f:6a:2c:8b:a6:3b:1a:08:12:b8: 8f:ae:fd:b9:57:c7:54:54:c7:d3:ad:36:cb:0a:a6:3d:fa:3c: bf:2a:2d:f4:18:75:17:21:e3:c7:fe:84:10:64:24:ab:a4:ad: 4e:28:bf:e2:b3:33:0b:68:12:a5:60:4e:c4:83:b9:b2:0f:a4: 0a:ba:42:9b:a4:cb:19:37:80:87:da:c1:f5:73:8d:fe:89:3b: 8e:c4:50:c8:f5:91:c4:8d:85:08:10:a7:e7:81:c4:07:d6:5d: 48:58:02:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU7QjCRaaoSFSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NzMwMzBhMmUtNTg5ZC00ZWU4LTllZWUtZTU2MmUwODMxODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqc8noHS1GMER3+Z+HrMZtE3yATBckXcQ+rW 5GXYNo13+ycFLWH8urdzXRG0hCVTNM46nHbmKSLHZL8jzSuIjTwr2emf6YKUNF8c /bDDJUbya3Ts0mfvnNy9UQ/LSkms8xWWCBzI5rGTROFPaX5Y+YEjATaO5d6RjiUy v5iHoQhi8fv8pDz9ymW47mEpii6PwDPitlMuH6X6bPTQv3x5BQohUNqZpphS8H/r flpnvqK/VKUMnXU/MkjKLDHR6fzGFJrQcQ7HDM6AfofqEUG4k/Z7ryrPJOkQm2f8 ffJwk8ko4n55ftVJN2l1ymPNgn+rMp+7YEZMcKgsuyh8Ze02KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4mJXHWOX2wjfp3H1wy/pRjjZIuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzAzNTExYWUtMDBlMC0z YWU5LTkzODQtMjc5NzE1MzU5MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiVh4fOnvwcAklxkxNir/YaJla9oE/ZJsgWEjk+CuWYTP4ydz1zYKk8 nrD496nctXjDpHABGWonh7DSTI1tnNOde1cOr7myBGWujEbTFAtWarA3PD8QCwrL EcsUKKsiK0gs2rUJWrtmumuUYThg+HroxAV7k43ZioKEY5QupUVrBhrMJrb0/ldO HtEvXxP0Y/I9ypCEzGRrT2osi6Y7GggSuI+u/blXx1RUx9OtNssKpj36PL8qLfQY dRch48f+hBBkJKukrU4ov+KzMwtoEqVgTsSDubIPpAq6Qpukyxk3gIfawfVzjf6J O47EUMj1kcSNhQgQp+eBxAfWXUhYAhk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:01:07 2025 by rpki-client