$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa File: 339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa (raw, json) Hash identifier: ZJomBJYmcj0eqiKxgLAgAB1lP5FQNg1f9BSCJUb+yrI= Subject key identifier: 39:6C:A8:C0:38:20:F0:2C:09:90:22:89:53:46:C8:EB:00:F0:5B:75 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BAA97A566CF95A0D6F4DE3880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 9009 IP address blocks: 104.250.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a5:66:cf:95:a0:d6:f4:de:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=18699d7b-b907-4aba-aaa0-4baaaa408be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c3:19:a4:f7:a4:bd:47:7a:e3:25:d2:85:58: b1:8d:91:53:22:f6:30:87:73:ce:ea:b3:0e:e4:95: 64:87:1b:8a:96:9b:e2:07:93:08:10:ba:0b:36:14: 6d:5e:b9:31:24:0f:d9:d5:aa:1f:f1:e5:be:f9:78: 0c:ec:4b:eb:43:23:37:79:25:55:9b:9e:35:cd:05: a0:da:a7:93:89:b3:c7:37:35:e1:5a:19:57:34:7f: e0:e3:40:f5:71:51:bf:66:e4:f0:e6:70:d7:99:a3: e3:99:4d:7e:76:92:21:1c:2c:67:0e:3a:10:87:e3: 0b:75:24:e7:96:e3:b6:04:60:ae:0e:5d:06:8f:ef: 86:5c:87:89:82:75:33:46:10:a3:af:5a:22:51:de: 75:d2:1b:5c:89:23:7a:2c:33:78:88:2d:04:91:1f: b3:3c:98:a3:89:59:27:34:e8:6b:e0:d7:66:a9:19: c3:2e:34:8f:3c:17:54:eb:20:65:a2:55:f8:53:af: fd:00:29:fd:0a:22:4d:2d:5d:20:30:4f:96:40:3c: fc:ad:de:e5:b5:44:95:04:ba:3c:1b:52:89:5e:01: bb:ec:f8:5f:dd:ec:84:3b:60:b3:f4:d8:bd:e8:7a: db:6d:75:de:62:aa:14:b7:bb:f1:1e:41:44:e7:26: 67:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:A8:C0:38:20:F0:2C:09:90:22:89:53:46:C8:EB:00:F0:5B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/339aadfb-39fa-3c15-ba0d-54ea8fcd349f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5e:50:38:ea:eb:64:49:f6:5d:22:85:1d:61:88:4f:2b:0f: 18:77:2e:51:89:5e:af:16:ef:e3:b6:dd:72:f4:b1:73:03:1d: ae:0a:10:5a:36:ff:d3:f5:90:fc:32:61:e0:7d:ac:0b:90:f6: 76:a5:67:46:da:ff:64:1b:e4:33:1f:a3:c7:d3:fa:e6:05:b1: b9:2f:a4:b0:4f:9b:8b:fc:59:4b:23:71:68:6a:99:a1:af:03: 1d:bb:70:41:c9:f9:c7:53:f6:6b:8b:bc:b9:ff:4a:da:b5:58: 22:9f:2e:23:ac:90:c3:33:55:e4:ce:19:71:df:14:81:59:95: a7:a2:ab:8c:b3:94:8b:55:bb:99:63:39:ac:c1:68:c4:43:cb: 05:37:97:76:ca:9d:22:dc:36:97:6e:76:73:89:31:8e:37:60: 22:85:b7:70:ae:f8:9b:45:38:ff:53:06:5a:26:ad:b6:7f:67: 81:27:3f:8d:85:5e:49:96:98:d6:f0:7b:4d:ef:e9:dc:80:bf: 43:b3:47:38:7d:1a:a5:f2:6c:ec:f1:6f:2a:05:a9:69:be:ca: 00:96:7b:a3:dc:a8:ed:53:87:e0:f7:b7:f1:30:fc:e5:9e:f5: d9:e9:79:4b:2a:b5:32:92:d3:b7:2c:45:05:b6:04:13:84:27: 89:7d:96:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6Vmz5Wg1vTeOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MTg2OTlkN2ItYjkwNy00YWJhLWFhYTAtNGJhYWFhNDA4YmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMMZpPekvUd64yXShVixjZFTIvYwh3PO6rMO 5JVkhxuKlpviB5MIELoLNhRtXrkxJA/Z1aof8eW++XgM7EvrQyM3eSVVm541zQWg 2qeTibPHNzXhWhlXNH/g40D1cVG/ZuTw5nDXmaPjmU1+dpIhHCxnDjoQh+MLdSTn luO2BGCuDl0Gj++GXIeJgnUzRhCjr1oiUd510htciSN6LDN4iC0EkR+zPJijiVkn NOhr4NdmqRnDLjSPPBdU6yBlolX4U6/9ACn9CiJNLV0gME+WQDz8rd7ltUSVBLo8 G1KJXgG77Phf3eyEO2Cz9Ni96HrbbXXeYqoUt7vxHkFE5yZnlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlsqMA4IPAsCZAiiVNGyOsA8Ft1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMzM5YWFkZmItMzlmYS0z YzE1LWJhMGQtNTRlYThmY2QzNDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPquMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJeUDjq62RJ9l0ihR1hiE8rDxh3LlGJXq8W7+O23XL0sXMDHa4KEFo2 /9P1kPwyYeB9rAuQ9nalZ0ba/2Qb5DMfo8fT+uYFsbkvpLBPm4v8WUsjcWhqmaGv Ax27cEHJ+cdT9muLvLn/Stq1WCKfLiOskMMzVeTOGXHfFIFZlaeiq4yzlItVu5lj OazBaMRDywU3l3bKnSLcNpdudnOJMY43YCKFt3Cu+JtFOP9TBlomrbZ/Z4EnP42F XkmWmNbwe03v6dyAv0OzRzh9GqXybOzxbyoFqWm+ygCWe6PcqO1Th+D3t/Ew/OWe 9dnpeUsqtTKS07csRQW2BBOEJ4l9lj4= -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:20 2025 by rpki-client