$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa File: 4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa (raw, json) Hash identifier: b0xce4ei4zGO1Whh7xmqp47JBVYcGyRUrQyueyaDw2Y= Subject key identifier: 5A:B0:97:76:99:20:15:A4:49:58:6E:C4:80:AC:BB:1A:60:A2:24:70 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B99D7A1B2E48BA3FFCB0BBD10 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 9009 IP address blocks: 104.250.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:a1:b2:e4:8b:a3:ff:cb:0b:bd:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=6a9b7292-a38e-4618-8a7f-3852ed9c62bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:dd:2b:05:c9:30:cc:6f:a9:4d:43:c8:44:81: 52:7b:b2:9c:d1:db:a3:01:97:f6:02:3d:43:3e:97: ba:de:46:4b:46:89:c2:74:bb:09:0e:2a:d8:34:69: ba:a2:5c:08:65:5a:61:f6:93:9d:1e:b7:6c:58:80: cf:b5:b2:45:4f:01:2f:d1:10:a2:e6:a6:2f:da:64: 2f:cf:8d:3a:e7:d1:a7:88:49:11:c1:7b:f1:bf:61: 01:6d:60:f3:c1:16:b5:b4:a6:74:36:19:4c:0e:fe: 74:1f:b8:a1:a5:b4:e5:6c:6f:50:a4:52:94:a8:54: 37:88:20:43:aa:ed:f9:f9:23:20:0e:b7:70:1d:b6: f4:17:f0:29:46:f6:13:22:62:2a:3b:fc:ad:8c:c1: 05:e7:0c:da:9c:ca:ee:0f:14:c8:08:6b:d1:5c:54: 08:2f:86:57:44:dc:8c:fa:b5:78:01:6c:ad:85:59: b4:78:ec:52:4e:e3:e1:4e:f3:3c:d0:1f:f0:29:80: af:53:14:ad:2a:c7:b0:29:7d:cb:24:9f:b1:4d:c4: 6e:20:d2:67:d2:3c:02:7e:72:f1:43:41:d8:e6:91: 7b:6c:11:11:17:09:70:1b:67:bd:fa:e0:df:16:89: 88:98:49:03:70:b6:18:01:5b:f6:45:79:f9:83:45: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B0:97:76:99:20:15:A4:49:58:6E:C4:80:AC:BB:1A:60:A2:24:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4deefd0b-206a-3254-ac04-afc52b9cb4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8f:d7:d3:f8:19:58:a0:57:53:c5:d0:a0:44:58:c3:97:55: 77:10:a9:68:3b:d9:cf:0c:37:80:3e:29:9b:ef:71:46:7a:35: 41:dc:d4:0c:0e:c0:a5:ed:c2:0d:dd:a3:34:4c:07:1e:67:6c: 1a:57:5c:2a:53:29:ad:60:b1:5a:3d:74:56:c7:fc:8a:b6:51: 1b:81:82:d1:53:e1:a1:0d:81:c0:d2:a4:8c:14:85:a1:e1:46: 07:5f:6f:54:eb:2d:be:f4:88:74:63:b9:91:02:2f:34:3c:8c: c5:c2:a6:71:5f:66:98:7d:86:f2:b9:27:d9:f0:b1:ec:5f:09: d4:54:23:bc:78:98:34:57:d0:a0:ee:e4:85:0e:04:5b:f9:86: c4:a4:ff:67:3f:67:9b:2c:ab:10:ee:71:1e:0b:18:b2:bc:d9: 44:a6:b6:73:1e:d4:26:2c:e5:ff:bd:dd:93:ee:92:69:a8:c0: 14:ae:f1:58:1c:a3:66:d6:ce:59:d0:3d:64:84:14:d0:e9:be: b9:5c:73:90:6e:12:66:bf:fe:84:ac:82:28:22:ac:c3:d6:ec: 6c:05:d7:59:7d:9d:8a:e5:cd:fc:ae:03:19:78:a5:9d:2a:6c: 1a:f7:3d:c7:c9:39:36:c9:2b:6d:fe:1c:4c:bb:a8:12:af:27: 83:e3:5f:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ16Gy5Iuj/8sLvRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NmE5YjcyOTItYTM4ZS00NjE4LThhN2YtMzg1MmVkOWM2MmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd0rBckwzG+pTUPIRIFSe7Kc0dujAZf2Aj1D Ppe63kZLRonCdLsJDirYNGm6olwIZVph9pOdHrdsWIDPtbJFTwEv0RCi5qYv2mQv z40659GniEkRwXvxv2EBbWDzwRa1tKZ0NhlMDv50H7ihpbTlbG9QpFKUqFQ3iCBD qu35+SMgDrdwHbb0F/ApRvYTImIqO/ytjMEF5wzanMruDxTICGvRXFQIL4ZXRNyM +rV4AWythVm0eOxSTuPhTvM80B/wKYCvUxStKsewKX3LJJ+xTcRuINJn0jwCfnLx Q0HY5pF7bBERFwlwG2e9+uDfFomImEkDcLYYAVv2RXn5g0XqdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqwl3aZIBWkSVhuxICsuxpgoiRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGRlZWZkMGItMjA2YS0z MjU0LWFjMDQtYWZjNTJiOWNiNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAKP19P4GVigV1PF0KBEWMOXVXcQqWg72c8MN4A+KZvvcUZ6NUHc1AwO wKXtwg3dozRMBx5nbBpXXCpTKa1gsVo9dFbH/Iq2URuBgtFT4aENgcDSpIwUhaHh Rgdfb1TrLb70iHRjuZECLzQ8jMXCpnFfZph9hvK5J9nwsexfCdRUI7x4mDRX0KDu 5IUOBFv5hsSk/2c/Z5ssqxDucR4LGLK82USmtnMe1CYs5f+93ZPukmmowBSu8Vgc o2bWzlnQPWSEFNDpvrlcc5BuEma//oSsgigirMPW7GwF11l9nYrlzfyuAxl4pZ0q bBr3PcfJOTbJK23+HEy7qBKvJ4PjX34= -----END CERTIFICATE-----Generated at Wed Nov 5 07:49:41 2025 by rpki-client