$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa File: 73ca0919-a04c-37ff-94f3-29d436366d7d.roa (raw, json) Hash identifier: euqMCZ/5S7SBuTw/6GhYkdEQGDGoOJW3v0MkgP2ZtAc= Subject key identifier: 28:11:29:85:B9:E6:72:8F:18:7A:29:DD:F1:22:38:97:5F:C3:2E:67 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF5214EAD45C5DB3FED28C9D0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 212238 IP address blocks: 104.243.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4e:ad:45:c5:db:3f:ed:28:c9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=40916e1c-8d51-4fd7-a56e-b2de535d7270 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:d7:c5:ae:c6:87:09:a2:38:a4:2d:4b:43: 56:8c:86:f9:af:9d:b4:e3:33:3e:f5:ff:3b:b2:57: ed:94:ee:dd:1d:95:d7:36:6e:13:b5:dc:64:e8:ca: 03:c3:db:b2:a7:9e:2e:db:bd:b0:2b:7a:a7:8e:40: cd:dd:b3:34:02:cd:be:67:6f:26:68:88:bd:70:08: 30:6f:30:9c:ed:f8:c8:4b:9f:dd:fe:d3:a5:fe:af: bc:86:17:4a:76:02:f3:98:a1:99:48:04:4b:e0:f7: c2:dc:7d:55:5e:00:c3:b2:03:fd:b3:75:4a:1e:a0: 06:91:ea:ff:4c:67:42:b8:c8:38:de:b0:09:24:b0: 52:0f:36:d8:f4:54:70:e5:12:95:db:ce:93:64:9b: 17:fa:c1:0f:7f:b5:7b:b9:80:28:20:c8:87:b9:45: b2:20:1e:17:24:04:35:41:da:ec:3f:8e:7a:c9:82: 8a:0b:1b:ac:00:af:7b:cf:9a:c0:00:a5:5f:1c:b3: 52:9e:d1:a1:e8:fb:27:88:70:58:71:14:4f:14:66: 95:14:fb:73:f5:38:db:08:ea:e7:5f:f6:a8:79:c0: 99:03:23:b6:91:90:3f:c6:b1:85:33:b8:cc:07:44: 5b:13:d9:11:5a:61:3f:e7:cf:8f:d6:11:f6:f7:4d: 72:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:11:29:85:B9:E6:72:8F:18:7A:29:DD:F1:22:38:97:5F:C3:2E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/73ca0919-a04c-37ff-94f3-29d436366d7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e6:3e:be:35:75:cf:a6:89:14:1f:25:20:b8:6a:07:a8:13: ad:a7:5b:6a:cb:60:d7:c2:64:fb:8b:03:45:1c:20:f0:32:32: 22:c1:9b:22:a0:af:3d:11:22:91:d1:22:60:c5:b8:9f:d8:f3: 65:37:07:f7:c9:67:e9:79:53:b2:b7:53:c5:f6:61:1e:be:c2: e6:c9:08:62:31:bc:69:2c:ed:f4:bd:9d:04:9f:f4:36:e3:1a: 45:a9:49:27:bc:4b:2b:a4:ca:d9:7e:9f:97:55:59:7c:b1:7f: 53:24:6a:14:5e:29:d8:dd:3a:cc:68:05:ee:8d:01:f7:8b:98: c0:2f:e6:f0:51:48:a6:3d:47:ed:a1:92:4a:58:99:5b:ad:a1: 17:09:fd:0e:94:c4:59:74:8b:0e:bd:b8:6d:cd:7f:64:5f:61: e4:d8:21:86:c5:8b:46:1d:68:9c:01:9e:ca:4a:70:7e:49:3c: 0b:5e:f4:1d:66:55:58:58:c8:bc:a0:8f:5b:0f:8e:ae:4f:b1: 94:9a:7d:0d:31:a1:a7:16:ef:6c:d6:12:fb:37:e1:6f:0b:7f: 88:9d:cf:d1:fc:b6:a2:c1:36:c8:f5:bb:8e:b6:c0:40:39:c9: 7d:97:a8:72:ca:ad:f4:0b:f6:d9:23:76:a2:26:bf:e1:0e:23: 72:d7:d1:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU6tRcXbP+0oydAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk NDA5MTZlMWMtOGQ1MS00ZmQ3LWE1NmUtYjJkZTUzNWQ3MjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDjXxa7GhwmiOKQtS0NWjIb5r5204zM+9f87 slftlO7dHZXXNm4Ttdxk6MoDw9uyp54u272wK3qnjkDN3bM0As2+Z28maIi9cAgw bzCc7fjIS5/d/tOl/q+8hhdKdgLzmKGZSARL4PfC3H1VXgDDsgP9s3VKHqAGker/ TGdCuMg43rAJJLBSDzbY9FRw5RKV286TZJsX+sEPf7V7uYAoIMiHuUWyIB4XJAQ1 QdrsP456yYKKCxusAK97z5rAAKVfHLNSntGh6PsniHBYcRRPFGaVFPtz9TjbCOrn X/aoecCZAyO2kZA/xrGFM7jMB0RbE9kRWmE/58+P1hH2901yKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgRKYW55nKPGHop3fEiOJdfwy5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzNjYTA5MTktYTA0Yy0z N2ZmLTk0ZjMtMjlkNDM2MzY2ZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXmPr41dc+miRQfJSC4ageoE62nW2rLYNfCZPuLA0UcIPAyMiLBmyKg rz0RIpHRImDFuJ/Y82U3B/fJZ+l5U7K3U8X2YR6+wubJCGIxvGks7fS9nQSf9Dbj GkWpSSe8Syukytl+n5dVWXyxf1MkahReKdjdOsxoBe6NAfeLmMAv5vBRSKY9R+2h kkpYmVutoRcJ/Q6UxFl0iw69uG3Nf2RfYeTYIYbFi0YdaJwBnspKcH5JPAte9B1m VVhYyLygj1sPjq5PsZSafQ0xoacW72zWEvs34W8Lf4idz9H8tqLBNsj1u462wEA5 yX2XqHLKrfQL9tkjdqImv+EOI3LX0VU= -----END CERTIFICATE-----Generated at Wed Nov 5 07:59:15 2025 by rpki-client