$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json) Hash identifier: O446QlIVPXGsBPZK6YzL42cqFJF4SAO+xKqQm0ySalE= Subject key identifier: 05:4A:6D:0A:CA:72:4F:E7:0E:91:08:F4:B2:E6:5C:57:BD:26:A3:C6 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AF5214EBE9DB9C94ABB37ACD8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa Signing time: Sun 24 Aug 2025 01:00:33 +0000 ROA not before: Sun 24 Aug 2025 01:00:33 +0000 ROA not after: Sat 22 Nov 2025 02:00:33 +0000 asID: 212238 IP address blocks: 104.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f5:21:4e:be:9d:b9:c9:4a:bb:37:ac:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 24 01:00:33 2025 GMT Not After : Nov 22 02:00:33 2025 GMT Subject: CN=063f9c36-447c-414f-82ec-fbd54b551873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:37:ba:1d:a0:37:6b:7d:d6:50:0a:7c:7b:37: bf:fa:fa:b4:f9:13:be:54:1d:40:1a:cf:5f:f7:e6: 02:e0:30:54:7e:4a:c9:82:34:13:b5:fa:07:a7:35: 4c:23:bf:ec:a4:66:11:7c:60:8a:3c:bc:79:2a:34: 47:2c:d1:87:07:9d:f7:23:7c:f6:38:a6:34:3c:86: f2:1f:00:c7:49:6b:6d:de:79:85:71:59:d8:4b:8b: fd:a1:ce:6c:be:37:b6:ea:4b:cd:7f:ab:e9:cb:56: 7f:6c:32:69:bb:86:67:5e:23:86:da:a5:f9:b9:c4: 41:e2:cf:8e:bf:02:5a:61:71:1b:cb:9d:be:db:68: 6e:de:51:ca:42:10:a4:1f:f7:37:4c:07:3f:77:ab: 33:1b:94:82:6c:83:36:72:58:19:e1:60:2b:a7:41: fd:b7:5c:26:d4:fe:20:69:fa:04:a3:57:23:1f:98: 0c:e3:d1:df:17:81:f0:ef:d0:12:d5:78:e5:59:66: 55:b6:c9:f8:bf:68:c5:43:9b:3b:cf:57:a1:d7:70: 18:50:ba:67:c6:3a:0e:3f:19:2c:b5:4b:a0:e2:c9: 12:d5:ff:af:85:f8:60:ec:59:3c:29:3e:eb:82:ec: 71:24:e3:b3:99:c4:c9:1d:dd:c8:28:b4:ac:78:9f: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4A:6D:0A:CA:72:4F:E7:0E:91:08:F4:B2:E6:5C:57:BD:26:A3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:64:83:15:aa:92:b1:c1:16:90:f2:e1:6f:5c:7c:fd:8b:14: 5e:70:65:aa:9b:56:85:97:2e:8a:84:35:35:ec:99:f4:d5:54: b2:6a:d7:0a:40:33:28:3a:ac:8d:e5:ff:e3:2f:22:2f:69:03: b6:52:c7:0f:74:d0:f4:4f:4f:61:bc:40:63:a7:fb:e1:74:47: 97:ce:91:bb:ce:89:aa:64:a7:a4:f7:88:da:d6:35:cf:bd:f7: b3:bc:4f:23:8e:ab:2c:2a:64:23:fa:58:be:90:7a:1e:a1:38: be:a4:5c:6d:98:9e:5f:66:12:4e:02:4f:24:2b:df:9c:bd:57: 43:c2:29:75:14:d4:11:ed:44:bc:f0:59:85:1b:cb:70:56:89: bb:55:2a:14:c0:2c:f8:c2:85:e9:67:64:46:b6:fc:8a:1e:2a: cd:df:ac:ad:31:fb:10:52:ae:a5:97:63:b1:a8:f6:40:47:2d: 64:42:e8:30:48:2f:5c:3b:f9:3b:1f:3f:c4:40:1f:71:14:71: c4:1e:08:49:df:3c:07:74:e4:ab:fc:63:fd:cf:5a:7b:d1:cb: a5:8c:79:a1:59:04:7e:02:4f:0a:17:2e:1e:e6:2f:01:c1:50: 80:ea:82:7a:ad:27:24:45:cc:19:e0:d6:fd:75:17:1d:80:b5: cb:5a:d3:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr1IU6+nbnJSrs3rNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNDAxMDAzM1oXDTI1MTEyMjAyMDAzM1owLzEtMCsGA1UEAxMk MDYzZjljMzYtNDQ3Yy00MTRmLTgyZWMtZmJkNTRiNTUxODczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTe6HaA3a33WUAp8eze/+vq0+RO+VB1AGs9f 9+YC4DBUfkrJgjQTtfoHpzVMI7/spGYRfGCKPLx5KjRHLNGHB533I3z2OKY0PIby HwDHSWtt3nmFcVnYS4v9oc5svje26kvNf6vpy1Z/bDJpu4ZnXiOG2qX5ucRB4s+O vwJaYXEby52+22hu3lHKQhCkH/c3TAc/d6szG5SCbIM2clgZ4WArp0H9t1wm1P4g afoEo1cjH5gM49HfF4Hw79AS1XjlWWZVtsn4v2jFQ5s7z1eh13AYULpnxjoOPxks tUug4skS1f+vhfhg7Fk8KT7rguxxJOOzmcTJHd3IKLSseJ+WEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVKbQrKck/nDpEI9LLmXFe9JqPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY2NjFmZGYtNzQ3YS0z ZTQ3LTg5YzMtYjFjYmMwNjRjN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlkgxWqkrHBFpDy4W9cfP2LFF5wZaqbVoWXLoqENTXsmfTVVLJq1wpA Myg6rI3l/+MvIi9pA7ZSxw900PRPT2G8QGOn++F0R5fOkbvOiapkp6T3iNrWNc+9 97O8TyOOqywqZCP6WL6Qeh6hOL6kXG2Ynl9mEk4CTyQr35y9V0PCKXUU1BHtRLzw WYUby3BWibtVKhTALPjChelnZEa2/IoeKs3frK0x+xBSrqWXY7Go9kBHLWRC6DBI L1w7+TsfP8RAH3EUccQeCEnfPAd05Kv8Y/3PWnvRy6WMeaFZBH4CTwoXLh7mLwHB UIDqgnqtJyRFzBng1v11Fx2Atcta01g= -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:57 2025 by rpki-client