$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c7bf81ec-1b43-3a96-9993-a45ec590c30b.roa File: c7bf81ec-1b43-3a96-9993-a45ec590c30b.roa (raw, json) Hash identifier: ryWWXP0IzX1hMOY9O9hVgjxh/IVCLHsrW+vszEkwz9M= Subject key identifier: 44:25:03:7D:EF:C0:8E:70:7F:1D:91:59:88:AA:46:40:05:72:E7:1E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BB449A1482E96D87469B9B080 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c7bf81ec-1b43-3a96-9993-a45ec590c30b.roa Signing time: Fri 31 Oct 2025 12:21:33 +0000 ROA not before: Fri 31 Oct 2025 12:21:33 +0000 ROA not after: Thu 29 Jan 2026 13:21:33 +0000 asID: 55154 IP address blocks: 104.243.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:49:a1:48:2e:96:d8:74:69:b9:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 31 12:21:33 2025 GMT Not After : Jan 29 13:21:33 2026 GMT Subject: CN=7fc5d709-537e-4ec7-b5fe-398807b0e449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:d3:05:39:b2:be:ef:55:89:c3:bf:6a:9f: 4b:25:be:dd:6b:75:cf:be:01:8c:c8:84:f4:d7:8b: 91:fb:3e:7f:cf:56:31:d0:e6:71:9c:2f:95:cd:ad: 03:f5:4b:95:b3:3d:35:b6:bd:e9:74:31:8e:4c:6d: 22:2a:a9:8b:26:57:ac:d5:d0:66:72:39:7d:48:7a: a9:a5:93:42:e4:1f:7b:9a:95:c4:73:cc:0b:a3:be: 4a:1d:47:c4:2b:da:2b:4a:a1:8d:bf:b9:37:78:22: a3:97:b5:5a:7a:4f:16:02:7e:23:b9:e0:31:61:cf: 1c:4d:1a:60:70:31:f9:21:ba:83:ac:fb:53:61:7a: 6b:79:66:1f:a3:c7:fc:ec:04:25:ab:45:cb:a3:7a: 8f:fb:56:88:0e:71:57:44:91:9c:51:d3:d1:72:16: ec:08:6f:97:70:f5:dc:62:3d:d5:a7:2e:34:ae:39: e5:50:04:0e:3f:90:5f:7c:35:22:3c:5b:b0:cb:3c: 4d:39:c5:f1:59:fa:d7:19:bd:69:0f:59:0b:59:26: bf:ff:e1:1f:c1:57:34:0f:e0:ff:38:79:63:f2:2d: b7:ce:7a:e5:dc:db:26:bb:85:3e:b4:b5:52:d6:44: 6a:3d:95:91:75:5f:70:26:88:dd:2d:31:62:bf:c5: 43:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:25:03:7D:EF:C0:8E:70:7F:1D:91:59:88:AA:46:40:05:72:E7:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c7bf81ec-1b43-3a96-9993-a45ec590c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:05:ac:eb:f1:29:d1:9d:76:74:5b:99:0c:27:69:a1:62:56: 9e:32:f9:7a:35:62:1e:d2:44:1b:8a:08:2e:74:d0:31:d7:49: 47:8e:a7:c2:d0:aa:95:7f:ca:6d:ed:1b:ab:0b:9f:7d:bd:e0: d2:af:86:42:b7:45:33:69:9e:71:33:19:41:b8:8e:35:12:59: 2d:50:e2:d2:2f:80:df:95:a7:da:1a:87:8f:79:16:0d:55:c9: 2a:d3:f2:78:22:47:d5:8a:5f:0c:a1:48:8d:a8:b2:dd:68:f6: d9:49:b0:60:a6:83:ac:e0:c9:a7:37:a8:11:76:7d:71:b3:8e: 92:d5:3b:7d:db:06:a9:da:42:ea:90:b7:6a:d0:7a:b7:34:f5: 8a:37:4b:63:3c:46:be:8e:39:55:20:04:41:76:00:ef:34:2e: c9:40:a8:60:34:ba:22:55:b2:23:4a:76:0f:e1:6e:43:d2:27: 33:5a:1f:c1:bd:a5:15:87:a4:58:70:41:87:22:01:c3:7e:da: 95:e6:ad:8e:0d:ad:f0:68:ab:3e:55:1f:a0:04:a3:2a:5c:c9: 41:45:56:65:d1:24:4d:0c:58:da:19:61:b4:32:ef:17:b0:3f: e8:b8:2e:b8:4f:06:fc:57:ff:ef:fb:47:24:10:4f:75:2d:1c: 36:2f:62:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0SaFILpbYdGm5sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAzMTEyMjEzM1oXDTI2MDEyOTEzMjEzM1owLzEtMCsGA1UEAxMk N2ZjNWQ3MDktNTM3ZS00ZWM3LWI1ZmUtMzk4ODA3YjBlNDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh07TBTmyvu9VicO/ap9LJb7da3XPvgGMyIT0 14uR+z5/z1Yx0OZxnC+Vza0D9UuVsz01tr3pdDGOTG0iKqmLJles1dBmcjl9SHqp pZNC5B97mpXEc8wLo75KHUfEK9orSqGNv7k3eCKjl7Vaek8WAn4jueAxYc8cTRpg cDH5IbqDrPtTYXpreWYfo8f87AQlq0XLo3qP+1aIDnFXRJGcUdPRchbsCG+XcPXc Yj3Vpy40rjnlUAQOP5BffDUiPFuwyzxNOcXxWfrXGb1pD1kLWSa//+EfwVc0D+D/ OHlj8i23znrl3Nsmu4U+tLVS1kRqPZWRdV9wJojdLTFiv8VDDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQlA33vwI5wfx2RWYiqRkAFcuceMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzdiZjgxZWMtMWI0My0z YTk2LTk5OTMtYTQ1ZWM1OTBjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0FrOvxKdGddnRbmQwnaaFiVp4y+Xo1Yh7SRBuKCC500DHXSUeOp8LQ qpV/ym3tG6sLn3294NKvhkK3RTNpnnEzGUG4jjUSWS1Q4tIvgN+Vp9oah495Fg1V ySrT8ngiR9WKXwyhSI2ost1o9tlJsGCmg6zgyac3qBF2fXGzjpLVO33bBqnaQuqQ t2rQerc09Yo3S2M8Rr6OOVUgBEF2AO80LslAqGA0uiJVsiNKdg/hbkPSJzNaH8G9 pRWHpFhwQYciAcN+2pXmrY4NrfBoqz5VH6AEoypcyUFFVmXRJE0MWNoZYbQy7xew P+i4LrhPBvxX/+/7RyQQT3UtHDYvYuw= -----END CERTIFICATE-----Generated at Wed Nov 5 14:00:08 2025 by rpki-client