$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa File: cf5a63f5-02e4-3524-9217-d786e8df2e30.roa (raw, json) Hash identifier: Iw0GBCczu39rn4WAxF6X1uWq2M7AvW+i/IVEL/Twlcw= Subject key identifier: 4C:6A:01:A4:64:85:2B:17:51:04:53:39:DD:60:BD:08:7D:C2:DC:12 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AA6F62CC23D65434C47AD4BF0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa Signing time: Sun 27 Jul 2025 01:00:49 +0000 ROA not before: Sun 27 Jul 2025 01:00:49 +0000 ROA not after: Sat 25 Oct 2025 01:00:49 +0000 asID: 9009 IP address blocks: 104.250.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a6:f6:2c:c2:3d:65:43:4c:47:ad:4b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 27 01:00:49 2025 GMT Not After : Oct 25 01:00:49 2025 GMT Subject: CN=72f1297e-9daa-45b0-875a-7d713790f14a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:0b:80:84:f6:f2:7e:d1:0f:60:62:77:0c: 1b:a6:4d:23:34:e0:ba:4c:0c:cf:13:ee:fb:38:b7: 66:44:12:52:1c:ee:94:a2:62:b9:0c:ba:3b:54:af: f4:4e:80:01:2a:38:ac:1d:bc:a7:ad:12:9e:c4:24: a2:22:3a:17:a9:86:45:de:11:9a:bf:11:40:4f:d6: 71:0b:6e:b9:a2:6e:c1:c3:0d:35:5c:a5:d7:80:1e: 50:a6:85:87:5d:b7:ba:95:72:09:c9:04:aa:b0:5b: b1:41:ff:4b:b9:de:f5:3a:f4:d1:c5:41:78:5c:36: cc:25:27:e9:88:12:85:06:b4:c5:40:b0:ca:27:10: ef:7e:09:04:89:2a:30:9b:42:9c:db:e1:5b:75:56: 2a:d9:8f:88:dd:f5:79:30:70:b1:c8:48:0b:c5:7a: d6:70:df:b0:9e:34:92:8b:ea:66:ee:92:36:14:e1: a0:86:2c:83:5c:51:cc:d9:d2:c3:d9:0e:bd:8f:90: 65:57:fe:68:9f:ff:86:51:4e:2b:e5:09:b8:bf:00: e2:ae:23:bd:33:0d:64:ff:86:d1:fc:e6:71:62:df: 62:cd:88:fc:78:73:b2:05:7d:b9:c8:e3:5a:2d:26: a5:fa:ce:62:ff:2e:f3:84:65:d6:bd:ae:41:03:36: b0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6A:01:A4:64:85:2B:17:51:04:53:39:DD:60:BD:08:7D:C2:DC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:36:0a:b9:b5:87:22:d5:45:06:d1:8c:80:5d:d8:1a:60:45: 17:b7:d5:e4:d2:ae:c2:ac:4a:96:33:0a:c5:8c:46:e7:f9:7e: 05:54:4c:51:7d:52:fa:4f:ba:fe:84:81:9a:ed:b5:39:79:78: b3:21:32:88:3f:ad:aa:f3:d9:be:8f:69:26:5d:98:7b:16:f1: 90:eb:73:44:be:0c:6b:fb:14:75:a0:6f:6e:03:70:d7:bb:b1: 31:0e:bf:5e:7a:f2:76:dd:25:ba:61:00:9a:a9:2a:ec:c6:50: 40:2c:80:1c:d8:9b:ec:a3:82:6d:fa:c2:14:88:85:6b:92:d5: 66:03:25:ac:78:21:83:36:95:eb:c5:e7:65:1e:9c:94:5f:23: 61:ef:37:ed:42:4c:76:17:81:e4:9f:fa:ed:1d:32:4f:c0:a1: b7:ca:1d:b8:d5:cc:b4:7b:e3:38:4d:03:86:a9:1f:ea:c8:70: cb:05:74:e6:44:72:48:d4:00:b9:14:f9:c3:ee:38:8b:b2:8f: 2d:6c:77:99:09:77:d1:93:e7:3e:a4:67:e4:5c:f2:c4:69:43: d5:6a:84:60:c4:5f:b5:2e:6f:0f:c6:4f:52:1e:d0:f3:a3:83: ad:e3:99:4e:98:0e:21:5c:78:8b:48:c9:e3:f3:89:4b:93:e4: 70:0b:76:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9izCPWVDTEetS/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk NzJmMTI5N2UtOWRhYS00NWIwLTg3NWEtN2Q3MTM3OTBmMTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLELgIT28n7RD2Bidwwbpk0jNOC6TAzPE+77 OLdmRBJSHO6UomK5DLo7VK/0ToABKjisHbynrRKexCSiIjoXqYZF3hGavxFAT9Zx C265om7Bww01XKXXgB5QpoWHXbe6lXIJyQSqsFuxQf9Lud71OvTRxUF4XDbMJSfp iBKFBrTFQLDKJxDvfgkEiSowm0Kc2+FbdVYq2Y+I3fV5MHCxyEgLxXrWcN+wnjSS i+pm7pI2FOGghiyDXFHM2dLD2Q69j5BlV/5on/+GUU4r5Qm4vwDiriO9Mw1k/4bR /OZxYt9izYj8eHOyBX25yONaLSal+s5i/y7zhGXWva5BAzawqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExqAaRkhSsXUQRTOd1gvQh9wtwSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2Y1YTYzZjUtMDJlNC0z NTI0LTkyMTctZDc4NmU4ZGYyZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM2Crm1hyLVRQbRjIBd2BpgRRe31eTSrsKsSpYzCsWMRuf5fgVUTFF9 UvpPuv6EgZrttTl5eLMhMog/rarz2b6PaSZdmHsW8ZDrc0S+DGv7FHWgb24DcNe7 sTEOv1568nbdJbphAJqpKuzGUEAsgBzYm+yjgm36whSIhWuS1WYDJax4IYM2levF 52UenJRfI2HvN+1CTHYXgeSf+u0dMk/AobfKHbjVzLR74zhNA4apH+rIcMsFdOZE ckjUALkU+cPuOIuyjy1sd5kJd9GT5z6kZ+Rc8sRpQ9VqhGDEX7Uubw/GT1Ie0POj g63jmU6YDiFceItIyePziUuT5HALdsQ= -----END CERTIFICATE-----Generated at Mon Aug 4 15:32:35 2025 by rpki-client