$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19b627e-6c25-30f4-a29e-6217f0a04a1c.roa File: d19b627e-6c25-30f4-a29e-6217f0a04a1c.roa (raw, json) Hash identifier: RAB1utYGFR5oVCxv5WhfYsi9KeEWkK5fj7Vwf2DDfP0= Subject key identifier: 62:3E:EB:65:A8:19:5C:F8:0E:3F:2C:E6:0C:E6:39:14:B5:F7:44:FA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B86F8AB56CE4B5EA902090C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19b627e-6c25-30f4-a29e-6217f0a04a1c.roa Signing time: Wed 15 Oct 2025 06:47:03 +0000 ROA not before: Wed 15 Oct 2025 06:47:03 +0000 ROA not after: Tue 13 Jan 2026 07:47:03 +0000 asID: 213990 IP address blocks: 104.250.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:86:f8:ab:56:ce:4b:5e:a9:02:09:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 15 06:47:03 2025 GMT Not After : Jan 13 07:47:03 2026 GMT Subject: CN=7f620cf4-5e2f-46c2-a11d-fc54132bea35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2d:0c:fe:86:c5:19:28:34:d4:57:62:39:33: 79:ed:4e:08:a1:43:c3:b8:f8:47:ae:ab:bd:46:ab: b2:fa:21:84:9c:27:90:0b:cc:4b:b9:7a:bd:70:3c: bb:d0:f6:5a:d6:09:99:cd:7d:fa:ea:42:95:f8:d0: 0c:9e:71:d3:38:cb:68:8b:4c:c3:59:25:8e:f2:5f: 89:48:04:96:44:f7:59:d7:a1:41:8b:df:b8:ac:d0: 35:62:e7:bc:c8:25:27:1d:ff:af:4d:f3:9f:d3:31: 07:9f:e4:79:c4:d8:f0:76:ef:3d:de:a6:8f:e2:2d: 37:49:cf:f6:8d:60:a3:de:d2:e9:9f:69:5d:91:c7: f8:b3:28:fe:d2:75:30:74:73:54:57:e4:37:35:02: 76:27:48:94:a2:88:cf:14:e5:1e:0b:8d:a3:a5:c5: 71:25:fa:c0:14:b1:80:9b:2f:cf:f6:a8:44:9b:28: 79:b8:b1:73:cd:74:da:a2:a5:47:0b:5e:1c:b9:be: e8:72:f2:f2:ef:1a:03:43:45:58:55:4d:66:f0:f3: cc:08:b6:97:d6:b3:52:68:32:cb:07:25:79:11:6e: ff:d9:ff:67:13:07:c7:44:de:51:23:22:c3:18:f0: 35:ff:0d:db:40:cb:9f:e9:eb:a8:0e:03:a6:dd:76: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3E:EB:65:A8:19:5C:F8:0E:3F:2C:E6:0C:E6:39:14:B5:F7:44:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d19b627e-6c25-30f4-a29e-6217f0a04a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f5:fa:84:8f:4b:ca:10:75:24:f4:b3:62:8f:80:ec:d9:2f: 7a:a2:f5:6a:59:81:40:ec:89:15:04:ab:ea:f8:10:75:ce:eb: 13:ef:e9:f1:2a:1f:0b:0c:04:19:c7:eb:b4:49:41:42:18:8c: 76:a8:13:ec:b4:c1:ab:02:c7:eb:13:da:18:d9:8a:2d:a2:e6: 3d:b7:6d:a2:72:ea:88:44:7c:d2:06:7a:7e:86:de:64:70:88: 89:dd:f0:88:cb:85:bb:ab:85:96:c2:3e:d4:d6:5e:8e:b2:cf: b6:0b:b7:08:70:38:ee:e0:ee:59:c0:84:df:13:fe:e2:d0:c1: aa:aa:10:00:7f:64:be:75:67:42:52:1c:03:ce:2c:42:7e:44: df:e6:33:a6:e0:ac:9d:e3:c9:c2:13:15:ab:9b:51:7e:5b:6c: 36:84:ee:6f:41:d2:8b:04:9c:60:6f:3c:63:06:b9:05:be:91: 07:9a:e7:75:37:dd:f6:16:30:8b:e4:31:f4:2a:2e:1c:af:b4: d7:55:94:c2:0b:14:49:39:fe:03:26:fd:37:4f:0c:d2:f0:1b: e8:a5:80:74:1b:96:d7:2e:bd:d9:8f:c7:6c:06:0c:95:f0:dc: 7d:fa:30:cf:58:0e:e2:36:6d:09:16:52:11:24:4c:af:dc:7e: 07:25:67:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuG+KtWzkteqQIJDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxNTA2NDcwM1oXDTI2MDExMzA3NDcwM1owLzEtMCsGA1UEAxMk N2Y2MjBjZjQtNWUyZi00NmMyLWExMWQtZmM1NDEzMmJlYTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC0M/obFGSg01FdiOTN57U4IoUPDuPhHrqu9 Rquy+iGEnCeQC8xLuXq9cDy70PZa1gmZzX366kKV+NAMnnHTOMtoi0zDWSWO8l+J SASWRPdZ16FBi9+4rNA1Yue8yCUnHf+vTfOf0zEHn+R5xNjwdu893qaP4i03Sc/2 jWCj3tLpn2ldkcf4syj+0nUwdHNUV+Q3NQJ2J0iUoojPFOUeC42jpcVxJfrAFLGA my/P9qhEmyh5uLFzzXTaoqVHC14cub7ocvLy7xoDQ0VYVU1m8PPMCLaX1rNSaDLL ByV5EW7/2f9nEwfHRN5RIyLDGPA1/w3bQMuf6euoDgOm3XZ2kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGI+62WoGVz4Dj8s5gzmORS190T6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDE5YjYyN2UtNmMyNS0z MGY0LWEyOWUtNjIxN2YwYTA0YTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/1+oSPS8oQdST0s2KPgOzZL3qi9WpZgUDsiRUEq+r4EHXO6xPv6fEq HwsMBBnH67RJQUIYjHaoE+y0wasCx+sT2hjZii2i5j23baJy6ohEfNIGen6G3mRw iInd8IjLhburhZbCPtTWXo6yz7YLtwhwOO7g7lnAhN8T/uLQwaqqEAB/ZL51Z0JS HAPOLEJ+RN/mM6bgrJ3jycITFaubUX5bbDaE7m9B0osEnGBvPGMGuQW+kQea53U3 3fYWMIvkMfQqLhyvtNdVlMILFEk5/gMm/TdPDNLwG+ilgHQbltcuvdmPx2wGDJXw 3H36MM9YDuI2bQkWUhEkTK/cfgclZwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 12:57:11 2025 by rpki-client