$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa File: 08dd8f01-f24b-30a6-8e14-4514805f2501.roa (raw, json) Hash identifier: 6WK4zs3JV/FQStzYwi9ZFbT1hWDC6QvKuiSK8sk3H/U= Subject key identifier: 58:D7:6B:97:C1:31:6B:39:DF:13:2C:6D:EC:0F:FB:18:D3:FA:8A:3B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F8F3DC86972232D0516BC01E0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 9009 IP address blocks: 104.250.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:c8:69:72:23:2d:05:16:bc:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=fe0c224b-b6f4-452d-a876-81351e7298b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b5:a8:5a:d7:d1:f0:fc:8e:e9:79:ee:13:3c: 38:2f:ca:6a:fe:3d:6e:13:6c:fe:b5:36:c2:b5:0a: 96:8b:4a:32:55:22:40:0a:7d:2b:00:4f:7d:3c:61: 64:6f:75:39:9c:a7:78:26:7a:0b:43:ed:bc:ff:97: 82:93:33:2e:94:97:d0:93:1b:53:11:a2:34:00:e9: ed:41:49:41:db:d8:2c:a4:9a:27:1d:c4:e4:68:99: 7a:e6:9c:d5:fd:0c:7d:be:91:58:54:87:ba:95:8f: 44:7b:81:66:89:b0:ec:bb:bd:83:8d:d1:19:e4:fd: 88:80:f8:40:07:15:14:09:a6:f9:50:73:92:84:59: ae:cb:41:46:08:43:f9:4c:c8:77:40:72:77:69:d4: 74:2b:98:82:35:71:6a:cd:97:05:d0:bb:55:09:df: 04:37:ad:32:b0:a0:52:23:9c:4a:e6:3d:ab:81:7e: 10:27:66:9c:6c:62:45:56:08:30:be:97:bb:5a:08: 56:ea:54:53:fa:c7:b7:d9:df:19:c7:62:9d:4a:5a: 8c:2a:6d:20:92:64:25:b0:0b:ff:03:9f:e7:be:47: 25:1b:57:e0:78:a1:13:80:04:c3:fe:5a:39:3a:3c: 21:84:3a:73:3b:67:f4:10:76:b2:97:3b:50:2f:9b: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D7:6B:97:C1:31:6B:39:DF:13:2C:6D:EC:0F:FB:18:D3:FA:8A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/08dd8f01-f24b-30a6-8e14-4514805f2501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2e:d1:c4:92:5a:bb:95:08:7e:2d:33:ca:0a:a2:3e:0b:3b: 03:80:8a:d4:86:a4:a7:dc:de:95:e0:c2:6f:77:17:0c:40:72: e6:c2:0d:e6:aa:2a:b5:f4:b7:25:38:37:89:85:a3:4d:21:f0: f9:d3:09:1c:df:60:64:48:1c:ea:e4:68:83:64:c7:a6:54:72: d0:5c:e6:53:39:f9:42:54:d1:97:bd:8e:69:15:0d:35:8a:ff: 12:f0:65:88:8b:77:ee:4e:66:03:72:ee:95:b4:5b:78:93:07: 24:89:87:86:37:09:6d:c8:d1:70:f2:78:0e:ed:47:3c:c5:81: 4e:25:13:0b:41:37:33:28:b5:d6:22:3d:4e:2a:ce:21:fa:73: c0:97:a8:25:85:c8:de:b5:75:9a:60:7e:43:26:f3:35:d2:93: e3:6a:23:15:11:8a:b8:13:a9:10:e0:1b:e5:af:7b:6f:c9:21: fc:59:7b:33:57:d4:bc:0d:e9:3f:12:4c:94:4b:78:d5:34:f0: c4:22:8e:84:85:a2:3d:ce:74:6a:45:5a:45:ac:f5:16:88:4d: d0:ee:77:17:34:3d:26:06:32:97:29:36:39:7e:ea:a6:71:0a: 4f:a2:38:68:e6:c5:62:cf:90:54:58:11:09:35:31:95:d5:4d: 9a:05:c4:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PPchpciMtBRa8AeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk ZmUwYzIyNGItYjZmNC00NTJkLWE4NzYtODEzNTFlNzI5OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbWoWtfR8PyO6XnuEzw4L8pq/j1uE2z+tTbC tQqWi0oyVSJACn0rAE99PGFkb3U5nKd4JnoLQ+28/5eCkzMulJfQkxtTEaI0AOnt QUlB29gspJonHcTkaJl65pzV/Qx9vpFYVIe6lY9Ee4FmibDsu72DjdEZ5P2IgPhA BxUUCab5UHOShFmuy0FGCEP5TMh3QHJ3adR0K5iCNXFqzZcF0LtVCd8EN60ysKBS I5xK5j2rgX4QJ2acbGJFVggwvpe7WghW6lRT+se32d8Zx2KdSlqMKm0gkmQlsAv/ A5/nvkclG1fgeKETgATD/lo5OjwhhDpzO2f0EHaylztQL5udCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjXa5fBMWs53xMsbewP+xjT+oo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMDhkZDhmMDEtZjI0Yi0z MGE2LThlMTQtNDUxNDgwNWYyNTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIu0cSSWruVCH4tM8oKoj4LOwOAitSGpKfc3pXgwm93FwxAcubCDeaq KrX0tyU4N4mFo00h8PnTCRzfYGRIHOrkaINkx6ZUctBc5lM5+UJU0Ze9jmkVDTWK /xLwZYiLd+5OZgNy7pW0W3iTBySJh4Y3CW3I0XDyeA7tRzzFgU4lEwtBNzMotdYi PU4qziH6c8CXqCWFyN61dZpgfkMm8zXSk+NqIxURirgTqRDgG+Wve2/JIfxZezNX 1LwN6T8STJRLeNU08MQijoSFoj3OdGpFWkWs9RaITdDudxc0PSYGMpcpNjl+6qZx Ck+iOGjmxWLPkFRYEQk1MZXVTZoFxGg= -----END CERTIFICATE-----Generated at Sun Oct 25 22:05:23 2026 by rpki-client