$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a5e2dbf-e88b-33f3-a656-989c80842e38.roa File: 1a5e2dbf-e88b-33f3-a656-989c80842e38.roa (raw, json) Hash identifier: NfB/pz3uAR3kh3XjHhQaNbk0hXb3/r2TKqE5H7cq8Vs= Subject key identifier: E1:ED:2F:31:36:1D:3C:AE:5D:E0:76:56:B5:8B:6A:33:5D:24:31:65 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A976BBC9AF778F0C90F295E20 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a5e2dbf-e88b-33f3-a656-989c80842e38.roa Signing time: Mon 21 Jul 2025 11:24:54 +0000 ROA not before: Mon 21 Jul 2025 11:24:54 +0000 ROA not after: Sun 19 Oct 2025 11:24:54 +0000 asID: 213990 IP address blocks: 104.243.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:6b:bc:9a:f7:78:f0:c9:0f:29:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 11:24:54 2025 GMT Not After : Oct 19 11:24:54 2025 GMT Subject: CN=ff9e2da7-5df3-4bb0-ae2a-c69723e55160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:a7:9f:a0:f8:cc:28:87:40:2a:15:28:10: 69:69:57:55:2e:e4:52:19:b2:4b:23:ce:36:38:53: bf:1d:c4:05:fc:b2:0e:01:77:14:ae:8a:a7:37:b6: fe:1d:b6:68:46:74:88:2d:2f:42:46:b1:8f:a4:b5: 79:25:be:49:7d:9d:ac:77:f7:f5:6a:d5:8c:eb:72: dc:0d:e3:16:f5:98:99:a1:91:02:6a:6d:ba:2b:a0: d4:0c:58:c6:1a:cb:68:ec:7c:c4:c7:4c:83:91:16: 1a:c2:83:0d:f3:27:59:a9:14:29:ab:b1:1c:89:71: 8c:77:b4:9e:99:25:99:ed:c9:1e:42:44:23:aa:50: 9b:29:3f:42:c2:ed:7d:4a:33:db:c8:48:f6:db:09: ab:84:4f:a5:1b:12:58:8d:89:5d:cb:12:dc:97:ca: df:0d:62:f0:49:8a:21:f8:a7:e8:5d:41:c6:b9:dc: 97:e9:e5:b5:cb:59:fa:ac:cc:0e:e6:d1:7c:10:b9: 7d:e9:89:9e:05:e1:75:e0:d7:d8:fb:65:bf:17:43: 08:b0:e3:6e:b9:1a:2e:52:ef:98:79:1a:b1:f0:d2: 78:ca:bc:a0:c2:f4:f2:1d:d9:19:53:d0:f0:83:48: e5:e4:36:7c:a0:1c:c0:1d:24:3a:c3:98:d0:7f:f2: fd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:ED:2F:31:36:1D:3C:AE:5D:E0:76:56:B5:8B:6A:33:5D:24:31:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a5e2dbf-e88b-33f3-a656-989c80842e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1a:33:1f:2d:81:1f:eb:10:b2:0b:26:ec:04:3f:64:17:cc: d4:06:c0:e4:18:a7:dd:62:6e:de:0b:ab:f4:86:d3:bb:ec:1d: df:ea:1c:9d:32:ab:a9:1a:cd:2e:ca:29:6e:0a:e8:04:31:0f: b1:66:db:c8:64:0e:60:a1:3a:33:cd:f8:fa:fe:d9:2c:ec:77: 74:0f:af:4c:87:0f:f9:17:79:55:77:68:a3:cb:bb:92:9b:58: 3f:7c:e0:d1:d0:84:f4:73:cf:10:8b:e5:44:b1:17:80:7b:97: 61:61:a9:30:50:38:f6:83:a3:64:6d:73:10:40:66:d4:51:c0: fd:b7:44:ec:9a:4d:0c:24:95:d8:65:88:64:42:00:82:78:93: 7d:10:38:00:98:b4:2f:5c:b7:7e:0c:e3:ae:d3:6a:4a:ac:59: 84:e1:34:33:8a:64:c5:74:61:cd:bb:21:4f:a4:af:b8:e4:02: ed:b4:e8:ab:e9:16:15:35:4f:1c:7b:62:3c:6e:bf:fd:8d:53: 25:09:75:be:e2:a7:cc:7f:2e:80:e6:e4:12:be:8a:32:8d:d0: 20:3b:9d:b6:48:8e:2b:b0:07:2f:c3:a8:9f:79:cf:21:23:b2: 5c:46:81:48:bf:bf:c4:a9:e2:44:18:43:e1:15:e0:03:8a:3b: d6:83:9a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXa7ya93jwyQ8pXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTExMjQ1NFoXDTI1MTAxOTExMjQ1NFowLzEtMCsGA1UEAxMk ZmY5ZTJkYTctNWRmMy00YmIwLWFlMmEtYzY5NzIzZTU1MTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsymnn6D4zCiHQCoVKBBpaVdVLuRSGbJLI842 OFO/HcQF/LIOAXcUroqnN7b+HbZoRnSILS9CRrGPpLV5Jb5JfZ2sd/f1atWM63Lc DeMW9ZiZoZECam26K6DUDFjGGsto7HzEx0yDkRYawoMN8ydZqRQpq7EciXGMd7Se mSWZ7ckeQkQjqlCbKT9Cwu19SjPbyEj22wmrhE+lGxJYjYldyxLcl8rfDWLwSYoh +KfoXUHGudyX6eW1y1n6rMwO5tF8ELl96YmeBeF14NfY+2W/F0MIsONuuRouUu+Y eRqx8NJ4yrygwvTyHdkZU9Dwg0jl5DZ8oBzAHSQ6w5jQf/L98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHtLzE2HTyuXeB2VrWLajNdJDFlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWE1ZTJkYmYtZTg4Yi0z M2YzLWE2NTYtOTg5YzgwODQyZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8aMx8tgR/rELILJuwEP2QXzNQGwOQYp91ibt4Lq/SG07vsHd/qHJ0y q6kazS7KKW4K6AQxD7Fm28hkDmChOjPN+Pr+2Szsd3QPr0yHD/kXeVV3aKPLu5Kb WD984NHQhPRzzxCL5USxF4B7l2FhqTBQOPaDo2RtcxBAZtRRwP23ROyaTQwkldhl iGRCAIJ4k30QOACYtC9ct34M467TakqsWYThNDOKZMV0Yc27IU+kr7jkAu206Kvp FhU1Txx7Yjxuv/2NUyUJdb7ip8x/LoDm5BK+ijKN0CA7nbZIjiuwBy/DqJ95zyEj slxGgUi/v8Sp4kQYQ+EV4AOKO9aDmmo= -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:27 2025 by rpki-client