$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/606c55dd-002c-390c-804a-c1a633abe208.roa File: 606c55dd-002c-390c-804a-c1a633abe208.roa (raw, json) Hash identifier: NakSDZ5t5MBXv5oOfzqYM5EL/zTzGu/gCCjPNOewjRs= Subject key identifier: 02:2A:C5:22:4D:2B:20:76:1C:80:2D:37:95:30:A4:04:E0:30:E5:82 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F90A2FD4722530830CBBE3360 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/606c55dd-002c-390c-804a-c1a633abe208.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 212238 IP address blocks: 104.250.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a2:fd:47:22:53:08:30:cb:be:33:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=0cf7fa2c-cc4e-4b6d-822a-5e404975e690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:10:a7:68:b3:10:33:06:65:a5:71:aa:02: a2:a3:f8:25:fa:a6:6c:3e:c6:2c:4b:fc:e3:4e:05: 91:b2:d9:ab:33:6c:fe:a4:f5:6b:19:ac:44:55:70: 34:9c:22:f5:b5:9c:44:fb:47:04:da:8f:e1:1d:a1: c8:ca:9b:76:3b:c9:b7:de:22:ce:45:76:f4:58:6d: 32:82:4a:86:ed:6d:af:49:99:c4:c1:c6:84:26:b0: 78:04:89:ea:19:98:9f:18:f5:87:69:90:5f:88:61: d8:36:2e:78:19:8a:3f:17:90:4d:b7:72:e3:79:c7: e2:e0:e6:62:eb:f3:3c:4d:26:84:55:a0:0d:55:f1: a8:e6:65:d0:e0:62:9d:63:56:2d:ad:b9:72:dd:ce: a7:3d:f7:94:ec:20:df:79:55:e2:e0:79:9c:ce:93: c8:26:03:df:2a:75:f9:13:76:97:24:b9:d8:7c:50: 04:cf:1d:af:13:57:98:f8:dc:12:72:c8:54:ad:c2: ed:9b:1a:7c:3f:1b:a1:80:d2:b9:0d:6a:d3:fd:a0: ec:41:64:a9:92:dc:44:3a:b1:7c:03:0e:17:fc:43: 25:b6:09:81:d4:66:dd:ea:14:78:94:3b:0a:e5:e7: cb:3a:2a:c8:ff:80:b3:c2:4a:63:d9:71:d9:fc:9b: 4e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2A:C5:22:4D:2B:20:76:1C:80:2D:37:95:30:A4:04:E0:30:E5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/606c55dd-002c-390c-804a-c1a633abe208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b1:b9:59:90:34:44:32:6b:73:05:e2:36:37:dc:e4:ec:90: 2d:54:b3:26:5c:a5:f7:52:00:f2:bb:90:c5:a4:c0:ee:41:bb: 49:7a:10:ce:1f:01:f6:13:94:2e:2d:41:63:8c:d7:5f:e8:3e: 00:3f:cb:b4:e3:ba:12:bd:11:8c:85:b9:59:45:0b:71:d6:53: e7:be:74:19:bc:6d:26:c4:d1:74:5d:ee:14:9b:8b:c6:4f:90: 5c:cd:87:83:8a:3b:61:2c:8b:b5:34:15:6f:a0:06:19:0c:e8: 06:20:4f:6b:05:fc:42:45:08:1d:5d:ab:48:58:c9:ad:2a:d7: 04:3f:93:b9:16:13:ac:d8:20:9a:1f:d6:1f:59:18:c3:ef:12: 11:13:49:08:34:c8:a6:ec:c0:67:0a:f1:cc:c4:55:23:eb:e3: 87:01:ad:de:d1:da:cc:74:48:9c:da:2f:5d:3a:77:9e:36:36: 95:41:4e:63:4c:88:02:ba:7f:03:0a:f2:bd:4c:a3:99:eb:95: 18:6a:0f:8d:04:36:5b:8d:9f:d7:04:16:e3:92:43:ec:40:6a: 51:2a:84:08:98:e6:47:c6:db:74:5c:9d:02:71:92:0f:f2:36: c8:42:86:c3:3d:84:9f:b8:4b:65:67:7e:03:b7:26:fb:2f:e6: 10:f1:89:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qov1HIlMIMMu+M2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk MGNmN2ZhMmMtY2M0ZS00YjZkLTgyMmEtNWU0MDQ5NzVlNjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/4Qp2izEDMGZaVxqgKio/gl+qZsPsYsS/zj TgWRstmrM2z+pPVrGaxEVXA0nCL1tZxE+0cE2o/hHaHIypt2O8m33iLORXb0WG0y gkqG7W2vSZnEwcaEJrB4BInqGZifGPWHaZBfiGHYNi54GYo/F5BNt3Ljecfi4OZi 6/M8TSaEVaANVfGo5mXQ4GKdY1Ytrbly3c6nPfeU7CDfeVXi4HmczpPIJgPfKnX5 E3aXJLnYfFAEzx2vE1eY+NwScshUrcLtmxp8PxuhgNK5DWrT/aDsQWSpktxEOrF8 Aw4X/EMltgmB1Gbd6hR4lDsK5efLOirI/4Czwkpj2XHZ/JtO9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIqxSJNKyB2HIAtN5UwpATgMOWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNjA2YzU1ZGQtMDAyYy0z OTBjLTgwNGEtYzFhNjMzYWJlMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKxuVmQNEQya3MF4jY33OTskC1UsyZcpfdSAPK7kMWkwO5Bu0l6EM4f AfYTlC4tQWOM11/oPgA/y7TjuhK9EYyFuVlFC3HWU+e+dBm8bSbE0XRd7hSbi8ZP kFzNh4OKO2Esi7U0FW+gBhkM6AYgT2sF/EJFCB1dq0hYya0q1wQ/k7kWE6zYIJof 1h9ZGMPvEhETSQg0yKbswGcK8czEVSPr44cBrd7R2sx0SJzaL106d542NpVBTmNM iAK6fwMK8r1Mo5nrlRhqD40ENluNn9cEFuOSQ+xAalEqhAiY5kfG23RcnQJxkg/y NshChsM9hJ+4S2VnfgO3Jvsv5hDxiVA= -----END CERTIFICATE-----Generated at Wed Oct 28 22:29:52 2026 by rpki-client