$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a51f9919-cb62-380f-829f-18a563f09b29.roa File: a51f9919-cb62-380f-829f-18a563f09b29.roa (raw, json) Hash identifier: lFCcVOmBxlCexnUxvLo24O8l/g1u8VYYhnN5NKGFjDw= Subject key identifier: 2C:4C:20:68:D9:88:4F:A1:DB:43:FD:BA:1B:B5:68:27:42:36:B5:4C Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A976B703598ED39EC809EC040 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a51f9919-cb62-380f-829f-18a563f09b29.roa Signing time: Mon 21 Jul 2025 11:24:18 +0000 ROA not before: Mon 21 Jul 2025 11:24:18 +0000 ROA not after: Sun 19 Oct 2025 11:24:18 +0000 asID: 213990 IP address blocks: 104.250.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:97:6b:70:35:98:ed:39:ec:80:9e:c0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 21 11:24:18 2025 GMT Not After : Oct 19 11:24:18 2025 GMT Subject: CN=8f6d399d-d269-4f08-8e31-c52a9c0be074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0e:f8:ea:24:99:03:cf:9b:cc:25:a0:79:37: 49:b6:f5:3a:52:5b:d7:2f:83:e5:12:e6:3e:fa:35: 38:36:bc:fb:aa:6f:ff:04:f1:66:e2:de:b0:33:80: e0:e1:0c:c9:bd:ec:04:14:66:94:30:9b:1e:fa:e6: b9:cc:67:6e:af:2d:53:54:78:42:ff:4d:e8:a3:7e: 2c:1d:d5:ee:ca:09:10:0a:60:b9:f2:86:f2:a4:16: e4:8b:95:7d:61:30:c6:99:70:ef:43:5c:a4:8f:8e: 36:3e:4c:69:b5:bb:6f:44:a8:ce:9c:d6:4f:8b:c5: 31:cd:02:a8:25:fd:02:0a:ac:36:ee:54:bf:14:31: 45:d9:72:3c:94:59:8c:b9:dc:34:91:3b:f7:21:31: 15:4e:67:d6:5f:ee:59:08:44:f1:f3:3d:ec:55:7f: ac:67:f2:72:fe:73:00:8d:42:e9:15:be:10:8c:ba: 59:6d:46:19:ab:79:63:9b:b3:0b:e2:20:d9:1d:15: 9f:d4:16:b0:ef:7f:2a:28:59:d1:c6:f6:cb:94:f6: c6:7f:4c:96:96:c3:8d:c2:e3:c5:39:17:75:35:c0: 12:ec:a3:5b:33:90:7e:a9:63:b7:7a:3d:69:32:59: 60:8f:69:db:4b:c1:69:ae:79:a6:bc:a2:a7:8c:95: 1c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:4C:20:68:D9:88:4F:A1:DB:43:FD:BA:1B:B5:68:27:42:36:B5:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/a51f9919-cb62-380f-829f-18a563f09b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0c:64:66:24:f4:7f:1f:32:62:f7:b0:21:a4:6d:67:07:12: e5:36:54:61:99:0d:02:54:08:d5:86:25:53:87:f2:96:ea:18: e3:4e:64:f2:fc:c5:d9:95:71:3c:67:c6:b0:eb:1c:4a:79:a0: e4:38:51:57:8b:5d:e7:6e:23:f7:cf:b6:75:44:32:cd:1f:f8: aa:af:ac:e9:cf:57:2f:04:14:ec:18:72:34:cc:9a:50:d3:c9: 35:44:c9:b4:0f:3d:80:65:2b:63:9c:e1:f5:e3:e5:72:14:87: b0:b2:20:a6:ed:d1:f3:84:96:73:6b:aa:f1:36:1e:ba:0f:3c: 15:fa:15:73:3f:ff:8a:00:88:c0:ab:4e:63:ba:54:a0:d3:24: 15:0e:26:4a:86:82:1d:7e:9b:f1:07:22:33:06:cf:0f:48:e0: 58:04:cc:2d:f2:3c:b3:d6:55:60:b7:f8:e0:fa:65:c6:ca:fa: b1:4f:a4:5f:cb:62:9f:e2:b8:c3:c9:43:53:73:83:db:d9:79: 8e:cd:08:cb:9a:93:ad:dc:63:82:5f:8b:d6:a5:9f:a3:7f:ae: 1c:a1:1e:26:51:15:16:b7:11:00:ea:21:d0:da:84:2b:3d:14: 6a:c1:a7:80:35:c7:77:95:a1:9e:f3:21:c9:d2:3f:9f:0b:83: 4a:30:ac:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqXa3A1mO057ICewEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyMTExMjQxOFoXDTI1MTAxOTExMjQxOFowLzEtMCsGA1UEAxMk OGY2ZDM5OWQtZDI2OS00ZjA4LThlMzEtYzUyYTljMGJlMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA746iSZA8+bzCWgeTdJtvU6UlvXL4PlEuY+ +jU4Nrz7qm//BPFm4t6wM4Dg4QzJvewEFGaUMJse+ua5zGdury1TVHhC/03oo34s HdXuygkQCmC58obypBbki5V9YTDGmXDvQ1ykj442PkxptbtvRKjOnNZPi8UxzQKo Jf0CCqw27lS/FDFF2XI8lFmMudw0kTv3ITEVTmfWX+5ZCETx8z3sVX+sZ/Jy/nMA jULpFb4QjLpZbUYZq3ljm7ML4iDZHRWf1Baw738qKFnRxvbLlPbGf0yWlsONwuPF ORd1NcAS7KNbM5B+qWO3ej1pMllgj2nbS8FprnmmvKKnjJUcTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxMIGjZiE+h20P9uhu1aCdCNrVMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYTUxZjk5MTktY2I2Mi0z ODBmLTgyOWYtMThhNTYzZjA5YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMMZGYk9H8fMmL3sCGkbWcHEuU2VGGZDQJUCNWGJVOH8pbqGONOZPL8 xdmVcTxnxrDrHEp5oOQ4UVeLXeduI/fPtnVEMs0f+KqvrOnPVy8EFOwYcjTMmlDT yTVEybQPPYBlK2Oc4fXj5XIUh7CyIKbt0fOElnNrqvE2HroPPBX6FXM//4oAiMCr TmO6VKDTJBUOJkqGgh1+m/EHIjMGzw9I4FgEzC3yPLPWVWC3+OD6ZcbK+rFPpF/L Yp/iuMPJQ1Nzg9vZeY7NCMuak63cY4Jfi9aln6N/rhyhHiZRFRa3EQDqIdDahCs9 FGrBp4A1x3eVoZ7zIcnSP58Lg0owrGo= -----END CERTIFICATE-----Generated at Tue Jul 22 11:52:51 2025 by rpki-client