$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa File: cf5a63f5-02e4-3524-9217-d786e8df2e30.roa (raw, json) Hash identifier: WU+Ub89wuP20JJ88W6Zdyk8S9qiLabpE3WCmLhY5ZsM= Subject key identifier: 66:58:86:C6:2D:43:A4:C1:97:42:7D:BA:AF:E5:A7:73:24:B7:A1:04 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F6C5839BD391EB3C02AEE9B80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 9009 IP address blocks: 104.250.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:39:bd:39:1e:b3:c0:2a:ee:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=87ca097d-4b66-40f5-96d9-b9fcd78a80c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:19:e6:a1:9e:97:21:4a:82:f7:fa:db:94:f9: 5d:6e:21:21:76:53:63:de:c3:b6:c7:c3:70:ee:33: 90:14:c9:c6:cb:47:08:75:e8:c3:50:a8:d9:b8:34: 6a:95:c2:b0:2f:e3:4d:65:18:ff:ac:67:8b:c8:73: 92:96:fc:e5:0c:6f:6b:b5:a1:af:7f:93:86:6a:8a: 2a:7b:01:09:fb:3a:3a:54:ca:48:ac:39:59:03:3d: 09:18:e8:15:16:36:5e:1e:3d:1b:ad:a9:9e:dd:e0: a7:25:70:07:9e:16:7b:23:94:98:a7:f2:b5:e0:ff: fe:54:dd:fc:04:7f:22:ec:ba:c4:f8:84:10:c3:5d: 6a:b4:95:97:4b:fb:6f:63:3e:36:07:5f:57:94:65: 10:f6:44:bd:a9:6f:31:3a:42:08:da:5a:e6:a2:d8: 3e:85:b1:a0:37:fd:2c:ae:22:51:44:74:dd:09:6d: 72:13:92:6e:3e:9a:ad:89:4a:82:df:6d:4f:db:62: c1:9b:c5:1c:16:0a:ad:26:73:59:1f:13:e4:a9:a5: f5:51:8b:f1:cc:86:7e:b7:0f:7a:d5:aa:99:0e:29: a5:8b:d5:fd:be:f1:c9:e9:2e:c3:90:3d:2b:30:36: 12:21:07:cf:65:59:2e:22:aa:e2:1c:c2:0a:56:9f: 36:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:58:86:C6:2D:43:A4:C1:97:42:7D:BA:AF:E5:A7:73:24:B7:A1:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/cf5a63f5-02e4-3524-9217-d786e8df2e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:26:7f:4a:f8:10:ef:3a:6e:c2:fc:a3:50:1b:31:2f:df:11: dd:00:79:2b:0f:21:31:e4:c3:84:8d:7c:53:3f:86:f6:aa:a8: 7b:23:d1:97:dc:56:4d:92:b6:dd:61:50:97:1a:84:f3:9a:03: db:52:94:b2:6e:02:9a:01:ef:fc:45:9f:27:c4:19:b3:7f:4c: 86:a7:cb:74:ea:c2:0f:0c:6f:e4:85:20:1a:40:8f:f9:e3:e4: 63:2b:6d:40:26:7d:a1:42:46:60:bd:0c:05:be:49:75:b3:ab: 69:f7:d0:95:fa:6b:8e:14:b1:6c:c5:92:13:af:4a:55:a2:37: 26:a2:e0:e1:f9:e2:31:2d:f7:80:7c:a7:4f:e3:86:d7:c7:68: 8d:67:ce:db:18:f0:28:99:6b:e7:ba:bc:66:85:4f:2e:d0:16: e2:6e:8b:1e:66:f3:2d:3b:67:8b:7b:71:f7:d5:af:06:6d:cf: 50:ac:2f:2a:cc:41:05:ab:6a:ab:d3:21:a5:5b:31:d0:f8:87: 96:ca:ff:24:2b:07:85:5f:1c:d2:78:5b:7c:6d:bf:50:31:47: 39:66:f7:bc:77:82:ff:08:78:38:bc:2e:5b:7e:6b:0e:b8:66: 64:81:f7:5c:0c:ee:6d:00:6b:2b:2f:c9:7d:5b:74:62:a9:7c: e6:b8:d0:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWDm9OR6zwCrum4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ODdjYTA5N2QtNGI2Ni00MGY1LTk2ZDktYjlmY2Q3OGE4MGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBnmoZ6XIUqC9/rblPldbiEhdlNj3sO2x8Nw 7jOQFMnGy0cIdejDUKjZuDRqlcKwL+NNZRj/rGeLyHOSlvzlDG9rtaGvf5OGaooq ewEJ+zo6VMpIrDlZAz0JGOgVFjZeHj0brame3eCnJXAHnhZ7I5SYp/K14P/+VN38 BH8i7LrE+IQQw11qtJWXS/tvYz42B19XlGUQ9kS9qW8xOkII2lrmotg+hbGgN/0s riJRRHTdCW1yE5JuPpqtiUqC321P22LBm8UcFgqtJnNZHxPkqaX1UYvxzIZ+tw96 1aqZDimli9X9vvHJ6S7DkD0rMDYSIQfPZVkuIqriHMIKVp82gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZYhsYtQ6TBl0J9uq/lp3Mkt6EEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvY2Y1YTYzZjUtMDJlNC0z NTI0LTkyMTctZDc4NmU4ZGYyZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0mf0r4EO86bsL8o1AbMS/fEd0AeSsPITHkw4SNfFM/hvaqqHsj0Zfc Vk2Stt1hUJcahPOaA9tSlLJuApoB7/xFnyfEGbN/TIany3Tqwg8Mb+SFIBpAj/nj 5GMrbUAmfaFCRmC9DAW+SXWzq2n30JX6a44UsWzFkhOvSlWiNyai4OH54jEt94B8 p0/jhtfHaI1nztsY8CiZa+e6vGaFTy7QFuJuix5m8y07Z4t7cffVrwZtz1CsLyrM QQWraqvTIaVbMdD4h5bK/yQrB4VfHNJ4W3xtv1AxRzlm97x3gv8IeDi8Llt+aw64 ZmSB91wM7m0AaysvyX1bdGKpfOa40IE= -----END CERTIFICATE-----Generated at Tue Oct 27 17:01:46 2026 by rpki-client