$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e46cdb6b-9a98-3008-a076-3235aa60118b.roa File: e46cdb6b-9a98-3008-a076-3235aa60118b.roa (raw, json) Hash identifier: djmnE3HB+g/td/vG5C6mHt+7bLgF5Sfqo/sQ+ajseWs= Subject key identifier: F0:BE:E6:7B:A2:D6:50:C7:67:FB:ED:80:FA:77:D5:A2:B1:83:30:17 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A75AAD7587B5186F5CF7D8E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e46cdb6b-9a98-3008-a076-3235aa60118b.roa Signing time: Wed 09 Jul 2025 09:14:34 +0000 ROA not before: Wed 09 Jul 2025 09:14:34 +0000 ROA not after: Tue 07 Oct 2025 09:14:34 +0000 asID: 329007 IP address blocks: 104.250.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:75:aa:d7:58:7b:51:86:f5:cf:7d:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 9 09:14:34 2025 GMT Not After : Oct 7 09:14:34 2025 GMT Subject: CN=ec17634b-c4a8-4889-845c-c3f511df5829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f9:34:47:d3:0f:66:8d:2b:3d:24:cb:ee:57: 92:10:cd:d9:e2:e5:06:d3:5d:e7:8b:ea:5b:5b:21: 2a:60:6f:be:e9:ea:cb:c1:76:96:91:5b:f5:d8:9d: 90:99:6f:de:b3:e7:ef:f5:3f:b5:b6:f3:db:6f:9a: e4:08:65:1c:0e:18:74:26:db:f5:e3:71:75:f5:46: 01:4f:75:3a:0f:ad:e8:6d:9d:f8:ca:c1:05:d8:83: 1b:a0:27:7f:da:af:49:7a:8c:8e:56:7c:34:c2:12: 80:75:e3:94:34:6a:ad:4c:43:2f:b2:fe:67:80:ca: e7:0c:56:80:d4:94:d5:1a:3d:1d:3f:89:52:a2:4b: a4:40:a8:4d:52:25:6b:4d:4f:44:0d:49:87:eb:76: 2d:e2:ca:a2:5f:ce:59:e9:95:47:2a:4a:bf:88:cd: ef:4a:34:92:bb:43:b6:8c:bd:6d:26:d0:18:ab:62: a6:de:7a:cb:e0:3f:a4:bb:be:5f:5b:b7:c6:07:60: 05:4a:a6:cc:6b:84:7c:e4:28:f7:dc:46:14:fb:bf: 82:04:e1:f1:cd:6c:cc:a9:43:ca:9c:24:55:7f:57: 84:cc:b4:e0:03:05:ef:78:cb:f7:58:c6:cf:be:c2: 9b:f0:3a:87:d4:ec:42:49:9e:e6:1b:22:17:8a:c4: c5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BE:E6:7B:A2:D6:50:C7:67:FB:ED:80:FA:77:D5:A2:B1:83:30:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e46cdb6b-9a98-3008-a076-3235aa60118b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c4:7b:7c:33:13:c0:3b:9a:46:32:89:d1:90:21:9a:f1:44: 43:cd:0a:b5:1e:4d:9b:e5:23:36:2c:63:bf:00:97:4e:8f:db: dc:e6:c2:89:21:0e:16:c4:6e:9e:8a:c7:df:43:82:63:61:e4: c7:95:3b:10:e2:88:7e:e5:e9:7a:7c:37:01:8f:bf:4d:4a:79: 95:92:fb:65:53:0f:52:c8:bd:66:fd:ef:43:03:33:67:97:1c: 0c:ab:db:c9:92:5c:f5:18:43:ef:d0:61:28:05:ef:fa:e4:e7: 91:b2:fe:19:0f:4f:5f:51:96:52:7d:62:19:10:50:e4:61:4f: ac:7b:50:12:c4:4b:f1:4a:64:d6:a8:b8:a0:c7:2a:e3:5a:65: 03:3b:55:38:44:b6:05:11:ba:0b:7e:72:33:9f:27:33:dc:be: 98:4b:fb:d4:9d:29:1e:fb:e2:45:55:7f:c3:ba:00:4f:8b:49: fa:6d:e7:c2:1f:88:fc:e8:eb:68:12:1e:7a:9f:83:53:cc:06: 93:f4:bf:60:ff:d0:11:af:0a:30:42:96:af:93:51:cc:90:03: 16:67:3c:5f:75:a6:de:39:8a:1c:41:83:35:59:be:ef:94:77: dc:8d:6f:67:fe:89:b0:e6:18:00:b0:76:1e:f6:f2:41:3c:6d: fb:f6:16:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp1qtdYe1GG9c99joAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcwOTA5MTQzNFoXDTI1MTAwNzA5MTQzNFowLzEtMCsGA1UEAxMk ZWMxNzYzNGItYzRhOC00ODg5LTg0NWMtYzNmNTExZGY1ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPk0R9MPZo0rPSTL7leSEM3Z4uUG013ni+pb WyEqYG++6erLwXaWkVv12J2QmW/es+fv9T+1tvPbb5rkCGUcDhh0Jtv143F19UYB T3U6D63obZ34ysEF2IMboCd/2q9JeoyOVnw0whKAdeOUNGqtTEMvsv5ngMrnDFaA 1JTVGj0dP4lSokukQKhNUiVrTU9EDUmH63Yt4sqiX85Z6ZVHKkq/iM3vSjSSu0O2 jL1tJtAYq2Km3nrL4D+ku75fW7fGB2AFSqbMa4R85Cj33EYU+7+CBOHxzWzMqUPK nCRVf1eEzLTgAwXveMv3WMbPvsKb8DqH1OxCSZ7mGyIXisTFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC+5nui1lDHZ/vtgPp31aKxgzAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTQ2Y2RiNmItOWE5OC0z MDA4LWEwNzYtMzIzNWFhNjAxMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPEe3wzE8A7mkYyidGQIZrxREPNCrUeTZvlIzYsY78Al06P29zmwokh DhbEbp6Kx99DgmNh5MeVOxDiiH7l6Xp8NwGPv01KeZWS+2VTD1LIvWb970MDM2eX HAyr28mSXPUYQ+/QYSgF7/rk55Gy/hkPT19RllJ9YhkQUORhT6x7UBLES/FKZNao uKDHKuNaZQM7VThEtgURugt+cjOfJzPcvphL+9SdKR774kVVf8O6AE+LSfpt58If iPzo62gSHnqfg1PMBpP0v2D/0BGvCjBClq+TUcyQAxZnPF91pt45ihxBgzVZvu+U d9yNb2f+ibDmGACwdh728kE8bfv2Fio= -----END CERTIFICATE-----Generated at Mon Jul 21 18:14:28 2025 by rpki-client