$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f70f6be5-c2a5-3794-940e-27498d20cf13.roa File: f70f6be5-c2a5-3794-940e-27498d20cf13.roa (raw, json) Hash identifier: 6uGt+Z7CIq/FjCAV/vpmLPgKKcvgR9vdMdgwRc0MgRA= Subject key identifier: CB:5A:93:7F:00:33:68:63:D0:AF:26:05:FC:DB:A2:DA:6B:98:33:A4 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A864AA614090CEA1EC880E520 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f70f6be5-c2a5-3794-940e-27498d20cf13.roa Signing time: Tue 15 Jul 2025 08:09:29 +0000 ROA not before: Tue 15 Jul 2025 08:09:29 +0000 ROA not after: Mon 13 Oct 2025 08:09:29 +0000 asID: 29802 IP address blocks: 104.250.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:4a:a6:14:09:0c:ea:1e:c8:80:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 15 08:09:29 2025 GMT Not After : Oct 13 08:09:29 2025 GMT Subject: CN=2d0b982c-3c56-48d7-885f-88e3c949991e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f0:56:35:8c:11:a6:31:1e:20:55:9e:93:f2: 23:2f:de:d6:a5:2c:c2:75:31:fc:f6:e1:74:3e:8a: b8:60:68:13:fd:25:79:59:96:79:be:8e:12:e5:d3: 16:66:7f:7a:a8:d5:99:00:92:83:8c:f8:96:2a:f8: 3f:50:9f:c6:6f:ec:2d:45:98:c5:1c:44:e6:99:f5: 07:57:2c:92:e4:2d:d7:d7:7b:9b:e8:62:7e:2b:21: cd:fa:09:11:5e:6e:b0:7a:73:bc:d8:a9:9a:a7:cd: 13:0f:c7:0a:12:84:99:f7:83:ec:21:24:82:80:18: 57:be:fc:cc:2f:0c:a9:8f:d8:38:c7:77:62:37:60: 3e:41:7a:d0:37:f1:ab:a2:e7:6b:8b:da:02:eb:d4: ec:72:49:a5:1c:02:b4:06:0e:87:e6:40:1e:41:28: 04:c5:b4:cc:28:9e:02:2f:3c:61:88:68:6b:b5:91: 9a:c5:6b:3b:fc:ad:31:fd:59:73:23:40:19:5a:94: c4:4e:8f:5d:f9:04:87:80:b0:69:2a:83:61:18:9e: a7:93:7f:d9:91:95:ab:99:f0:1a:4c:95:f5:9c:61: 3d:9f:28:c2:c7:ad:4c:5a:24:27:f2:fd:c7:52:0f: b8:7f:c2:00:ba:d0:b0:47:70:f0:24:ce:ee:4b:49: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5A:93:7F:00:33:68:63:D0:AF:26:05:FC:DB:A2:DA:6B:98:33:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f70f6be5-c2a5-3794-940e-27498d20cf13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:dc:c3:a2:18:4d:47:97:03:07:b6:97:76:eb:84:95:b4:ba: 02:fd:59:87:e0:25:6f:b2:f0:8f:dd:9c:61:3f:dc:88:aa:9e: c9:72:cb:6f:63:93:40:c2:22:51:f3:64:af:e9:73:58:a5:f9: 35:1a:96:ad:f3:08:66:94:0b:81:df:4f:85:16:2a:fa:a3:74: ba:bd:ad:40:ab:a3:82:89:ca:70:d3:88:f0:0b:fc:b7:b9:77: 13:49:d1:f5:76:59:11:15:ed:e3:73:18:8c:bb:9d:cf:2f:e3: b9:06:5a:0e:e7:49:22:7c:9e:44:91:62:1c:7e:64:64:29:99: b7:2a:a4:9e:cc:ad:af:fe:c9:d4:5a:ac:58:91:c8:d8:b4:6a: 39:5f:0a:ad:f1:c0:a0:59:a9:19:5b:e5:55:f7:03:fd:96:fc: 87:9a:28:14:60:1b:7f:44:bc:5e:bb:ef:31:85:37:f9:75:49: da:e1:82:be:e5:8e:e6:bc:f2:fa:70:ff:c3:85:99:f1:da:62: 29:0c:c6:e6:15:5d:bd:e7:9e:8e:ad:59:f8:80:ba:e9:15:12: 96:24:6d:e1:45:48:b2:9b:fa:62:dd:4b:58:ee:69:73:d1:ca: 8c:47:f1:00:73:74:58:b2:7a:8f:8e:2d:c4:cd:04:87:3b:99: e7:f6:af:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqGSqYUCQzqHsiA5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcxNTA4MDkyOVoXDTI1MTAxMzA4MDkyOVowLzEtMCsGA1UEAxMk MmQwYjk4MmMtM2M1Ni00OGQ3LTg4NWYtODhlM2M5NDk5OTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PBWNYwRpjEeIFWek/IjL97WpSzCdTH89uF0 Poq4YGgT/SV5WZZ5vo4S5dMWZn96qNWZAJKDjPiWKvg/UJ/Gb+wtRZjFHETmmfUH VyyS5C3X13ub6GJ+KyHN+gkRXm6wenO82Kmap80TD8cKEoSZ94PsISSCgBhXvvzM Lwypj9g4x3diN2A+QXrQN/Groudri9oC69TsckmlHAK0Bg6H5kAeQSgExbTMKJ4C LzxhiGhrtZGaxWs7/K0x/VlzI0AZWpTETo9d+QSHgLBpKoNhGJ6nk3/ZkZWrmfAa TJX1nGE9nyjCx61MWiQn8v3HUg+4f8IAutCwR3DwJM7uS0nuKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtak38AM2hj0K8mBfzbotprmDOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjcwZjZiZTUtYzJhNS0z Nzk0LTk0MGUtMjc0OThkMjBjZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvcw6IYTUeXAwe2l3brhJW0ugL9WYfgJW+y8I/dnGE/3Iiqnslyy29j k0DCIlHzZK/pc1il+TUalq3zCGaUC4HfT4UWKvqjdLq9rUCro4KJynDTiPAL/Le5 dxNJ0fV2WREV7eNzGIy7nc8v47kGWg7nSSJ8nkSRYhx+ZGQpmbcqpJ7Mra/+ydRa rFiRyNi0ajlfCq3xwKBZqRlb5VX3A/2W/IeaKBRgG39EvF677zGFN/l1Sdrhgr7l jua88vpw/8OFmfHaYikMxuYVXb3nno6tWfiAuukVEpYkbeFFSLKb+mLdS1juaXPR yoxH8QBzdFiyeo+OLcTNBIc7mef2rx4= -----END CERTIFICATE-----Generated at Tue Jul 22 11:54:11 2025 by rpki-client