$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/23b3baed-8530-34bd-9c2a-524d786bb646.roa File: 23b3baed-8530-34bd-9c2a-524d786bb646.roa (raw, json) Hash identifier: QutZWWqku43gDWV4cKFXDFRIFUWnwOefF39d+r4doWI= Subject key identifier: 50:68:25:20:BB:53:A0:68:CB:25:B7:95:5E:22:14:A5:78:E7:00:96 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B03EC9BE0B6CCB7BD82DFF260 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/23b3baed-8530-34bd-9c2a-524d786bb646.roa Signing time: Fri 29 Aug 2025 08:11:52 +0000 ROA not before: Fri 29 Aug 2025 08:11:52 +0000 ROA not after: Thu 27 Nov 2025 09:11:52 +0000 asID: 9009 IP address blocks: 104.250.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:ec:9b:e0:b6:cc:b7:bd:82:df:f2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 08:11:52 2025 GMT Not After : Nov 27 09:11:52 2025 GMT Subject: CN=0efaa877-5a30-43a8-988f-c7ed36c8fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:94:fb:08:0a:88:c0:ed:f0:94:8b:e6:cf:7d: 21:3a:56:85:d6:b0:4e:e4:21:f0:4e:df:4d:d8:b2: a5:f7:f6:b2:3e:75:fc:e5:01:92:30:38:66:25:71: 70:22:5c:06:f5:ff:5c:80:54:46:35:7b:63:fa:2c: a0:13:69:75:c7:5d:55:31:d3:5d:52:72:d2:a3:66: 59:a8:19:10:98:af:ab:5b:88:58:41:7d:ca:ad:c7: 0f:c6:a1:30:67:a8:e6:51:85:85:38:c2:b7:38:49: 93:d6:b0:09:0b:81:ec:3b:0f:48:70:82:97:57:16: 64:5d:57:4e:23:10:7b:bb:26:b2:32:e1:22:ae:4b: 23:6a:d6:69:30:43:dd:15:fc:6b:e1:1b:35:56:5b: 42:7c:fe:0a:0c:f5:cc:79:35:c4:1d:14:32:9a:29: d5:aa:a7:c5:3b:68:66:6b:8d:f9:7b:85:81:1d:54: 5e:0f:2d:1b:e8:ad:3e:67:84:d7:95:1f:bb:b2:3a: 51:a2:f9:99:f5:53:c7:a2:a9:41:54:2c:b0:f0:20: 0c:2d:ab:98:1b:f7:44:4c:96:fd:1c:5a:25:15:2c: 29:4d:09:3f:08:5f:9c:ea:44:be:9d:e5:4c:6b:78: 1e:33:89:e3:5c:63:a1:dc:bc:df:53:44:56:ce:a3: e5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:68:25:20:BB:53:A0:68:CB:25:B7:95:5E:22:14:A5:78:E7:00:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/23b3baed-8530-34bd-9c2a-524d786bb646.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:af:72:7b:90:ae:84:84:b0:72:ff:8e:24:e4:a3:d4:91:8e: b6:fc:72:0e:7b:d6:b5:e5:06:8a:59:c7:49:30:d7:6d:ca:2d: 5c:a9:68:6f:90:f6:20:c3:38:0c:21:9e:30:a1:1c:87:de:35: 50:24:a0:60:95:02:54:f9:2c:eb:63:c5:b9:6d:02:10:a3:23: b1:7d:10:4d:85:c1:5c:b4:fe:e9:f1:65:a0:90:e7:d0:44:20: 75:d2:9b:3a:d1:8f:b2:8e:af:d5:b6:b5:a4:32:e5:85:84:fd: a6:91:07:5b:d6:55:6c:58:0b:dd:4e:0b:37:8f:d4:fa:d5:e8: be:5a:70:51:2d:68:db:42:ae:87:01:5f:8a:38:eb:37:3f:c9: fb:0c:48:13:29:af:6e:04:16:38:bc:6c:86:f1:9b:75:a2:06: 8f:72:08:4c:25:df:b9:26:54:79:ef:a7:83:a2:00:55:e6:45: 81:a3:38:b0:9f:4d:5e:e1:bc:6a:6a:d6:2b:dc:0b:3d:a8:ed: 20:eb:21:77:57:84:88:20:16:0f:72:c8:ef:4f:17:c4:73:bd: 7c:3b:70:b4:d3:3d:4e:44:69:d3:26:fa:51:a6:d1:09:86:b8: 76:f6:ed:16:42:db:d1:88:78:d7:f4:3d:da:26:a7:43:93:48: b8:a2:64:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsD7Jvgtsy3vYLf8mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTA4MTE1MloXDTI1MTEyNzA5MTE1MlowLzEtMCsGA1UEAxMk MGVmYWE4NzctNWEzMC00M2E4LTk4OGYtYzdlZDM2YzhmYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZT7CAqIwO3wlIvmz30hOlaF1rBO5CHwTt9N 2LKl9/ayPnX85QGSMDhmJXFwIlwG9f9cgFRGNXtj+iygE2l1x11VMdNdUnLSo2ZZ qBkQmK+rW4hYQX3KrccPxqEwZ6jmUYWFOMK3OEmT1rAJC4HsOw9IcIKXVxZkXVdO IxB7uyayMuEirksjatZpMEPdFfxr4Rs1VltCfP4KDPXMeTXEHRQyminVqqfFO2hm a435e4WBHVReDy0b6K0+Z4TXlR+7sjpRovmZ9VPHoqlBVCyw8CAMLauYG/dETJb9 HFolFSwpTQk/CF+c6kS+neVMa3geM4njXGOh3LzfU0RWzqPloQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBoJSC7U6BoyyW3lV4iFKV45wCWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjNiM2JhZWQtODUzMC0z NGJkLTljMmEtNTI0ZDc4NmJiNjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWvcnuQroSEsHL/jiTko9SRjrb8cg571rXlBopZx0kw123KLVypaG+Q 9iDDOAwhnjChHIfeNVAkoGCVAlT5LOtjxbltAhCjI7F9EE2FwVy0/unxZaCQ59BE IHXSmzrRj7KOr9W2taQy5YWE/aaRB1vWVWxYC91OCzeP1PrV6L5acFEtaNtCrocB X4o46zc/yfsMSBMpr24EFji8bIbxm3WiBo9yCEwl37kmVHnvp4OiAFXmRYGjOLCf TV7hvGpq1ivcCz2o7SDrIXdXhIggFg9yyO9PF8RzvXw7cLTTPU5EadMm+lGm0QmG uHb27RZC29GIeNf0Pdomp0OTSLiiZFE= -----END CERTIFICATE-----Generated at Fri Sep 5 04:36:03 2025 by rpki-client