$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d917871-23d5-31bd-96d3-70ee864dc5dc.roa File: 2d917871-23d5-31bd-96d3-70ee864dc5dc.roa (raw, json) Hash identifier: QUnk3I53fMhmmYVmj+8E1E5Gdo8+p9SUslxpuWpGG1o= Subject key identifier: E8:DF:97:0F:26:85:D0:E1:4A:A1:AE:7F:B9:A9:DB:6A:96:04:97:78 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B395B6D642AE3EF5ACE187300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d917871-23d5-31bd-96d3-70ee864dc5dc.roa Signing time: Wed 17 Sep 2025 11:32:59 +0000 ROA not before: Wed 17 Sep 2025 11:32:59 +0000 ROA not after: Tue 16 Dec 2025 12:32:59 +0000 asID: 9009 IP address blocks: 104.37.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:5b:6d:64:2a:e3:ef:5a:ce:18:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 17 11:32:59 2025 GMT Not After : Dec 16 12:32:59 2025 GMT Subject: CN=f4e9d5c6-1e56-4742-8cb5-aca9cb715090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:58:fd:71:73:27:dc:2f:b6:af:e1:61:96: 89:3d:6a:b0:22:ea:e4:18:81:f6:5d:28:53:02:6a: 3c:bd:39:13:16:ce:fd:1d:9f:38:99:d1:ce:3b:a9: 48:98:f5:d3:87:4a:56:c8:ef:ed:f5:53:b9:fb:0c: 7f:72:6e:37:06:d3:b6:2c:bd:40:40:87:71:e3:f5: bd:8f:d9:f3:d3:70:bb:79:1b:61:fc:8b:f8:76:7b: d7:fc:c7:53:78:6b:80:27:19:6b:94:9a:f7:1e:c6: 05:09:4d:be:e5:a9:4f:5b:35:aa:eb:4a:78:78:85: fb:d9:c9:97:9c:2c:ea:f6:f4:b2:c7:c1:39:02:9e: 6a:d8:f7:5f:9b:bb:0e:e1:20:1d:7f:e1:59:76:08: 5b:18:a8:38:81:79:cb:dd:f4:48:4e:02:5c:00:3c: 88:81:cb:2c:3d:e4:39:dc:16:f6:f7:4b:0d:23:f1: 82:d8:02:8e:a4:54:f2:4e:1e:89:8d:78:e6:3a:b9: 9c:7a:56:e9:de:76:28:1b:fe:d0:df:86:12:dc:95: f2:81:9c:5f:0c:61:89:00:14:f4:83:1d:0e:d3:3c: 77:bf:20:6d:9f:7d:2b:a9:ec:8b:1c:39:e1:f0:3c: f7:82:89:94:d2:3d:a8:79:ef:1d:75:42:b4:be:fd: e0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DF:97:0F:26:85:D0:E1:4A:A1:AE:7F:B9:A9:DB:6A:96:04:97:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d917871-23d5-31bd-96d3-70ee864dc5dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6a:54:37:95:c0:a1:4b:b6:de:e8:f1:30:d2:d2:c0:ca:02: e8:27:9d:d1:82:3f:fe:cf:c1:a5:66:d1:22:20:c4:03:86:67: a8:8c:1e:94:02:d6:08:5d:69:9c:6c:a7:50:23:63:0c:33:f3: a5:f6:a5:03:56:5f:43:90:08:a6:8e:8e:0e:2f:82:f6:d9:cd: f3:ee:08:43:b8:8f:87:65:7d:43:c6:3b:2b:fe:05:b3:00:a0: e8:0a:1a:62:8e:86:d0:45:d7:cf:ed:98:5c:f2:c9:e6:65:14: c5:9f:ba:cb:31:b7:39:e9:4b:1d:5f:8c:fd:6b:8b:e1:5e:fa: 33:8e:31:f8:84:5c:27:d9:6d:87:aa:82:44:02:bc:1d:36:4a: fc:cc:76:41:ce:d6:de:45:ac:c1:21:43:db:7d:19:b8:ab:d7: 7b:dd:45:07:b9:63:d1:c7:c7:2a:47:ab:5e:d5:83:b0:99:52: d7:c1:c3:a7:99:62:30:f8:b0:ce:6d:4e:61:95:83:37:0e:88: 8b:75:16:75:fc:c0:d1:54:bd:fd:9a:4b:1f:bd:f7:bb:0b:1d: a8:68:2f:3f:6b:fb:60:3b:3f:ce:ee:6b:0e:43:9e:c3:46:de: a6:f4:5d:9d:6e:76:e7:cd:af:40:c6:60:2e:21:b8:7b:69:2a: 77:df:a9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5W21kKuPvWs4YcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkxNzExMzI1OVoXDTI1MTIxNjEyMzI1OVowLzEtMCsGA1UEAxMk ZjRlOWQ1YzYtMWU1Ni00NzQyLThjYjUtYWNhOWNiNzE1MDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpVY/XFzJ9wvtq/hYZaJPWqwIurkGIH2XShT Amo8vTkTFs79HZ84mdHOO6lImPXTh0pWyO/t9VO5+wx/cm43BtO2LL1AQIdx4/W9 j9nz03C7eRth/Iv4dnvX/MdTeGuAJxlrlJr3HsYFCU2+5alPWzWq60p4eIX72cmX nCzq9vSyx8E5Ap5q2Pdfm7sO4SAdf+FZdghbGKg4gXnL3fRITgJcADyIgcssPeQ5 3Bb290sNI/GC2AKOpFTyTh6JjXjmOrmcelbp3nYoG/7Q34YS3JXygZxfDGGJABT0 gx0O0zx3vyBtn30rqeyLHDnh8Dz3gomU0j2oee8ddUK0vv3g4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjflw8mhdDhSqGuf7mp22qWBJd4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmQ5MTc4NzEtMjNkNS0z MWJkLTk2ZDMtNzBlZTg2NGRjNWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5qVDeVwKFLtt7o8TDS0sDKAugnndGCP/7PwaVm0SIgxAOGZ6iMHpQC 1ghdaZxsp1AjYwwz86X2pQNWX0OQCKaOjg4vgvbZzfPuCEO4j4dlfUPGOyv+BbMA oOgKGmKOhtBF18/tmFzyyeZlFMWfussxtznpSx1fjP1ri+Fe+jOOMfiEXCfZbYeq gkQCvB02SvzMdkHO1t5FrMEhQ9t9Gbir13vdRQe5Y9HHxypHq17Vg7CZUtfBw6eZ YjD4sM5tTmGVgzcOiIt1FnX8wNFUvf2aSx+997sLHahoLz9r+2A7P87uaw5DnsNG 3qb0XZ1udufNr0DGYC4huHtpKnffqVE= -----END CERTIFICATE-----Generated at Sun Oct 19 07:05:52 2025 by rpki-client