$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d9b563f-656a-3071-a693-9d00638c267c.roa File: 2d9b563f-656a-3071-a693-9d00638c267c.roa (raw, json) Hash identifier: UJRgJaEc7R8rcQwKX7DdohqudtB7RmsFth+qNQw5WcM= Subject key identifier: A9:51:87:47:B3:C8:DF:54:EE:3A:D2:42:27:E4:4B:7E:ED:85:C7:31 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584EBF6D47DBCE83D8DCC9C4D300 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d9b563f-656a-3071-a693-9d00638c267c.roa Signing time: Thu 06 Aug 2026 14:28:06 +0000 ROA not before: Thu 06 Aug 2026 14:28:06 +0000 ROA not after: Wed 04 Nov 2026 15:28:06 +0000 asID: 399979 IP address blocks: 104.250.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bf:6d:47:db:ce:83:d8:dc:c9:c4:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 6 14:28:06 2026 GMT Not After : Nov 4 15:28:06 2026 GMT Subject: CN=79483c67-13c6-48f2-bf5f-d9345eda0c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:5a:f5:71:e1:c6:9b:d5:0e:5f:c4:18:b7: dc:01:2c:b9:35:62:68:34:2b:47:c2:54:2c:21:17: b1:9d:17:aa:10:0a:34:f0:01:43:86:9d:01:4c:13: 34:45:5b:e1:f3:cf:33:22:cb:77:d5:17:22:35:f7: df:06:6b:32:fe:6f:4c:de:4d:51:c4:e0:12:07:fb: 87:84:18:23:df:47:04:45:59:5e:da:a7:df:c7:fe: d2:8f:4d:d4:c6:4a:34:a5:83:f7:6c:47:60:ce:7d: 03:f7:34:84:2e:be:61:42:93:15:84:ae:63:1a:70: 0e:78:72:06:af:19:e4:d0:20:0c:fb:17:1e:eb:36: 85:a8:7d:13:cb:96:aa:74:a2:ee:7b:8b:95:80:4b: 7a:91:e1:5f:07:f8:33:92:6c:42:37:1f:a0:b1:08: 51:94:8e:42:09:b8:59:0e:24:5b:fc:5c:7d:eb:8c: 29:09:39:05:7d:11:90:34:73:e2:57:63:06:15:5d: 33:90:38:ad:75:81:c0:b1:42:e4:92:8b:4e:59:ae: 5e:9d:37:76:5a:12:f6:4a:b1:b2:9d:60:c2:38:ca: 3c:eb:9c:96:12:aa:00:74:56:0f:7e:a3:11:74:65: 24:ba:8f:3c:cf:72:23:d8:61:86:e4:21:e4:fc:4e: bf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:51:87:47:B3:C8:DF:54:EE:3A:D2:42:27:E4:4B:7E:ED:85:C7:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/2d9b563f-656a-3071-a693-9d00638c267c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:e5:61:79:7b:09:69:f6:a6:b7:de:1f:a6:ee:a4:76:5f:97: 64:85:41:ff:36:2e:ae:7c:84:01:aa:d8:02:26:5c:22:bf:b3: 42:5b:32:20:89:df:50:da:2b:5a:63:fd:15:2b:ff:88:85:77: e5:33:03:ed:16:7f:8b:8e:d6:9a:e7:36:d9:e9:a1:f5:35:f7: 03:9b:5b:30:cb:50:87:bd:b7:a8:08:92:df:1a:1c:b0:94:69: b0:ba:fd:af:06:d2:69:02:77:f3:13:9c:25:bd:ab:12:58:8e: 0d:4d:d2:4b:bc:81:74:73:c1:0e:e3:04:81:f8:0c:3a:84:bb: 08:ab:f7:1a:a0:7b:c0:34:b4:6d:a6:43:b4:cb:b7:ce:29:2b: ea:62:80:ff:6e:8e:bb:d6:82:99:5f:c6:9a:03:1f:ff:d1:60: 00:ba:78:a5:e1:52:15:e5:45:35:0e:d4:d7:1a:23:06:a6:cc: 2a:ce:de:bf:07:6f:8e:46:97:9b:7f:b0:df:b9:6f:28:d4:20: a8:04:fc:1e:6f:98:de:fd:19:af:b6:59:a2:70:1f:f1:6c:16: 6a:91:85:6e:3c:77:4b:fa:52:87:11:40:39:7b:05:7c:f8:36: 84:01:d2:70:c6:b4:c8:a4:d2:9b:c0:39:08:a1:35:24:50:76: cb:26:97:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6/bUfbzoPY3MnE0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDgwNjE0MjgwNloXDTI2MTEwNDE1MjgwNlowLzEtMCsGA1UEAxMk Nzk0ODNjNjctMTNjNi00OGYyLWJmNWYtZDkzNDVlZGEwYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5Ja9XHhxpvVDl/EGLfcASy5NWJoNCtHwlQs IRexnReqEAo08AFDhp0BTBM0RVvh888zIst31RciNfffBmsy/m9M3k1RxOASB/uH hBgj30cERVle2qffx/7Sj03Uxko0pYP3bEdgzn0D9zSELr5hQpMVhK5jGnAOeHIG rxnk0CAM+xce6zaFqH0Ty5aqdKLue4uVgEt6keFfB/gzkmxCNx+gsQhRlI5CCbhZ DiRb/Fx964wpCTkFfRGQNHPiV2MGFV0zkDitdYHAsULkkotOWa5enTd2WhL2SrGy nWDCOMo865yWEqoAdFYPfqMRdGUkuo88z3Ij2GGG5CHk/E6/ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlRh0ezyN9U7jrSQifkS37thccxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMmQ5YjU2M2YtNjU2YS0z MDcxLWE2OTMtOWQwMDYzOGMyNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADblYXl7CWn2prfeH6bupHZfl2SFQf82Lq58hAGq2AImXCK/s0JbMiCJ 31DaK1pj/RUr/4iFd+UzA+0Wf4uO1prnNtnpofU19wObWzDLUIe9t6gIkt8aHLCU abC6/a8G0mkCd/MTnCW9qxJYjg1N0ku8gXRzwQ7jBIH4DDqEuwir9xqge8A0tG2m Q7TLt84pK+pigP9ujrvWgplfxpoDH//RYAC6eKXhUhXlRTUO1NcaIwamzCrO3r8H b45Gl5t/sN+5byjUIKgE/B5vmN79Ga+2WaJwH/FsFmqRhW48d0v6UocRQDl7BXz4 NoQB0nDGtMik0pvAOQihNSRQdssmlyU= -----END CERTIFICATE-----Generated at Fri Aug 21 03:28:42 2026 by rpki-client