$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa File: 49983501-5530-3388-b854-3db6d5ede801.roa (raw, json) Hash identifier: F5QBDA2jXKrPNLwgUvjUo75Gwwgl3P3pSh+5DRF8yf0= Subject key identifier: 71:F8:05:AC:50:98:DE:8F:27:AE:97:36:85:87:86:3B:7A:10:69:0E Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AFB3684FADE811D1CA642AA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa Signing time: Tue 26 Aug 2025 05:18:30 +0000 ROA not before: Tue 26 Aug 2025 05:18:30 +0000 ROA not after: Mon 24 Nov 2025 06:18:30 +0000 asID: 216314 IP address blocks: 104.250.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fb:36:84:fa:de:81:1d:1c:a6:42:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 26 05:18:30 2025 GMT Not After : Nov 24 06:18:30 2025 GMT Subject: CN=1f155672-7bee-4305-9577-09b3ebb464d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:e6:16:b2:80:a6:86:98:f6:d2:61:d3:d7: fe:7d:74:ba:a9:36:47:5b:89:b6:46:0b:2c:24:ac: 99:08:de:bc:fd:9b:07:f3:ef:85:3c:fa:b8:25:49: 4f:7c:e5:73:71:f9:a0:f4:47:d1:c9:ec:63:86:e7: ed:b9:bd:74:70:d2:d7:76:4f:8f:18:37:ac:07:a5: 0e:ae:6b:68:ea:f8:03:d5:78:04:6f:f5:e6:10:2c: d6:71:1b:4c:f1:79:ab:7a:43:c5:bd:8b:9b:97:9c: 1e:0c:4b:36:6f:33:13:39:4a:00:be:06:91:eb:f1: b8:b6:9e:2a:e5:f1:84:c0:bf:25:fc:36:a1:91:73: 91:02:1e:36:2d:29:e3:42:4f:1f:59:15:b3:20:3a: 28:3d:2c:bb:17:71:da:e2:12:02:6e:89:85:42:da: 76:fd:35:4e:2f:22:20:91:a7:96:8f:eb:77:5c:5f: db:a1:52:f8:b9:bb:0f:75:7c:57:84:82:16:9d:62: 4a:f2:fc:75:a1:90:d0:84:bf:3d:65:35:cf:eb:f3: e8:20:e8:c1:98:7f:54:dd:eb:dd:69:3f:d3:bf:4c: 8d:f2:0e:e4:72:6a:25:ac:92:25:59:80:79:b4:35: db:cc:01:3e:dc:ab:2a:ce:67:3c:0f:e6:23:fb:92: 4d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F8:05:AC:50:98:DE:8F:27:AE:97:36:85:87:86:3B:7A:10:69:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/49983501-5530-3388-b854-3db6d5ede801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8d:74:59:45:3a:6b:ad:25:38:28:b9:d1:3e:66:24:ad:1e: 3f:12:a6:07:8d:e4:72:5b:78:8e:65:b8:bd:7b:b5:3c:d5:82: 71:dd:b8:d9:a9:f6:38:18:29:6a:c9:ca:1a:b0:ab:f2:b0:83: 0c:c2:9b:76:24:81:b0:f0:56:5c:91:f1:61:e0:17:d7:36:34: 00:15:4b:44:03:07:36:e5:8a:ea:f6:17:9f:17:41:13:fc:77: 10:79:6d:3d:86:ff:5f:ab:ba:9d:d0:bb:81:ad:9d:11:a2:83: 16:fc:d3:86:4b:ba:4f:f9:db:8d:f6:ad:a5:0c:c9:24:5b:bb: c1:92:83:be:9a:ea:3f:7a:47:d7:df:62:fb:54:e3:b2:b1:4c: 24:96:e0:bd:d2:e6:ec:fc:02:85:2a:0c:e6:76:e6:50:0b:5f: 22:11:74:ef:1e:eb:15:00:f6:2d:4b:fd:f6:f6:bd:61:ea:99: 72:13:1d:bb:8d:fd:bf:5d:ed:97:0d:e5:fe:a6:44:4e:62:7c: ca:dd:1b:90:be:6d:98:6d:b3:51:14:80:e0:d1:3e:d1:38:12: 1d:35:a8:28:46:13:db:89:ea:12:19:a4:1f:71:da:5f:41:c6: 76:57:f7:01:7d:a7:c7:99:16:52:c4:42:71:11:6f:63:e7:86: 35:33:2b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr7NoT63oEdHKZCqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyNjA1MTgzMFoXDTI1MTEyNDA2MTgzMFowLzEtMCsGA1UEAxMk MWYxNTU2NzItN2JlZS00MzA1LTk1NzctMDliM2ViYjQ2NGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir7mFrKApoaY9tJh09f+fXS6qTZHW4m2Rgss JKyZCN68/ZsH8++FPPq4JUlPfOVzcfmg9EfRyexjhuftub10cNLXdk+PGDesB6UO rmto6vgD1XgEb/XmECzWcRtM8XmrekPFvYubl5weDEs2bzMTOUoAvgaR6/G4tp4q 5fGEwL8l/DahkXORAh42LSnjQk8fWRWzIDooPSy7F3Ha4hICbomFQtp2/TVOLyIg kaeWj+t3XF/boVL4ubsPdXxXhIIWnWJK8vx1oZDQhL89ZTXP6/PoIOjBmH9U3evd aT/Tv0yN8g7kcmolrJIlWYB5tDXbzAE+3Ksqzmc8D+Yj+5JN+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHH4BaxQmN6PJ66XNoWHhjt6EGkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDk5ODM1MDEtNTUzMC0z Mzg4LWI4NTQtM2RiNmQ1ZWRlODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6NdFlFOmutJTgoudE+ZiStHj8SpgeN5HJbeI5luL17tTzVgnHduNmp 9jgYKWrJyhqwq/KwgwzCm3YkgbDwVlyR8WHgF9c2NAAVS0QDBzbliur2F58XQRP8 dxB5bT2G/1+rup3Qu4GtnRGigxb804ZLuk/52432raUMySRbu8GSg76a6j96R9ff YvtU47KxTCSW4L3S5uz8AoUqDOZ25lALXyIRdO8e6xUA9i1L/fb2vWHqmXITHbuN /b9d7ZcN5f6mRE5ifMrdG5C+bZhts1EUgODRPtE4Eh01qChGE9uJ6hIZpB9x2l9B xnZX9wF9p8eZFlLEQnERb2PnhjUzK6k= -----END CERTIFICATE-----Generated at Sun Sep 7 12:41:53 2025 by rpki-client