$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4a17ecfd-e46a-3720-9f9d-b6614bc4488a.roa File: 4a17ecfd-e46a-3720-9f9d-b6614bc4488a.roa (raw, json) Hash identifier: khkF1hDQ8C47KjIBCKd5hpJW/e59zuySZfuDcs/PnZs= Subject key identifier: 44:4C:A6:9E:50:E7:72:86:CC:D6:FB:5C:13:E6:4A:5C:AC:86:99:D2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B51F4D420697AC9E16C5F7000 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4a17ecfd-e46a-3720-9f9d-b6614bc4488a.roa Signing time: Fri 26 Sep 2025 07:01:29 +0000 ROA not before: Fri 26 Sep 2025 07:01:29 +0000 ROA not after: Thu 25 Dec 2025 08:01:29 +0000 asID: 9009 IP address blocks: 104.250.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:f4:d4:20:69:7a:c9:e1:6c:5f:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 26 07:01:29 2025 GMT Not After : Dec 25 08:01:29 2025 GMT Subject: CN=52b993f7-97ff-4e35-a8ca-7b37d9e69266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:97:78:6e:fb:14:b5:e9:e8:15:4e:2b:3a:a2: 69:09:7d:89:03:57:08:89:0b:6b:cd:70:f4:84:d6: b9:e4:de:3e:5a:fb:44:00:89:7e:50:01:ad:83:79: c7:6f:da:56:3b:db:b6:88:00:92:f3:d9:49:27:57: 54:b1:8a:2a:85:05:f3:a4:41:41:7d:b9:88:37:af: 60:85:06:37:ec:84:ef:1c:b8:41:d0:fc:b0:e6:d0: 1b:24:15:fd:2e:0d:7e:1f:d4:3b:5d:0b:82:38:32: ab:6b:2f:e2:51:a6:c4:d9:a9:f9:32:8f:87:39:40: 91:8a:21:47:6f:61:1a:58:23:6f:d3:14:60:8c:4e: 40:90:52:e6:ef:24:82:89:36:1e:ee:09:3a:74:7f: fa:94:7b:9c:36:4e:04:08:cd:27:71:dc:36:43:32: c3:24:32:52:a9:4a:a7:e1:0d:ad:a8:f1:00:a8:be: 53:ca:43:af:4a:e1:96:a4:f6:93:f0:48:7e:c3:a9: f8:42:da:f5:b7:0c:41:44:53:ba:70:dd:75:4a:b4: ad:46:13:60:55:76:92:37:81:c6:3d:35:c2:68:62: 6f:bf:82:fb:f0:75:19:42:bc:8e:ff:7f:8a:a0:5f: 33:e7:d2:b1:65:31:8b:b1:57:02:33:3e:7d:d3:9d: 7e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4C:A6:9E:50:E7:72:86:CC:D6:FB:5C:13:E6:4A:5C:AC:86:99:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4a17ecfd-e46a-3720-9f9d-b6614bc4488a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f5:27:bc:01:c0:7b:f1:12:df:af:85:b1:08:f3:0a:a4:36: ea:60:70:25:81:2e:3a:00:ee:4c:9a:58:2f:ae:2d:00:ae:60: 1d:38:0d:57:7f:99:84:49:fe:c7:e8:9b:57:12:3b:e8:99:c9: fa:d0:16:e2:90:4e:bf:78:9c:8b:b3:9a:4a:bb:75:e1:36:73: b8:cc:6b:de:7b:30:18:f2:71:02:60:a4:4b:a7:47:55:62:0d: 4f:24:6e:ed:4e:4a:a4:17:3d:86:35:d9:ef:39:9e:f4:39:4c: 14:2d:7b:6d:08:cc:21:65:b0:53:a1:50:89:73:1d:96:30:98: 16:7e:87:c6:41:b3:b9:68:36:fd:71:bf:04:af:1a:ee:08:05: ed:12:28:2c:8c:6f:4b:27:aa:d1:19:e9:22:12:26:84:d9:04: 79:38:98:ea:12:1a:9b:1d:32:24:15:e6:03:2f:a8:9b:c9:af: 2b:de:ce:77:56:dc:b3:d3:56:84:76:47:85:4b:7c:43:b3:ce: 36:b7:b6:cb:65:b5:87:9c:88:46:c5:11:98:74:c5:15:9e:64: 78:57:6d:49:dd:c8:ec:92:2b:81:fa:93:0e:b9:7f:fa:d1:6b: 0f:30:59:cb:53:4d:65:5e:e5:26:58:fe:57:c9:88:e3:7e:14: c9:8a:ab:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtR9NQgaXrJ4WxfcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkyNjA3MDEyOVoXDTI1MTIyNTA4MDEyOVowLzEtMCsGA1UEAxMk NTJiOTkzZjctOTdmZi00ZTM1LWE4Y2EtN2IzN2Q5ZTY5MjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJd4bvsUtenoFU4rOqJpCX2JA1cIiQtrzXD0 hNa55N4+WvtEAIl+UAGtg3nHb9pWO9u2iACS89lJJ1dUsYoqhQXzpEFBfbmIN69g hQY37ITvHLhB0Pyw5tAbJBX9Lg1+H9Q7XQuCODKray/iUabE2an5Mo+HOUCRiiFH b2EaWCNv0xRgjE5AkFLm7ySCiTYe7gk6dH/6lHucNk4ECM0ncdw2QzLDJDJSqUqn 4Q2tqPEAqL5TykOvSuGWpPaT8Eh+w6n4Qtr1twxBRFO6cN11SrStRhNgVXaSN4HG PTXCaGJvv4L78HUZQryO/3+KoF8z59KxZTGLsVcCMz59051+vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERMpp5Q53KGzNb7XBPmSlyshpnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNGExN2VjZmQtZTQ2YS0z NzIwLTlmOWQtYjY2MTRiYzQ0ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf1J7wBwHvxEt+vhbEI8wqkNupgcCWBLjoA7kyaWC+uLQCuYB04DVd/ mYRJ/sfom1cSO+iZyfrQFuKQTr94nIuzmkq7deE2c7jMa957MBjycQJgpEunR1Vi DU8kbu1OSqQXPYY12e85nvQ5TBQte20IzCFlsFOhUIlzHZYwmBZ+h8ZBs7loNv1x vwSvGu4IBe0SKCyMb0snqtEZ6SISJoTZBHk4mOoSGpsdMiQV5gMvqJvJryvezndW 3LPTVoR2R4VLfEOzzja3tstltYeciEbFEZh0xRWeZHhXbUndyOySK4H6kw65f/rR aw8wWctTTWVe5SZY/lfJiON+FMmKq+4= -----END CERTIFICATE-----Generated at Sun Oct 19 07:08:05 2025 by rpki-client