$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/74897c9f-c672-36e4-8f5e-43567db6cc83.roa File: 74897c9f-c672-36e4-8f5e-43567db6cc83.roa (raw, json) Hash identifier: eXKe598pnOt0R5RbUSKy3R2ASks5r+bawhKABWfZrcQ= Subject key identifier: EC:6D:4D:F4:0A:96:F9:52:76:59:61:02:D5:C0:AD:3B:17:F5:E4:0B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B15362C5B1CE1E96BB3B07600 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/74897c9f-c672-36e4-8f5e-43567db6cc83.roa Signing time: Thu 04 Sep 2025 12:48:50 +0000 ROA not before: Thu 04 Sep 2025 12:48:50 +0000 ROA not after: Wed 03 Dec 2025 13:48:50 +0000 asID: 208185 IP address blocks: 104.250.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:36:2c:5b:1c:e1:e9:6b:b3:b0:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Sep 4 12:48:50 2025 GMT Not After : Dec 3 13:48:50 2025 GMT Subject: CN=aef3d081-7692-43cc-9ba6-6c5b3106bb8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c1:26:42:26:66:7d:c3:bd:3e:d9:ed:47:c0: 9d:ed:a9:b5:30:88:5f:02:29:c3:04:66:9e:3a:e6: ea:8d:23:b5:59:86:d4:00:fd:56:a3:a2:41:0b:c1: b9:47:06:a0:7a:e3:8e:88:17:0a:cb:06:62:8d:a8: 26:a3:0f:5d:85:cc:49:8c:d0:26:22:5e:77:cb:0d: c6:62:61:0d:75:fb:4d:23:6d:e8:7a:81:8c:8b:b8: 0a:73:62:d9:26:09:bc:6a:37:8a:e0:b9:a5:b4:f0: 12:57:0b:5d:06:69:f8:e5:ef:4d:14:43:08:ea:68: 77:28:c7:d2:ba:ad:eb:7c:f3:19:2c:92:91:2f:6d: e4:10:11:6e:0b:aa:88:84:83:d0:69:27:33:e5:b7: 81:b7:76:23:9b:ae:3f:08:c1:07:51:0d:44:cd:d0: b5:d4:49:1a:44:e6:43:73:13:9c:c3:48:4e:8c:70: 18:a1:e1:9d:8f:fd:34:5b:b1:c1:45:c1:bc:d5:37: 8e:c0:0c:59:1c:8d:cc:39:bf:6a:56:95:c5:61:11: d7:fb:33:55:0d:80:a5:7e:ab:03:86:bb:7e:c7:17: 57:68:be:5b:05:c6:26:10:f3:d8:8d:e5:70:cc:d7: fc:f4:5d:d3:9e:2f:32:b9:13:ef:a7:87:69:4f:fc: 23:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6D:4D:F4:0A:96:F9:52:76:59:61:02:D5:C0:AD:3B:17:F5:E4:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/74897c9f-c672-36e4-8f5e-43567db6cc83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.250.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ce:50:59:ca:cc:ac:01:a4:94:fd:9f:17:74:f1:7b:d0:5e: 66:4e:1f:4b:ff:a2:93:68:da:ac:97:73:0b:a8:d6:e3:17:f7: d0:81:02:7b:e6:b3:bc:36:86:5a:bc:33:72:cc:ee:5a:6a:b6: b7:b3:9e:ec:b2:09:8b:cd:ab:7b:56:2d:05:bb:89:23:68:e4: 63:1a:6f:b4:33:d8:3a:5b:40:9a:35:fa:50:dc:20:51:c1:b1: 69:58:c8:65:c3:9f:e4:a9:32:d3:1e:80:86:1a:1a:59:08:9a: e3:1b:23:a7:2b:d2:b7:b3:b2:b2:1a:f8:4d:84:4e:72:b1:ac: 0f:22:7e:bd:9b:0e:c9:e7:89:ad:86:bb:da:aa:72:c4:5f:c6: 48:e6:03:27:15:b2:7e:de:1c:8e:55:78:4a:43:bd:f8:20:58: 20:cf:84:7d:0a:80:23:70:3f:b0:c0:97:40:8c:2e:e7:c4:d7: 7c:12:96:e9:2f:03:f8:f7:12:65:39:37:6c:23:d9:ba:7c:9a: ef:f0:65:94:2b:fc:56:7f:f2:c3:85:04:f5:c9:f0:97:71:d0: f5:ae:cc:fc:57:ce:ea:36:20:f4:a6:f7:e4:af:5c:e6:f4:b7: 51:c0:21:90:49:c1:87:77:6b:ea:32:18:4e:b2:19:7d:af:4b: f4:17:64:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVNixbHOHpa7OwdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDkwNDEyNDg1MFoXDTI1MTIwMzEzNDg1MFowLzEtMCsGA1UEAxMk YWVmM2QwODEtNzY5Mi00M2NjLTliYTYtNmM1YjMxMDZiYjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMEmQiZmfcO9PtntR8Cd7am1MIhfAinDBGae OubqjSO1WYbUAP1Wo6JBC8G5RwageuOOiBcKywZijagmow9dhcxJjNAmIl53yw3G YmENdftNI23oeoGMi7gKc2LZJgm8ajeK4LmltPASVwtdBmn45e9NFEMI6mh3KMfS uq3rfPMZLJKRL23kEBFuC6qIhIPQaScz5beBt3Yjm64/CMEHUQ1EzdC11EkaROZD cxOcw0hOjHAYoeGdj/00W7HBRcG81TeOwAxZHI3MOb9qVpXFYRHX+zNVDYClfqsD hrt+xxdXaL5bBcYmEPPYjeVwzNf89F3Tni8yuRPvp4dpT/wj8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxtTfQKlvlSdllhAtXArTsX9eQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNzQ4OTdjOWYtYzY3Mi0z NmU0LThmNWUtNDM1NjdkYjZjYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnOUFnKzKwBpJT9nxd08XvQXmZOH0v/opNo2qyXcwuo1uMX99CBAnvm s7w2hlq8M3LM7lpqtreznuyyCYvNq3tWLQW7iSNo5GMab7Qz2DpbQJo1+lDcIFHB sWlYyGXDn+SpMtMegIYaGlkImuMbI6cr0rezsrIa+E2ETnKxrA8ifr2bDsnnia2G u9qqcsRfxkjmAycVsn7eHI5VeEpDvfggWCDPhH0KgCNwP7DAl0CMLufE13wSlukv A/j3EmU5N2wj2bp8mu/wZZQr/FZ/8sOFBPXJ8Jdx0PWuzPxXzuo2IPSm9+SvXOb0 t1HAIZBJwYd3a+oyGE6yGX2vS/QXZIw= -----END CERTIFICATE-----Generated at Sun Sep 7 08:55:45 2025 by rpki-client