$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa File: bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa (raw, json) Hash identifier: 0YjjB62pZ4B+5wXn8r+s0yaqEQNxmCKkRMVc0bt+x38= Subject key identifier: BD:25:36:91:AA:72:0A:DD:EB:F4:16:8C:CC:CF:40:81:55:03:01:A9 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E7634DDAE70A30805DAA0CC40 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 212238 IP address blocks: 104.243.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:dd:ae:70:a3:08:05:da:a0:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=424b7ef3-fbdc-4375-9252-423733e3e78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:64:8d:f8:2c:22:d4:1f:98:f4:17:2f:de: 26:a2:24:b9:1d:a1:07:42:fe:d5:d8:9e:97:ba:18: 5b:40:04:c2:a4:d5:cb:86:eb:c7:66:20:4b:4b:82: b4:1f:33:df:9b:94:98:a1:81:f6:bb:13:ae:80:18: b3:13:1a:60:6a:bf:bd:bf:50:9b:61:20:1c:35:76: 7d:f5:b5:0b:19:2b:bc:05:cd:c4:0d:89:8d:b5:a4: b5:34:96:d3:47:0b:a1:a0:bf:0b:b0:e5:dc:ee:7e: ec:31:80:f6:53:de:4a:c6:4b:ee:d7:4d:c1:20:61: eb:e2:f8:56:9c:af:12:f9:2b:73:97:53:76:c6:9f: 0d:0f:da:ca:c0:05:33:3b:ee:a5:ae:e2:92:a7:23: ab:a9:16:b5:99:e7:85:91:0a:1c:91:a7:1b:20:3c: c4:6c:c0:02:3a:34:45:09:92:24:2a:db:cf:22:d3: a5:aa:66:0f:5c:3a:1a:26:35:f2:3c:cf:13:45:7e: 2e:43:35:14:77:a9:dc:2a:7a:0b:91:a2:98:f0:80: 1b:c6:7e:e3:6c:3c:b2:82:79:2d:0b:e6:89:5e:1a: ac:45:bd:2b:25:c1:9b:68:00:d0:38:f8:e2:39:bd: 56:32:8e:6c:b7:01:74:4d:02:b8:3a:30:a7:0c:f5: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:25:36:91:AA:72:0A:DD:EB:F4:16:8C:CC:CF:40:81:55:03:01:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/bf661fdf-747a-3e47-89c3-b1cbc064c7e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:b2:b8:c5:83:ee:ba:9b:5e:57:b4:c7:0d:fe:a4:41:a3:7a: b5:9c:08:2c:20:41:6f:ed:f9:d1:42:98:c2:db:13:25:e8:c7: fb:f8:d9:33:7d:52:fa:e3:e0:a0:ce:8f:4c:01:6f:cd:ed:29: da:25:c5:6e:45:18:51:b1:43:54:4f:59:15:f9:ef:4f:b1:ec: 49:5e:ff:97:97:dd:86:8d:c2:09:67:8e:93:c2:7d:17:2e:dc: e4:d7:9a:3c:b5:c3:22:6b:1f:5d:d6:d6:6d:20:13:4e:17:f6: 9d:7a:73:f0:d8:9d:f8:09:63:80:91:9d:50:c4:8a:53:9e:04: 0e:bb:95:4c:a5:e8:4d:9e:52:26:d5:03:c7:34:ac:fa:e4:be: 5f:d3:21:41:ad:52:82:8e:1d:bc:44:a2:f5:9b:df:38:30:5c: 70:01:92:69:0e:c8:0e:f5:30:3c:c7:c8:22:68:d1:23:08:17: c8:34:e1:61:3a:8c:28:56:7d:96:40:05:5c:a9:60:2a:74:f9: 91:20:06:b8:cb:e9:b6:68:4d:47:39:97:97:c3:3b:46:8d:f5: ed:9a:7e:0d:a7:c6:94:a1:25:6f:31:96:b7:c0:cf:8e:f0:54: 68:08:e0:ca:07:96:d7:73:6f:01:07:2d:82:5c:e4:0f:84:3d: a0:05:67:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NN2ucKMIBdqgzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk NDI0YjdlZjMtZmJkYy00Mzc1LTkyNTItNDIzNzMzZTNlNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5VkjfgsItQfmPQXL94moiS5HaEHQv7V2J6X uhhbQATCpNXLhuvHZiBLS4K0HzPfm5SYoYH2uxOugBizExpgar+9v1CbYSAcNXZ9 9bULGSu8Bc3EDYmNtaS1NJbTRwuhoL8LsOXc7n7sMYD2U95Kxkvu103BIGHr4vhW nK8S+Stzl1N2xp8ND9rKwAUzO+6lruKSpyOrqRa1meeFkQockacbIDzEbMACOjRF CZIkKtvPItOlqmYPXDoaJjXyPM8TRX4uQzUUd6ncKnoLkaKY8IAbxn7jbDyygnkt C+aJXhqsRb0rJcGbaADQOPjiOb1WMo5stwF0TQK4OjCnDPXFUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0lNpGqcgrd6/QWjMzPQIFVAwGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYmY2NjFmZGYtNzQ3YS0z ZTQ3LTg5YzMtYjFjYmMwNjRjN2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPPzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6yuMWD7rqbXle0xw3+pEGjerWcCCwgQW/t+dFCmMLbEyXox/v42TN9 Uvrj4KDOj0wBb83tKdolxW5FGFGxQ1RPWRX570+x7Ele/5eX3YaNwglnjpPCfRcu 3OTXmjy1wyJrH13W1m0gE04X9p16c/DYnfgJY4CRnVDEilOeBA67lUyl6E2eUibV A8c0rPrkvl/TIUGtUoKOHbxEovWb3zgwXHABkmkOyA71MDzHyCJo0SMIF8g04WE6 jChWfZZABVypYCp0+ZEgBrjL6bZoTUc5l5fDO0aN9e2afg2nxpShJW8xlrfAz47w VGgI4MoHltdzbwEHLYJc5A+EPaAFZ1Q= -----END CERTIFICATE-----Generated at Tue Jul 21 14:56:47 2026 by rpki-client