$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c13f7048-dce7-3f22-bead-054f7722b7d6.roa File: c13f7048-dce7-3f22-bead-054f7722b7d6.roa (raw, json) Hash identifier: KQBBf14VUr5iCVm+BHdEoPWCmm1SEKh32Xi50Vr6nh8= Subject key identifier: 5B:19:0B:B7:A7:1E:42:9E:F1:73:C4:F3:B8:B9:89:6D:83:64:79:01 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B0746D5030072BC116D28A800 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c13f7048-dce7-3f22-bead-054f7722b7d6.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 215939 IP address blocks: 104.37.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d5:03:00:72:bc:11:6d:28:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=0c4efc75-8626-4d79-aee5-361dff6a51cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:74:6e:79:9f:79:2b:bc:ca:5a:d4:fc:16: cd:ea:32:b0:4e:bd:0b:7c:e9:60:d4:9a:3c:cf:e3: 5f:fe:e5:78:ae:0a:a1:0c:a7:54:49:36:89:38:3c: 5c:af:81:17:04:39:b5:7c:1c:1b:77:98:83:79:e7: 2b:54:68:56:22:9e:ca:7a:8a:bd:36:4c:54:21:09: 51:b7:b6:2d:20:1a:8f:8a:1f:16:26:5f:b3:60:13: d2:bf:fb:9c:26:88:96:4d:18:5f:88:71:17:2c:e9: b0:0c:41:00:aa:15:13:c2:a4:34:83:90:6f:7d:9b: b1:76:6a:ff:16:8f:3a:65:64:43:78:b6:90:eb:4d: d6:96:b3:21:59:d5:56:96:7e:61:0c:aa:cb:1f:a3: 6f:ea:96:7d:cb:ae:1e:d3:93:98:ca:b3:06:53:43: b0:4b:44:95:48:be:94:8a:e7:67:54:e8:33:7a:55: c7:bc:fb:72:a7:7d:c8:7e:fa:91:07:77:40:60:50: 97:51:98:04:93:89:19:25:27:29:c5:6e:bf:07:92: c6:d0:b5:04:7e:e8:97:8f:d5:b2:3c:07:71:ef:44: 06:db:3a:fe:15:77:91:d5:21:a0:6a:2c:4a:47:52: 53:ee:9a:90:31:64:ff:87:dc:ed:84:7b:bb:f5:ec: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:19:0B:B7:A7:1E:42:9E:F1:73:C4:F3:B8:B9:89:6D:83:64:79:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c13f7048-dce7-3f22-bead-054f7722b7d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.37.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0b:97:8f:6d:0f:ed:18:a5:40:72:f8:ac:c9:47:05:a2:07: e9:cd:8a:21:ab:44:8f:b9:5e:ae:73:a7:cd:9b:0e:ea:db:9e: 79:03:a9:19:f2:11:3a:8d:e1:d7:aa:6c:a3:e3:9a:18:df:b4: d0:7e:26:76:4b:b2:f4:c1:f8:3e:e6:c8:82:f0:c0:2a:5a:d5: 7c:a8:35:3f:e2:76:d4:c6:3a:d7:ff:99:10:9e:41:bb:d4:2d: 71:a3:12:4e:42:c5:a7:44:84:0b:dd:0e:33:e5:e6:02:35:61: ac:a6:b5:8a:ba:9f:f1:2c:95:e3:a7:e9:9a:8e:30:ce:00:80: c8:aa:ca:4b:06:a7:74:88:e7:62:d7:8a:b2:d1:32:56:6a:7d: 0a:06:09:5b:a5:52:b2:63:56:76:fb:27:63:f7:a9:36:b9:dc: e6:98:d8:54:b4:72:c2:80:ad:95:a1:e4:6b:99:ab:65:a3:52: a7:fa:58:c8:70:bd:d3:83:0b:cc:2d:8e:62:51:90:4e:25:4e: 29:10:ee:48:d3:54:c5:68:fb:62:cb:f6:e2:60:a5:2a:d4:1e: 5d:4e:66:ba:fc:2a:ee:60:35:17:2f:18:d9:a6:81:fd:1b:6a: ca:4c:1f:79:29:1a:66:c0:2c:03:57:5d:b0:ae:69:fc:0d:ac: 88:1b:0f:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsHRtUDAHK8EW0oqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk MGM0ZWZjNzUtODYyNi00ZDc5LWFlZTUtMzYxZGZmNmE1MWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ix0bnmfeSu8ylrU/BbN6jKwTr0LfOlg1Jo8 z+Nf/uV4rgqhDKdUSTaJODxcr4EXBDm1fBwbd5iDeecrVGhWIp7Keoq9NkxUIQlR t7YtIBqPih8WJl+zYBPSv/ucJoiWTRhfiHEXLOmwDEEAqhUTwqQ0g5BvfZuxdmr/ Fo86ZWRDeLaQ603WlrMhWdVWln5hDKrLH6Nv6pZ9y64e05OYyrMGU0OwS0SVSL6U iudnVOgzelXHvPtyp33IfvqRB3dAYFCXUZgEk4kZJScpxW6/B5LG0LUEfuiXj9Wy PAdx70QG2zr+FXeR1SGgaixKR1JT7pqQMWT/h9zthHu79ezLhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsZC7enHkKe8XPE87i5iW2DZHkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzEzZjcwNDgtZGNlNy0z ZjIyLWJlYWQtMDU0Zjc3MjJiN2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaCUBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABELl49tD+0YpUBy+KzJRwWiB+nNiiGrRI+5Xq5zp82bDurbnnkDqRny ETqN4deqbKPjmhjftNB+JnZLsvTB+D7myILwwCpa1XyoNT/idtTGOtf/mRCeQbvU LXGjEk5CxadEhAvdDjPl5gI1YaymtYq6n/EsleOn6ZqOMM4AgMiqyksGp3SI52LX irLRMlZqfQoGCVulUrJjVnb7J2P3qTa53OaY2FS0csKArZWh5GuZq2WjUqf6WMhw vdODC8wtjmJRkE4lTikQ7kjTVMVo+2LL9uJgpSrUHl1OZrr8Ku5gNRcvGNmmgf0b aspMH3kpGmbALANXXbCuafwNrIgbDyw= -----END CERTIFICATE-----Generated at Sun Sep 7 12:35:21 2025 by rpki-client