$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa File: f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa (raw, json) Hash identifier: gbQoGr1VR1TSRTZ75XLCVqEeKAgiy2pcVgYr3Y6sgk4= Subject key identifier: 93:38:7F:B1:E3:05:0A:C6:59:33:9F:D1:D8:F3:44:E4:0A:0A:B0:01 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B049F7F32677D305CB50B3840 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa Signing time: Fri 29 Aug 2025 14:12:18 +0000 ROA not before: Fri 29 Aug 2025 14:12:18 +0000 ROA not after: Thu 27 Nov 2025 15:12:18 +0000 asID: 396356 IP address blocks: 104.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:9f:7f:32:67:7d:30:5c:b5:0b:38:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 29 14:12:18 2025 GMT Not After : Nov 27 15:12:18 2025 GMT Subject: CN=0ce49f12-2486-45cb-9130-97cf0cbc4267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:3c:cb:84:2b:2c:69:82:8b:0d:29:63:f2: 4d:59:bf:bf:64:e6:0e:5d:26:84:09:04:df:f5:1d: 6b:86:51:27:73:d0:54:65:21:c5:39:6c:64:72:50: 8d:91:82:ff:9a:86:a9:a5:47:d5:1c:5b:21:73:e5: cd:15:1b:92:ac:ed:b0:64:8c:c6:6d:6a:db:7f:a8: bb:17:c2:ac:53:87:35:c5:a5:68:a7:53:52:bc:40: 9c:1d:29:d9:4b:33:2e:91:87:b4:e0:56:2e:94:b7: fe:de:e4:37:02:f3:5a:1d:ac:e3:5b:a4:8d:c5:f2: 17:68:ea:fd:52:5c:55:9a:72:53:62:ce:4e:b7:b6: 3f:ff:cd:39:f3:7f:55:5c:92:01:31:8b:d9:33:e5: 06:43:30:d6:4a:d2:9d:31:4a:1b:fb:d8:e6:78:f4: 23:69:4b:c9:84:69:f3:22:72:a3:b2:e7:4e:95:65: 35:7a:d7:61:b8:61:3a:c1:59:44:3d:28:9b:25:b5: 22:40:7d:0b:e6:04:06:c8:a6:a1:bd:e2:f6:1c:37: 02:d2:6e:fc:b1:e8:2b:1e:8c:fc:ce:6a:04:62:f8: 68:e5:ce:25:8a:3f:7c:2b:7e:04:d2:0a:82:3a:a7: 28:46:2e:86:f2:10:a5:18:a6:62:3e:99:95:85:8a: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:38:7F:B1:E3:05:0A:C6:59:33:9F:D1:D8:F3:44:E4:0A:0A:B0:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/f4cc3021-ec93-3fdf-91cf-69f8b818fc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 104.243.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e7:9e:b6:0c:ee:71:f4:45:4b:77:32:a0:ab:42:38:fe:0b: e3:af:d6:bc:f1:b5:0b:5a:30:3d:c4:cf:82:12:c1:c3:49:0a: 1a:0b:49:4a:b6:13:5e:28:19:cc:3d:dc:5a:94:52:ee:f2:63: 01:40:df:1d:8e:ef:b8:65:15:16:1e:84:44:6e:49:2e:f7:76: fb:85:42:5f:48:65:33:7f:1e:10:b1:59:d6:ea:fc:91:7c:b5: a5:d9:65:b0:ce:3e:67:a9:f7:02:8b:c0:63:f5:94:6c:28:3c: 13:3c:74:ff:1f:c6:86:62:d5:b8:00:81:4d:a1:79:a8:95:54: 2a:41:12:a3:b4:a0:cb:42:1a:b4:be:30:e8:48:24:31:b4:17: f2:67:45:aa:56:3c:3d:34:f7:89:0b:9c:62:13:a5:c8:85:e1: 9d:96:99:07:61:ee:d6:ab:3b:bf:73:db:39:20:11:72:7c:af: 1d:5f:2e:94:f3:3f:21:fd:cb:5f:d4:c0:04:ea:21:28:9d:8b: d4:bf:ee:c5:dc:4e:5b:72:46:08:7b:1e:76:be:62:e7:8e:79: aa:7a:34:54:08:43:15:f6:6b:f4:29:8f:84:a9:38:de:fb:ad: 2e:16:d7:72:32:df:9b:74:9f:b5:ac:6c:a2:6a:37:12:82:e6: 06:6d:30:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEn38yZ30wXLULOEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyOTE0MTIxOFoXDTI1MTEyNzE1MTIxOFowLzEtMCsGA1UEAxMk MGNlNDlmMTItMjQ4Ni00NWNiLTkxMzAtOTdjZjBjYmM0MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNc8y4QrLGmCiw0pY/JNWb+/ZOYOXSaECQTf 9R1rhlEnc9BUZSHFOWxkclCNkYL/moappUfVHFshc+XNFRuSrO2wZIzGbWrbf6i7 F8KsU4c1xaVop1NSvECcHSnZSzMukYe04FYulLf+3uQ3AvNaHazjW6SNxfIXaOr9 UlxVmnJTYs5Ot7Y//805839VXJIBMYvZM+UGQzDWStKdMUob+9jmePQjaUvJhGnz InKjsudOlWU1etdhuGE6wVlEPSibJbUiQH0L5gQGyKahveL2HDcC0m78segrHoz8 zmoEYvho5c4lij98K34E0gqCOqcoRi6G8hClGKZiPpmVhYq4ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJM4f7HjBQrGWTOf0djzROQKCrABMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZjRjYzMwMjEtZWM5My0z ZmRmLTkxY2YtNjlmOGI4MThmYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPP1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjnnrYM7nH0RUt3MqCrQjj+C+Ov1rzxtQtaMD3Ez4ISwcNJChoLSUq2 E14oGcw93FqUUu7yYwFA3x2O77hlFRYehERuSS73dvuFQl9IZTN/HhCxWdbq/JF8 taXZZbDOPmep9wKLwGP1lGwoPBM8dP8fxoZi1bgAgU2heaiVVCpBEqO0oMtCGrS+ MOhIJDG0F/JnRapWPD0094kLnGITpciF4Z2WmQdh7tarO79z2zkgEXJ8rx1fLpTz PyH9y1/UwATqISidi9S/7sXcTltyRgh7Hna+YueOeap6NFQIQxX2a/Qpj4SpON77 rS4W13Iy35t0n7WsbKJqNxKC5gZtMOI= -----END CERTIFICATE-----Generated at Sun Sep 7 12:44:05 2025 by rpki-client