$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa File: 1a7bfc39-b64d-3b65-80be-e3794b147834.roa (raw, json) Hash identifier: Q0DhTq1zxo9UCWf03e664VvBRisTlBPmqawU3EPR9Zw= Subject key identifier: 59:9D:2D:F2:AC:27:84:2C:1C:05:B9:A3:C9:22:74:F0:81:CD:81:8B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A9FFBA952C939DCC24976F540 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396356 IP address blocks: 192.253.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a9:52:c9:39:dc:c2:49:76:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=67678394-c404-4f40-b8c4-fbb30d0e17b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2b:0e:e5:5f:f5:2c:5d:90:be:ac:84:3d:69: d2:21:63:e8:47:84:9e:2d:e3:1e:30:7a:86:ae:8a: bf:4a:dd:46:7a:54:d7:b7:16:90:e2:81:76:46:a4: 1a:28:df:48:3d:69:e2:7d:87:bf:dd:c6:39:dc:95: e1:bc:85:a4:78:7c:40:09:7d:89:bc:82:8b:b3:d8: 8d:51:5b:c2:d7:6c:24:28:19:31:82:3a:0a:e8:1a: dc:eb:2e:1a:3f:bb:6c:56:36:19:92:2a:a9:a9:1c: 04:f7:f6:65:4e:e6:6b:9c:9d:c2:a7:c2:1e:5e:22: ea:5c:b7:f7:ff:c3:ea:b1:b3:f8:4f:81:a6:2d:c0: 30:2a:bb:77:07:e9:d7:1d:c1:19:78:c0:d6:d3:4c: a0:7c:bf:8b:fb:01:45:de:ba:4b:b3:27:b3:02:94: e0:6f:8e:94:59:a1:2d:e1:00:a2:df:81:24:69:d7: 4f:14:08:11:4a:f5:2f:7b:30:53:76:66:ee:95:71: 46:dc:28:fa:e0:1e:d0:8e:0d:00:43:80:84:97:13: f7:a3:ed:e5:56:13:bc:d2:9e:9e:ec:df:40:ab:77: 62:3c:b1:f2:9c:f3:00:bc:90:e8:60:16:01:db:ff: 99:25:bc:68:66:d9:dc:00:b2:f7:5b:87:ef:89:38: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9D:2D:F2:AC:27:84:2C:1C:05:B9:A3:C9:22:74:F0:81:CD:81:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:21:02:3a:ce:9d:84:a7:a1:bc:d7:1e:24:e3:d5:ea:1f:36: f1:eb:b3:24:13:46:69:bb:86:be:92:72:f0:09:3f:73:6f:f6: 79:bc:00:05:78:c7:18:68:90:13:1d:90:9a:8a:fb:50:6e:1a: 96:db:60:2f:af:b1:23:c6:76:d4:e3:55:50:fc:54:88:d1:9e: 1b:7a:92:74:fd:7e:10:d6:da:4e:0c:82:cd:a3:f9:ac:cf:8f: 42:a8:59:c2:e7:15:df:f0:1e:c7:60:3a:5b:56:2e:ff:c7:d2: 4b:5b:9f:34:12:41:ae:b8:51:33:85:06:85:f2:5b:ba:21:7c: 4c:db:cb:ab:b9:c2:79:d6:99:59:64:eb:82:b1:1c:e6:97:d7: cd:18:cc:29:1e:4d:19:8b:17:45:33:ae:9e:32:1f:c0:60:3b: ef:f5:13:53:b4:4e:2c:be:82:fc:6b:95:1a:5e:56:0f:e8:53: 21:7b:da:cb:9a:9d:99:d2:c7:34:27:9f:75:dc:60:fb:97:45: 75:0d:25:0e:38:07:aa:9b:ed:f3:1c:5a:04:32:c6:12:1c:d9: b8:ff:77:cd:9b:f2:d0:5f:9e:ca:cd:6e:d8:50:84:b8:c1:72: 34:60:11:b5:3b:01:6d:b7:7f:3a:eb:6f:d6:91:11:b6:8f:7a: 2c:af:ae:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6lSyTncwkl29UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk Njc2NzgzOTQtYzQwNC00ZjQwLWI4YzQtZmJiMzBkMGUxN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnysO5V/1LF2QvqyEPWnSIWPoR4SeLeMeMHqG roq/St1GelTXtxaQ4oF2RqQaKN9IPWnifYe/3cY53JXhvIWkeHxACX2JvIKLs9iN UVvC12wkKBkxgjoK6Brc6y4aP7tsVjYZkiqpqRwE9/ZlTuZrnJ3Cp8IeXiLqXLf3 /8PqsbP4T4GmLcAwKrt3B+nXHcEZeMDW00ygfL+L+wFF3rpLsyezApTgb46UWaEt 4QCi34EkaddPFAgRSvUvezBTdmbulXFG3Cj64B7Qjg0AQ4CElxP3o+3lVhO80p6e 7N9Aq3diPLHynPMAvJDoYBYB2/+ZJbxoZtncALL3W4fviTi72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFmdLfKsJ4QsHAW5o8kidPCBzYGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWE3YmZjMzktYjY0ZC0z YjY1LTgwYmUtZTM3OTRiMTQ3ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIhAjrOnYSnobzXHiTj1eofNvHrsyQTRmm7hr6ScvAJP3Nv9nm8AAV4 xxhokBMdkJqK+1BuGpbbYC+vsSPGdtTjVVD8VIjRnht6knT9fhDW2k4Mgs2j+azP j0KoWcLnFd/wHsdgOltWLv/H0ktbnzQSQa64UTOFBoXyW7ohfEzby6u5wnnWmVlk 64KxHOaX180YzCkeTRmLF0Uzrp4yH8BgO+/1E1O0Tiy+gvxrlRpeVg/oUyF72sua nZnSxzQnn3XcYPuXRXUNJQ44B6qb7fMcWgQyxhIc2bj/d82b8tBfnsrNbthQhLjB cjRgEbU7AW23fzrrb9aREbaPeiyvrrs= -----END CERTIFICATE-----Generated at Wed Aug 6 18:32:57 2025 by rpki-client