$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa File: 41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa (raw, json) Hash identifier: xFLkVuI2Vk75fTflDOnO92dENYaNId/iBrEgnkog7xg= Subject key identifier: D4:E1:E0:6A:F2:D2:6E:41:C6:49:8E:ED:13:BA:10:08:59:58:E7:A3 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA39D18F650BA8E71A5BB2C80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 3223 IP address blocks: 192.253.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:18:f6:50:ba:8e:71:a5:bb:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=a38455f1-a98f-4035-8fc0-81d8840e9e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:e5:a5:e0:f0:8d:9d:76:4d:7b:51:f7:a7: fc:58:8f:dc:29:ff:60:35:84:5a:5f:a7:4b:2e:0a: c5:9b:e3:be:d1:fa:3b:f4:11:e7:b5:f9:2e:ef:fe: 32:ac:ef:de:ca:8c:5a:fd:ed:a8:31:64:41:93:a2: 38:3f:6f:0f:be:d3:73:c0:5e:1f:cd:ee:d4:bd:59: b9:a5:22:2f:db:d4:2c:6f:e0:8f:03:c1:ce:24:a2: f3:d0:64:27:55:e1:30:78:4f:4e:7f:82:e8:d4:2c: 1b:ab:7a:e1:67:65:ed:34:85:e0:1b:b0:06:f9:bc: cb:f9:31:81:b3:59:e7:1d:ab:63:b5:1a:2f:17:38: 81:3e:9e:df:8c:78:ff:51:0b:57:37:3a:06:de:6b: c1:4d:13:ed:c7:58:56:e2:67:b3:72:b8:09:b8:e4: c9:f9:b4:41:96:26:d3:6a:e2:c7:e8:f3:32:58:5c: 01:42:aa:92:5c:13:0c:ef:81:66:fb:72:09:da:13: e9:e4:36:75:e7:4c:f9:71:a6:51:73:98:25:fb:fb: c1:e5:21:06:e0:3f:58:9b:c6:cf:aa:ba:48:f8:65: 56:c7:4c:2c:33:e3:52:3e:4d:25:4a:a4:98:9a:5d: 55:3f:71:af:d8:5e:42:7d:cb:e2:11:be:b1:f6:30: 10:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:E1:E0:6A:F2:D2:6E:41:C6:49:8E:ED:13:BA:10:08:59:58:E7:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:e9:1e:53:54:be:91:44:8a:67:82:5e:95:02:2f:2f:1c:2b: 70:b2:0a:c2:66:42:6c:49:61:4d:a7:3d:ae:25:a7:f1:2e:8d: 2c:4e:b3:d0:7d:3c:92:3e:22:7a:42:f0:36:cb:3c:3f:2e:92: 87:9b:e7:cf:cf:6a:04:1d:f8:68:26:d4:87:38:37:6c:c6:43: 47:e9:ab:d0:4c:12:4e:de:f6:ac:83:69:c3:5a:fb:6d:07:9f: 4c:b8:20:36:b4:8f:45:38:cc:14:2c:ad:06:0a:71:aa:c6:75: fa:ae:15:f7:30:db:f7:0e:1e:8c:4f:bd:d8:b3:1f:ce:d6:de: d9:5a:6a:54:66:d7:30:34:e2:1f:31:56:18:7f:14:c1:be:31: 82:e0:b2:b3:96:63:41:1c:01:37:21:64:4e:0b:21:5a:5d:e8: f4:2a:1b:4a:fa:44:a9:1b:d5:b5:a3:db:63:73:4a:7a:29:ec: 68:05:22:e2:0a:44:22:f1:e3:f1:e5:a9:cc:91:2d:c7:31:a6: df:a2:c4:06:df:94:12:6a:26:0d:71:30:0b:dc:05:ce:bc:69: 12:66:47:38:0f:9e:9f:79:97:11:64:d4:8f:15:ff:d6:d5:1d: a8:e6:29:b6:09:75:e5:d7:f3:51:d0:16:e5:c3:b2:ac:32:ab: 19:66:5c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRj2ULqOcaW7LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YTM4NDU1ZjEtYTk4Zi00MDM1LThmYzAtODFkODg0MGU5ZTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8TlpeDwjZ12TXtR96f8WI/cKf9gNYRaX6dL LgrFm+O+0fo79BHntfku7/4yrO/eyoxa/e2oMWRBk6I4P28PvtNzwF4fze7UvVm5 pSIv29Qsb+CPA8HOJKLz0GQnVeEweE9Of4Lo1Cwbq3rhZ2XtNIXgG7AG+bzL+TGB s1nnHatjtRovFziBPp7fjHj/UQtXNzoG3mvBTRPtx1hW4mezcrgJuOTJ+bRBlibT auLH6PMyWFwBQqqSXBMM74Fm+3IJ2hPp5DZ150z5caZRc5gl+/vB5SEG4D9Ym8bP qrpI+GVWx0wsM+NSPk0lSqSYml1VP3Gv2F5CfcviEb6x9jAQWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNTh4Gry0m5BxkmO7RO6EAhZWOejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDFjMmY1OGUtYjlkOC0z ODA2LTk3M2MtN2U2MjU2YzBmMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnpHlNUvpFEimeCXpUCLy8cK3CyCsJmQmxJYU2nPa4lp/EujSxOs9B9 PJI+InpC8DbLPD8ukoeb58/PagQd+Ggm1Ic4N2zGQ0fpq9BMEk7e9qyDacNa+20H n0y4IDa0j0U4zBQsrQYKcarGdfquFfcw2/cOHoxPvdizH87W3tlaalRm1zA04h8x Vhh/FMG+MYLgsrOWY0EcATchZE4LIVpd6PQqG0r6RKkb1bWj22NzSnop7GgFIuIK RCLx4/HlqcyRLccxpt+ixAbflBJqJg1xMAvcBc68aRJmRzgPnp95lxFk1I8V/9bV HajmKbYJdeXX81HQFuXDsqwyqxlmXMM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:16:47 2025 by rpki-client