$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa File: 9dc11acf-35bc-346d-b4f0-3b8229536a34.roa (raw, json) Hash identifier: Z2erItzPTk0jB7KQiJuZv9LRURfL6NDBjARYWUp+jrw= Subject key identifier: 9B:BD:09:71:4A:89:94:1D:4F:D7:E5:5D:79:AC:C7:CE:B6:A5:07:13 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A9FFBA9712B80F4AE2590F200 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396356 IP address blocks: 192.253.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a9:71:2b:80:f4:ae:25:90:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=ec95ccc2-8a78-4432-8686-0913113dcd1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:29:1a:87:ec:e7:0d:b2:a5:5c:3b:91:25:4c: c9:c3:fa:56:c0:e9:da:ae:aa:41:1d:90:06:89:c3: 9f:0b:b5:c6:d7:6a:db:fa:9c:10:95:47:8f:71:cc: 36:62:c3:8c:3c:e3:0a:e6:36:00:1d:ba:08:2c:80: 7c:22:2c:c3:2e:73:a5:24:b2:55:8c:80:4f:30:ae: 02:73:dc:78:a0:fe:bf:dc:5a:1f:ec:85:12:27:93: db:91:5f:0d:e9:04:24:8d:ea:bc:4d:5a:51:55:31: 4d:8b:ec:6f:6d:52:a9:d6:2e:f7:be:fd:cb:ce:25: 78:79:37:27:bd:34:76:9d:4c:fa:34:c5:23:6e:a8: 68:7b:42:31:f1:4a:7a:78:27:3d:1f:81:27:7d:5d: ef:85:b2:59:60:ae:aa:62:3d:78:ca:29:e4:55:f6: 55:f3:0d:be:3a:88:e5:72:52:4a:bc:1c:a6:b6:9d: ff:63:b6:97:6a:ea:72:5d:27:a7:3d:e7:e2:76:27: 68:97:2c:e6:75:cc:c9:bb:10:d5:d1:4e:c4:bd:0e: 12:3f:d3:87:b3:3d:97:cf:55:92:0a:c9:0e:5c:78: 71:37:45:f9:18:49:02:12:23:32:31:b7:75:39:b4: ce:36:1f:71:78:a2:fb:47:35:08:f7:e0:a4:c1:b8: 83:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BD:09:71:4A:89:94:1D:4F:D7:E5:5D:79:AC:C7:CE:B6:A5:07:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6b:35:0b:39:31:69:62:de:3d:61:65:6d:4f:e7:f7:7a:f8: 16:b2:ad:b6:e2:b2:c3:79:4a:ae:06:67:b0:5a:1c:8a:14:82: 62:24:33:a5:69:20:00:dc:35:0f:2e:e5:f0:b5:dc:74:35:a0: 2a:62:23:78:60:a0:cf:a0:38:86:b2:bd:4a:56:03:40:06:21: cd:67:c3:99:37:24:90:40:c3:7e:87:c8:a0:9b:4f:d4:06:d9: 57:73:bc:06:49:37:e5:f2:17:8e:72:18:5a:2b:8f:f9:f6:06: 91:79:91:64:b8:e0:39:61:9b:f8:ef:df:1a:18:d1:13:a3:5d: f4:4b:bc:c4:50:bb:7a:dd:6a:3f:f1:e9:26:35:7f:0a:08:f5: d0:6c:61:5b:67:96:75:d9:51:a2:a5:05:ff:86:81:20:67:66: 9c:47:22:60:b4:89:6f:75:4e:12:9b:57:a4:ff:da:7c:f3:46: a8:58:76:4e:f0:00:a4:fe:6d:8d:32:2e:f5:70:b0:e8:c1:e3: fb:17:b5:82:e5:8c:5c:77:74:11:96:ea:34:3f:80:3b:dc:34: e5:22:b6:ca:a0:8d:11:e3:82:9d:71:a9:5c:7b:66:a9:7a:b3: e6:60:77:47:10:b9:05:a9:ee:69:22:15:0b:e6:07:0a:04:6a: f1:b2:f6:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6lxK4D0riWQ8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZWM5NWNjYzItOGE3OC00NDMyLTg2ODYtMDkxMzExM2RjZDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ykah+znDbKlXDuRJUzJw/pWwOnarqpBHZAG icOfC7XG12rb+pwQlUePccw2YsOMPOMK5jYAHboILIB8IizDLnOlJLJVjIBPMK4C c9x4oP6/3Fof7IUSJ5PbkV8N6QQkjeq8TVpRVTFNi+xvbVKp1i73vv3LziV4eTcn vTR2nUz6NMUjbqhoe0Ix8Up6eCc9H4EnfV3vhbJZYK6qYj14yinkVfZV8w2+Oojl clJKvBymtp3/Y7aXaupyXSenPefididolyzmdczJuxDV0U7EvQ4SP9OHsz2Xz1WS CskOXHhxN0X5GEkCEiMyMbd1ObTONh9xeKL7RzUI9+CkwbiD7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJu9CXFKiZQdT9flXXmsx862pQcTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWRjMTFhY2YtMzViYy0z NDZkLWI0ZjAtM2I4MjI5NTM2YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClrNQs5MWli3j1hZW1P5/d6+BayrbbissN5Sq4GZ7BaHIoUgmIkM6Vp IADcNQ8u5fC13HQ1oCpiI3hgoM+gOIayvUpWA0AGIc1nw5k3JJBAw36HyKCbT9QG 2VdzvAZJN+XyF45yGForj/n2BpF5kWS44Dlhm/jv3xoY0ROjXfRLvMRQu3rdaj/x 6SY1fwoI9dBsYVtnlnXZUaKlBf+GgSBnZpxHImC0iW91ThKbV6T/2nzzRqhYdk7w AKT+bY0yLvVwsOjB4/sXtYLljFx3dBGW6jQ/gDvcNOUitsqgjRHjgp1xqVx7Zql6 s+Zgd0cQuQWp7mkiFQvmBwoEavGy9sQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:42:40 2025 by rpki-client