$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c51dde25-53c6-317d-ae7e-937ee424c9b0.roa File: c51dde25-53c6-317d-ae7e-937ee424c9b0.roa (raw, json) Hash identifier: Wdl/8Vbq7hNL+mUXIColjzCG8QBdtl3gnfCeERf9X4Y= Subject key identifier: 5F:4A:6B:34:F4:33:D7:15:E1:A8:70:53:B8:77:8E:90:8B:89:05:62 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584BA667CABB69B628CBFE0C1A60 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c51dde25-53c6-317d-ae7e-937ee424c9b0.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 29802 IP address blocks: 192.253.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ca:bb:69:b6:28:cb:fe:0c:1a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=4d91b888-8410-485c-a18f-d6a29c7dc732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:3e:b7:2e:e4:0b:98:76:51:b0:16:bf:ad: 3e:5a:e5:fb:7d:5c:c2:3e:25:05:ee:ab:1e:68:fd: ca:fc:0f:70:bc:36:c5:95:f9:59:cd:71:79:b0:fd: c8:8d:35:c3:4d:08:92:fb:21:72:b6:d8:56:2d:9e: ac:7e:53:d7:98:80:85:c3:b5:6f:d2:aa:65:fd:e6: 41:02:b7:b0:6a:9a:e0:45:80:58:b3:d0:49:e4:e4: 89:4a:fc:7e:14:67:42:13:0e:ee:73:b2:f2:23:e8: 67:46:0b:f3:10:c0:b7:27:0f:60:79:93:ec:c6:74: b4:9f:f8:a5:46:62:35:85:41:61:67:b0:08:e4:cd: 46:e2:45:c5:1b:60:3f:fe:4d:a4:e0:9c:0d:e3:60: 4c:2e:66:33:9b:22:95:ce:56:23:83:e2:68:36:15: 97:2e:59:51:41:99:bc:a0:80:3e:a9:cf:70:9a:52: 67:43:b7:0a:25:f1:b1:e2:52:2d:8d:64:15:af:3a: 38:c6:2d:87:a5:10:42:69:03:dc:99:fb:52:1f:60: 03:eb:ed:70:01:d2:79:fa:49:09:cf:2b:4a:59:14: 97:21:ac:76:80:06:71:ca:31:30:31:ea:d8:5f:1f: 4c:51:c5:52:ca:1e:6f:da:ca:30:ad:d9:dc:83:ae: 47:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:6B:34:F4:33:D7:15:E1:A8:70:53:B8:77:8E:90:8B:89:05:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c51dde25-53c6-317d-ae7e-937ee424c9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5d:d5:1c:25:2e:81:41:9d:c9:f5:c2:b3:35:51:1e:cc:6e: 1d:97:0c:f6:cd:c5:9e:16:73:fe:f1:96:98:45:0b:b4:93:13: 1e:75:37:aa:de:42:3f:96:33:57:60:c6:2f:21:f8:ef:5b:68: 02:eb:82:ef:4f:ec:54:6b:d7:ab:20:b3:ef:74:41:47:9a:d4: c3:bc:c7:db:94:e6:5a:c6:16:36:fd:c2:8b:c6:db:9d:dc:56: 9d:fa:b1:b2:45:bd:b5:63:97:4d:25:a0:3d:1c:01:69:39:d5: 70:2e:31:b1:0d:c7:d3:ac:e6:81:d8:8d:60:5f:d1:a2:53:11: db:33:43:b3:d9:3f:16:9f:42:07:75:83:96:50:97:2c:be:48: ae:09:07:e7:14:5d:96:09:4f:79:c6:43:db:52:af:d6:13:b3: cb:b5:bb:43:2b:20:40:2e:c0:30:f5:d2:73:a2:2a:d8:67:96: 82:3d:34:50:3b:e8:33:65:40:f8:b2:70:22:a1:6e:8d:e2:5a: c7:c0:8e:e7:34:9c:02:3a:35:f4:0c:82:ed:4e:aa:33:c1:1a: 31:b8:79:a4:fa:cf:3e:5d:37:ca:49:69:1c:03:46:fc:a1:74: f6:d7:0f:57:b2:74:27:7c:c3:e4:26:02:d4:69:ec:9f:9c:63: 07:57:69:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ8q7abYoy/4MGmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk NGQ5MWI4ODgtODQxMC00ODVjLWExOGYtZDZhMjljN2RjNzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp24+ty7kC5h2UbAWv60+WuX7fVzCPiUF7qse aP3K/A9wvDbFlflZzXF5sP3IjTXDTQiS+yFytthWLZ6sflPXmICFw7Vv0qpl/eZB ArewaprgRYBYs9BJ5OSJSvx+FGdCEw7uc7LyI+hnRgvzEMC3Jw9geZPsxnS0n/il RmI1hUFhZ7AI5M1G4kXFG2A//k2k4JwN42BMLmYzmyKVzlYjg+JoNhWXLllRQZm8 oIA+qc9wmlJnQ7cKJfGx4lItjWQVrzo4xi2HpRBCaQPcmftSH2AD6+1wAdJ5+kkJ zytKWRSXIax2gAZxyjEwMerYXx9MUcVSyh5v2sowrdncg65HBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9KazT0M9cV4ahwU7h3jpCLiQViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzUxZGRlMjUtNTNjNi0z MTdkLWFlN2UtOTM3ZWU0MjRjOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9d1RwlLoFBncn1wrM1UR7Mbh2XDPbNxZ4Wc/7xlphFC7STEx51N6re Qj+WM1dgxi8h+O9baALrgu9P7FRr16sgs+90QUea1MO8x9uU5lrGFjb9wovG253c Vp36sbJFvbVjl00loD0cAWk51XAuMbENx9Os5oHYjWBf0aJTEdszQ7PZPxafQgd1 g5ZQlyy+SK4JB+cUXZYJT3nGQ9tSr9YTs8u1u0MrIEAuwDD10nOiKthnloI9NFA7 6DNlQPiycCKhbo3iWsfAjuc0nAI6NfQMgu1OqjPBGjG4eaT6zz5dN8pJaRwDRvyh dPbXD1eydCd8w+QmAtRp7J+cYwdXaTY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:56:41 2025 by rpki-client