$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa File: d99b025b-4b90-3aed-8469-1094c7405548.roa (raw, json) Hash identifier: vePa19fmiREDp4GjQ8kkftEd2CrkdIFb+r+n1kT2m3I= Subject key identifier: 2A:BB:92:BF:47:DC:ED:BF:72:23:EC:28:EF:7E:6B:7A:CC:DC:A2:15 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584CAB8C5342AC5825479E97F0D9 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 9009 IP address blocks: 192.253.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:53:42:ac:58:25:47:9e:97:f0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=78cd8c6c-b815-4277-9520-1a5bfba3cd0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a2:6d:e1:a1:c9:78:07:d1:7b:ac:22:d5:79: 4d:f7:13:be:9f:c7:6c:36:a0:f3:4a:d2:ca:4b:77: 84:3a:49:b5:e4:b2:fd:74:b2:d7:24:88:aa:ff:99: 75:6b:0f:ae:47:3a:b5:32:72:df:d0:f8:9a:75:36: db:65:a3:5c:6b:4f:89:8e:94:8d:83:68:43:9a:14: 09:83:a9:9d:48:c3:9d:00:0c:c1:f1:46:ef:9a:4e: db:a1:26:1e:f5:ce:60:c3:e2:13:0e:ca:7c:1e:ba: 3d:ed:63:0e:5f:3a:da:2f:0d:07:36:12:05:42:14: 28:3b:4f:02:1e:89:d0:52:9a:b7:a6:6e:6c:d0:4e: b4:e5:07:a2:db:01:31:1a:4e:17:7d:c6:cf:96:53: 07:8b:a5:55:10:71:84:a7:49:17:b5:73:0c:94:57: 3a:e6:b3:fd:0a:6b:f8:0c:2b:ce:e8:a5:27:d8:75: 0e:c3:7a:3d:11:44:20:d0:02:54:35:bd:77:bb:49: b7:67:93:e0:22:e6:e7:61:46:60:de:f2:94:85:cb: 03:9d:a6:3a:0b:50:bd:0f:c5:18:e5:f4:cd:54:d4: 4f:5d:5f:74:0b:e2:66:28:fe:3f:15:fa:47:ae:0f: 8a:43:46:be:77:2e:2c:e6:5d:32:d2:35:8d:86:77: 58:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BB:92:BF:47:DC:ED:BF:72:23:EC:28:EF:7E:6B:7A:CC:DC:A2:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b4:f8:e9:d2:fa:2a:e5:be:a9:30:a8:32:e4:82:f5:f3:17: 04:07:42:2f:cc:6e:68:44:8e:6b:8b:95:9b:77:87:09:f0:6f: af:09:9e:b5:83:8b:df:fb:9a:9e:06:74:21:ca:56:8b:db:00: cd:da:39:f7:34:76:38:d9:a0:3d:a0:2a:29:ea:2a:5b:88:df: 62:7f:4b:12:b1:61:3e:0d:26:d6:ef:ae:37:a7:d0:4d:b9:24: 42:28:85:ce:37:c8:50:d8:1b:c7:8a:a8:7e:f6:9e:bd:4c:53: 05:5a:9a:5c:89:03:a5:49:45:58:27:cf:73:98:d1:1a:c9:d1: f5:5f:4b:38:f9:3f:b7:91:f8:f1:1b:6e:c8:1b:d4:a6:b0:dd: 99:a0:69:d8:a5:5f:cf:33:7e:7c:9f:0b:75:d5:bd:8f:0d:82: 2a:11:c0:55:65:21:f1:cd:cf:a5:84:a7:97:3b:bc:21:b3:1c: 57:cc:20:b1:80:a9:ab:33:e8:9c:a1:42:6a:f2:e9:15:7a:ba: 46:62:9c:49:df:7e:b2:2f:a3:77:1e:b2:7b:6e:0c:b5:d9:23: 88:4e:23:23:a7:89:81:7e:96:69:03:a4:66:7c:5f:c3:49:28: 27:4f:7d:26:f8:ac:cd:01:d9:43:b9:36:07:6f:b8:df:9d:29: d6:e2:19:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjFNCrFglR56X8NkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk NzhjZDhjNmMtYjgxNS00Mjc3LTk1MjAtMWE1YmZiYTNjZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgaJt4aHJeAfRe6wi1XlN9xO+n8dsNqDzStLK S3eEOkm15LL9dLLXJIiq/5l1aw+uRzq1MnLf0PiadTbbZaNca0+JjpSNg2hDmhQJ g6mdSMOdAAzB8Ubvmk7boSYe9c5gw+ITDsp8Hro97WMOXzraLw0HNhIFQhQoO08C HonQUpq3pm5s0E605Qei2wExGk4XfcbPllMHi6VVEHGEp0kXtXMMlFc65rP9Cmv4 DCvO6KUn2HUOw3o9EUQg0AJUNb13u0m3Z5PgIubnYUZg3vKUhcsDnaY6C1C9D8UY 5fTNVNRPXV90C+JmKP4/FfpHrg+KQ0a+dy4s5l0y0jWNhndYRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq7kr9H3O2/ciPsKO9+a3rM3KIVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDk5YjAyNWItNGI5MC0z YWVkLTg0NjktMTA5NGM3NDA1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu0+OnS+irlvqkwqDLkgvXzFwQHQi/MbmhEjmuLlZt3hwnwb68JnrWD i9/7mp4GdCHKVovbAM3aOfc0djjZoD2gKinqKluI32J/SxKxYT4NJtbvrjen0E25 JEIohc43yFDYG8eKqH72nr1MUwVamlyJA6VJRVgnz3OY0RrJ0fVfSzj5P7eR+PEb bsgb1Kaw3ZmgadilX88zfnyfC3XVvY8NgioRwFVlIfHNz6WEp5c7vCGzHFfMILGA qasz6JyhQmry6RV6ukZinEnffrIvo3cesntuDLXZI4hOIyOniYF+lmkDpGZ8X8NJ KCdPfSb4rM0B2UO5NgdvuN+dKdbiGfQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:04:13 2026 by rpki-client