$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa File: d99b025b-4b90-3aed-8469-1094c7405548.roa (raw, json) Hash identifier: soDl+4zsjkGlcs+J8bM7q0xO3VMwGLT78NKYyBwQirQ= Subject key identifier: CC:89:E8:40:4C:33:8E:BD:EF:93:9C:AD:3F:39:55:91:5F:79:83:EA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AE9F670614826407B6D3C1900 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 9009 IP address blocks: 192.253.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:70:61:48:26:40:7b:6d:3c:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=b8e1d0dd-7bd5-46a4-b200-34454f9ccd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:de:6b:0a:8e:70:2e:82:0e:45:4e:b1:30:22: 06:0a:15:64:1f:f2:f5:b9:5f:b4:0e:ed:9c:4b:69: 61:a5:8f:11:d5:63:aa:c7:29:14:ca:df:fb:e8:50: 8a:24:c7:05:b7:b9:2c:5f:0a:41:86:e8:0f:a4:81: 4c:88:88:50:02:a6:e4:e9:9d:93:73:d7:8d:26:c3: 99:2d:37:1b:c6:69:ed:c1:86:32:cf:e0:a2:18:35: 4c:97:a4:01:66:28:8b:c3:58:ca:06:76:c3:8c:29: 92:c8:ac:05:79:a5:ad:f6:1b:64:55:00:0b:76:1d: e7:25:62:88:5c:e6:d3:20:96:c9:9e:15:47:6a:b8: ab:5e:2e:68:9a:77:7c:88:f8:4d:56:f6:c5:39:d7: 61:ea:ff:0f:44:0f:c7:c7:58:cd:ea:16:7b:60:33: 73:f8:a5:8d:55:aa:14:42:16:14:bb:1a:0e:bc:d6: 34:87:40:45:bf:e9:00:ad:75:b4:ac:5b:ed:7a:d2: 90:57:fd:c3:77:fb:c5:a0:ff:a0:5d:b8:1c:3e:4d: f6:14:0a:c6:3e:18:28:9d:66:3b:76:31:3d:97:40: d6:f5:2b:e9:59:9a:bc:6a:9d:0c:94:86:f1:f3:71: ae:a0:01:92:2e:18:5f:97:5f:f4:59:c2:c2:29:18: ed:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:E8:40:4C:33:8E:BD:EF:93:9C:AD:3F:39:55:91:5F:79:83:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:69:45:4d:97:84:94:ac:7f:e2:9b:da:33:06:cb:09:95:e6: 52:c8:8b:af:3f:c0:2c:67:30:35:fa:f0:c1:1b:ff:c3:30:bb: 8e:d5:bc:94:1a:95:c7:48:7a:ef:d4:3b:09:64:ae:b6:0c:fa: b3:3e:e3:e1:3b:4b:3b:02:77:ac:e8:0c:ad:2b:0c:50:a5:8a: 5c:3f:f4:3f:8b:61:89:1f:ae:41:37:d4:50:f3:df:bd:eb:21: 54:de:89:09:f7:c4:39:7f:53:db:41:b7:53:0c:d0:de:a3:08: 32:27:1e:d4:ed:9b:9b:76:af:28:9e:58:16:2e:2f:28:70:14: 75:c2:2a:02:d1:e9:2d:65:3b:38:95:fc:2f:35:93:83:34:20: 3e:41:1d:fc:d8:b5:31:7b:b1:9b:57:74:8e:73:5d:86:66:5e: 8a:fb:77:06:8f:98:0f:94:8e:4e:17:b3:66:cd:45:26:d6:83: 62:cf:26:76:2d:a7:97:f5:12:2e:b9:74:df:91:0c:93:2a:4b: ce:a3:8d:3f:98:1d:1f:f1:d0:34:6b:7c:be:cb:10:50:ca:24: 37:b4:2f:3c:f3:7d:32:b3:13:df:72:f0:bf:61:40:94:ef:f1: 77:11:a6:16:89:c2:f1:b4:0f:5b:aa:10:15:59:a6:13:fd:27: 2c:94:6f:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9nBhSCZAe208GQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk YjhlMWQwZGQtN2JkNS00NmE0LWIyMDAtMzQ0NTRmOWNjZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N5rCo5wLoIORU6xMCIGChVkH/L1uV+0Du2c S2lhpY8R1WOqxykUyt/76FCKJMcFt7ksXwpBhugPpIFMiIhQAqbk6Z2Tc9eNJsOZ LTcbxmntwYYyz+CiGDVMl6QBZiiLw1jKBnbDjCmSyKwFeaWt9htkVQALdh3nJWKI XObTIJbJnhVHarirXi5omnd8iPhNVvbFOddh6v8PRA/Hx1jN6hZ7YDNz+KWNVaoU QhYUuxoOvNY0h0BFv+kArXW0rFvtetKQV/3Dd/vFoP+gXbgcPk32FArGPhgonWY7 djE9l0DW9SvpWZq8ap0MlIbx83GuoAGSLhhfl1/0WcLCKRjtfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyJ6EBMM46975OcrT85VZFfeYPqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDk5YjAyNWItNGI5MC0z YWVkLTg0NjktMTA5NGM3NDA1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBpRU2XhJSsf+Kb2jMGywmV5lLIi68/wCxnMDX68MEb/8Mwu47VvJQa lcdIeu/UOwlkrrYM+rM+4+E7SzsCd6zoDK0rDFClilw/9D+LYYkfrkE31FDz373r IVTeiQn3xDl/U9tBt1MM0N6jCDInHtTtm5t2ryieWBYuLyhwFHXCKgLR6S1lOziV /C81k4M0ID5BHfzYtTF7sZtXdI5zXYZmXor7dwaPmA+Ujk4Xs2bNRSbWg2LPJnYt p5f1Ei65dN+RDJMqS86jjT+YHR/x0DRrfL7LEFDKJDe0LzzzfTKzE99y8L9hQJTv 8XcRphaJwvG0D1uqEBVZphP9JyyUbxo= -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:30 2025 by rpki-client