$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa File: de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa (raw, json) Hash identifier: xwOcHTJP4MKbf5runUz0Sm8CNOt8lcCwaStkmmaLDl8= Subject key identifier: F4:79:9C:11:D1:C1:1E:CE:3F:97:07:B5:6A:14:1E:B0:94:E3:0B:4F Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A9FFBA964237C5DA97491F280 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 396356 IP address blocks: 192.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a9:64:23:7c:5d:a9:74:91:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=dd8c8dd1-d0e6-4868-a232-6dcfb3072e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:72:7b:5b:eb:90:68:df:26:38:03:e8:b4: e2:d6:a0:69:69:e8:f0:8a:cc:88:0a:79:d2:5b:d4: 5e:55:59:18:90:07:d6:c5:f4:da:12:f2:f3:2e:05: dd:8e:0d:2b:12:af:02:e1:6d:ac:5d:d8:07:18:e7: 2f:f4:a7:14:5e:05:ce:d4:80:3c:e3:3e:0f:b8:5c: 47:6f:93:97:17:22:57:bd:99:99:f4:cd:cf:3a:96: 8d:4a:a5:b2:ad:88:40:86:fe:40:85:51:69:9b:5b: 21:31:42:22:a3:63:13:04:6b:e7:b7:82:25:91:71: e2:ed:21:fd:c1:cf:6f:88:f0:cb:ed:6e:20:fc:22: a9:13:09:3d:a9:20:f2:4f:a3:31:6c:5f:e3:71:e9: e8:83:fc:c7:3a:26:b8:dc:47:2c:85:94:c5:49:be: 2a:66:ff:93:98:51:59:6a:98:70:ac:82:1b:be:80: 4d:e2:8b:65:6b:06:fb:91:0d:16:61:de:ea:fb:6a: 94:1a:3c:ce:cb:38:15:66:b2:7a:a2:00:ef:5a:d4: f3:c1:40:e6:f1:27:3d:81:ab:00:91:5a:51:46:ad: f0:ff:75:cc:43:5a:9f:90:6a:c8:9b:04:b1:db:bd: 21:6b:97:83:f7:22:e7:9b:1f:81:1b:1e:5c:f1:4a: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:79:9C:11:D1:C1:1E:CE:3F:97:07:B5:6A:14:1E:B0:94:E3:0B:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ba:e5:1a:4f:53:07:de:a1:22:ac:5b:5a:2b:81:a4:b4:e0: 21:ca:73:12:e2:6c:bd:0b:7b:ad:d6:be:ad:9f:d5:07:53:d2: 7c:f0:97:6b:bc:bf:48:b7:1b:c3:5e:71:af:31:65:93:af:8e: 3f:5e:d7:44:22:7a:60:f9:ce:26:62:e0:36:2d:c9:bb:e2:de: ed:b3:f8:a2:6e:96:c0:06:14:66:46:a3:0e:d5:e3:7e:68:63: 7d:38:48:bd:46:c6:91:5e:52:af:52:09:d8:12:f6:79:4d:2f: ff:59:2d:0c:90:0b:9c:12:9e:52:b0:cd:14:f5:e6:29:68:6f: fc:9e:9a:4a:1e:87:46:48:d3:0b:37:fe:3e:74:e4:ba:9a:dc: 0d:b1:30:20:29:13:9a:e9:d1:7c:45:5e:a4:7c:e6:f4:4b:f5: 05:69:fd:77:dc:f2:54:9f:42:d0:4d:ea:90:72:25:ea:92:db: d5:d4:b4:e9:fd:e5:54:cb:bc:c3:36:e6:15:5f:95:b9:69:4b: 86:ec:bd:34:da:2c:17:26:b0:31:cc:d9:fc:ad:ce:39:3d:a6: 94:74:07:f8:5b:ef:0e:88:89:37:8a:62:55:8d:72:25:0d:75: f1:6a:a8:ee:e7:c1:3e:f9:9b:19:c5:8b:d0:e4:53:cc:68:cb: 73:d8:89:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6lkI3xdqXSR8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZGQ4YzhkZDEtZDBlNi00ODY4LWEyMzItNmRjZmIzMDcyZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKBye1vrkGjfJjgD6LTi1qBpaejwisyICnnS W9ReVVkYkAfWxfTaEvLzLgXdjg0rEq8C4W2sXdgHGOcv9KcUXgXO1IA84z4PuFxH b5OXFyJXvZmZ9M3POpaNSqWyrYhAhv5AhVFpm1shMUIio2MTBGvnt4IlkXHi7SH9 wc9viPDL7W4g/CKpEwk9qSDyT6MxbF/jcenog/zHOia43EcshZTFSb4qZv+TmFFZ aphwrIIbvoBN4otlawb7kQ0WYd7q+2qUGjzOyzgVZrJ6ogDvWtTzwUDm8Sc9gasA kVpRRq3w/3XMQ1qfkGrImwSx270ha5eD9yLnmx+BGx5c8UpyjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPR5nBHRwR7OP5cHtWoUHrCU4wtPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGUzZmEzZjUtNTY1Mi0z YWQ4LWJkNGMtNjg5YzYwOGQzOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFi65RpPUwfeoSKsW1orgaS04CHKcxLibL0Le63Wvq2f1QdT0nzwl2u8 v0i3G8Neca8xZZOvjj9e10QiemD5ziZi4DYtybvi3u2z+KJulsAGFGZGow7V435o Y304SL1GxpFeUq9SCdgS9nlNL/9ZLQyQC5wSnlKwzRT15ilob/yemkoeh0ZI0ws3 /j505Lqa3A2xMCApE5rp0XxFXqR85vRL9QVp/Xfc8lSfQtBN6pByJeqS29XUtOn9 5VTLvMM25hVflblpS4bsvTTaLBcmsDHM2fytzjk9ppR0B/hb7w6IiTeKYlWNciUN dfFqqO7nwT75mxnFi9DkU8xoy3PYiYc= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:50 2025 by rpki-client