$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa File: de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa (raw, json) Hash identifier: 9ky+p//+knMg5ZfKsNzQEWbS4J59v3wsQp1vQ5m9g6E= Subject key identifier: F1:6C:40:B3:B3:3F:73:1A:6E:89:24:1B:B5:C0:37:2F:72:FC:1F:AC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E1FA9A7C43A991FB8CEEBC880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 396356 IP address blocks: 192.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a7:c4:3a:99:1f:b8:ce:eb:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=1a38ac52-ccfd-454d-8ae6-d7a9c8b2133d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:e9:7f:c4:ac:61:29:bd:66:a6:ef:90:4a: f1:02:7b:f6:fd:7b:22:91:d7:26:ab:a5:33:e4:6c: 1a:5c:f9:70:88:e7:84:a7:bc:cd:d2:cc:5b:f7:00: f6:e4:98:0d:5e:92:01:b3:9b:d1:25:1e:7a:55:3a: d5:b3:ce:b5:1f:3f:9e:2e:89:7d:d6:1e:28:60:c6: ea:71:c7:83:c5:59:aa:ef:04:1b:db:c4:4e:95:44: e9:61:12:fd:94:da:fb:f0:a0:dc:b6:3a:ae:bd:d9: 8b:e5:f0:82:24:50:59:aa:d2:fa:63:0c:38:e5:d1: ad:2a:4a:45:dc:a6:bb:c6:a5:15:bc:8d:1f:45:e0: 78:16:ff:37:7a:14:03:ed:7f:6e:95:be:f7:90:1f: 12:34:a5:0f:06:01:9d:bd:83:91:8f:f0:f5:52:1a: 9e:88:9d:92:1d:42:82:99:45:99:3d:92:ff:37:db: 4d:dd:81:fd:45:5c:00:c6:dd:bf:d2:ad:7a:58:97: e9:32:2e:04:be:29:9b:b3:61:27:ff:a9:e0:ad:90: ee:c2:9a:a4:ff:5e:01:8d:64:3b:51:b7:9d:ad:22: b7:30:43:1e:05:6f:a2:b0:f7:33:9f:71:9e:1d:51: e1:d6:6d:41:3a:cf:ee:74:87:6a:ea:dc:3b:48:e2: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6C:40:B3:B3:3F:73:1A:6E:89:24:1B:B5:C0:37:2F:72:FC:1F:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/de3fa3f5-5652-3ad8-bd4c-689c608d392a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:8a:73:e6:49:77:39:86:75:19:46:8a:53:36:b9:1d:b5:66: e9:ab:17:f2:f8:b4:e6:84:ea:79:48:36:07:f5:04:9f:8d:4f: 82:ff:ca:a4:dd:eb:71:22:4e:22:55:ff:1e:21:30:22:9e:d9: f7:ee:ac:9a:9c:db:20:5f:ed:8c:ae:ce:4e:b8:05:3e:81:90: 73:c1:a0:e9:62:bc:bc:a1:bb:ac:21:42:71:6e:90:09:32:66: c7:e6:97:b2:21:16:c6:56:ac:a0:da:1f:19:1d:1f:34:5a:da: 76:b3:8d:c1:6e:5f:4e:86:36:d8:df:0c:c7:a5:aa:72:65:f2: 77:31:1c:ec:db:dd:c8:74:5b:a8:8e:72:33:03:a8:16:e6:78: 36:9d:31:12:67:61:7d:d6:7c:45:c7:ae:00:a7:3a:5f:58:bb: 03:e4:a1:a4:cf:1b:b2:32:3b:7f:0a:d2:85:ba:47:35:9f:38: 8a:24:ac:2b:57:b5:d6:7e:35:5e:78:8f:d3:eb:38:eb:b4:f9: b6:53:29:03:6b:1a:1c:6d:07:f6:52:fe:d4:b3:79:93:68:eb: de:ea:d7:27:de:c5:39:32:90:c8:22:04:b6:c2:69:16:ec:4d: b0:f8:ec:11:71:86:55:f2:52:e2:92:10:38:cf:0a:eb:0b:ad: 6f:30:4c:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqafEOpkfuM7ryIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk MWEzOGFjNTItY2NmZC00NTRkLThhZTYtZDdhOWM4YjIxMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYjpf8SsYSm9ZqbvkErxAnv2/Xsikdcmq6Uz 5GwaXPlwiOeEp7zN0sxb9wD25JgNXpIBs5vRJR56VTrVs861Hz+eLol91h4oYMbq cceDxVmq7wQb28ROlUTpYRL9lNr78KDctjquvdmL5fCCJFBZqtL6Yww45dGtKkpF 3Ka7xqUVvI0fReB4Fv83ehQD7X9ulb73kB8SNKUPBgGdvYORj/D1UhqeiJ2SHUKC mUWZPZL/N9tN3YH9RVwAxt2/0q16WJfpMi4Evimbs2En/6ngrZDuwpqk/14BjWQ7 UbedrSK3MEMeBW+isPczn3GeHVHh1m1BOs/udIdq6tw7SOJDywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFsQLOzP3MabokkG7XANy9y/B+sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGUzZmEzZjUtNTY1Mi0z YWQ4LWJkNGMtNjg5YzYwOGQzOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGKc+ZJdzmGdRlGilM2uR21ZumrF/L4tOaE6nlINgf1BJ+NT4L/yqTd 63EiTiJV/x4hMCKe2ffurJqc2yBf7Yyuzk64BT6BkHPBoOlivLyhu6whQnFukAky Zsfml7IhFsZWrKDaHxkdHzRa2nazjcFuX06GNtjfDMelqnJl8ncxHOzb3ch0W6iO cjMDqBbmeDadMRJnYX3WfEXHrgCnOl9YuwPkoaTPG7IyO38K0oW6RzWfOIokrCtX tdZ+NV54j9PrOOu0+bZTKQNrGhxtB/ZS/tSzeZNo697q1yfexTkykMgiBLbCaRbs TbD47BFxhlXyUuKSEDjPCusLrW8wTFE= -----END CERTIFICATE-----Generated at Sat Jun 13 05:57:40 2026 by rpki-client