$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fc7e8727-05e0-36e8-9a0f-1ddb37c37fb4.roa File: fc7e8727-05e0-36e8-9a0f-1ddb37c37fb4.roa (raw, json) Hash identifier: x1CqCZ9B4hkzIBop8wVwTo+EM/Gn+zK9zYZPxAJjnpE= Subject key identifier: 35:20:67:C6:51:47:F0:E8:94:99:2A:12:3A:D3:6B:78:58:EC:D7:FC Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A9FE7389FFF3AB4FEE59C4F80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fc7e8727-05e0-36e8-9a0f-1ddb37c37fb4.roa Signing time: Thu 24 Jul 2025 12:20:10 +0000 ROA not before: Thu 24 Jul 2025 12:20:10 +0000 ROA not after: Wed 22 Oct 2025 12:20:10 +0000 asID: 9009 IP address blocks: 192.253.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:e7:38:9f:ff:3a:b4:fe:e5:9c:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 24 12:20:10 2025 GMT Not After : Oct 22 12:20:10 2025 GMT Subject: CN=e41986bf-7071-4629-a7f0-d4474a3600e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5c:9b:ad:b1:33:4e:5c:ee:ad:c7:82:00:55: 2e:96:a4:2b:74:4d:6b:50:41:ae:36:4b:1f:37:3b: b9:c1:af:2d:ee:9d:1e:75:d4:a3:c1:d7:b9:28:d9: 6f:eb:8c:f9:33:f0:fc:6b:95:a2:f3:41:ab:4d:84: b2:fb:12:54:89:c6:1c:c0:5c:94:c9:1a:14:47:fa: ef:95:d4:3b:d3:85:79:2c:5c:af:25:f7:2f:49:7f: e2:d5:15:7c:58:1d:45:c4:b1:75:18:6c:69:bc:3b: 07:42:10:9a:1b:25:21:ed:58:48:9e:5d:57:05:c0: d8:ba:2c:e6:5b:a3:9c:fe:e9:50:68:40:59:82:d2: f9:b9:6e:84:4d:3f:b2:4f:ee:eb:4f:eb:b2:be:e2: 46:5b:9d:61:87:18:52:48:2b:b2:0a:38:2e:83:a5: 0d:85:75:0f:62:91:e9:86:01:a6:dd:13:5c:88:9b: 5a:83:44:ae:19:be:8c:ae:cf:6f:0c:c3:21:df:41: 01:cb:48:90:6d:7c:48:89:6b:28:b7:0a:b0:c9:c6: a1:e9:2b:55:af:08:e1:d9:43:8e:f2:81:fa:cb:11: 4d:ae:75:8a:c5:0a:4c:33:eb:3a:62:e6:c0:8c:a2: c9:48:61:1f:71:a8:64:bb:74:24:67:5e:f8:c0:26: 14:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:20:67:C6:51:47:F0:E8:94:99:2A:12:3A:D3:6B:78:58:EC:D7:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/fc7e8727-05e0-36e8-9a0f-1ddb37c37fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d3:5b:4d:ca:dd:3b:ba:71:89:03:9d:83:76:c3:4b:7d:56: 2b:9d:c5:17:76:28:8a:f1:04:ee:0a:c6:b2:0c:1d:9b:be:0b: 83:68:f8:6b:a1:83:17:c6:53:05:bb:1b:9d:19:ed:16:0a:fb: e5:2f:3b:8d:18:1b:4e:88:ec:59:e9:cc:3f:de:1e:4e:f0:2a: 22:e5:7e:4e:92:4b:ea:40:71:16:76:cc:f3:95:2a:24:51:3a: 39:d9:6e:8c:21:0d:fd:5a:c7:19:4f:cd:2a:38:cf:7a:d4:bc: 18:6d:17:13:6d:17:04:97:52:56:89:36:24:b4:0d:9a:d4:d4: dd:83:43:23:c4:77:65:1a:db:c1:74:3e:c1:99:43:1d:bd:55: 9e:88:14:4d:42:5c:88:59:04:b7:62:67:ba:3a:a0:59:d2:dd: 84:a8:29:50:eb:25:e7:74:c5:d6:21:57:08:96:3a:53:d2:7a: 45:98:fa:c0:fc:0c:45:4a:5f:9e:c3:6e:ad:33:ad:c3:66:ba: 1d:63:67:fa:41:45:bf:ff:89:e8:b6:f8:a9:5b:c9:8f:48:32: ba:46:d0:d0:3f:99:25:06:23:5f:59:9d:18:f8:9b:d7:93:c9: b2:e9:92:d3:5c:9d:96:e0:90:5e:7d:c4:91:59:81:d2:90:e7: 63:f1:26:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf5zif/zq0/uWcT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDcyNDEyMjAxMFoXDTI1MTAyMjEyMjAxMFowLzEtMCsGA1UEAxMk ZTQxOTg2YmYtNzA3MS00NjI5LWE3ZjAtZDQ0NzRhMzYwMGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlybrbEzTlzurceCAFUulqQrdE1rUEGuNksf Nzu5wa8t7p0eddSjwde5KNlv64z5M/D8a5Wi80GrTYSy+xJUicYcwFyUyRoUR/rv ldQ704V5LFyvJfcvSX/i1RV8WB1FxLF1GGxpvDsHQhCaGyUh7VhInl1XBcDYuizm W6Oc/ulQaEBZgtL5uW6ETT+yT+7rT+uyvuJGW51hhxhSSCuyCjgug6UNhXUPYpHp hgGm3RNciJtag0SuGb6Mrs9vDMMh30EBy0iQbXxIiWsotwqwycah6StVrwjh2UOO 8oH6yxFNrnWKxQpMM+s6YubAjKLJSGEfcahku3QkZ174wCYUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUgZ8ZRR/DolJkqEjrTa3hY7Nf8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZmM3ZTg3MjctMDVlMC0z NmU4LTlhMGYtMWRkYjM3YzM3ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXTW03K3Tu6cYkDnYN2w0t9ViudxRd2KIrxBO4KxrIMHZu+C4No+Guh gxfGUwW7G50Z7RYK++UvO40YG06I7FnpzD/eHk7wKiLlfk6SS+pAcRZ2zPOVKiRR OjnZbowhDf1axxlPzSo4z3rUvBhtFxNtFwSXUlaJNiS0DZrU1N2DQyPEd2Ua28F0 PsGZQx29VZ6IFE1CXIhZBLdiZ7o6oFnS3YSoKVDrJed0xdYhVwiWOlPSekWY+sD8 DEVKX57Dbq0zrcNmuh1jZ/pBRb//iei2+KlbyY9IMrpG0NA/mSUGI19ZnRj4m9eT ybLpktNcnZbgkF59xJFZgdKQ52PxJgo= -----END CERTIFICATE-----Generated at Mon Aug 4 16:05:59 2025 by rpki-client