$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa File: 1a7bfc39-b64d-3b65-80be-e3794b147834.roa (raw, json) Hash identifier: F0twmqhkcV0MLMNlxS1XRkuGOKeU3hVOx/ZghVwa0n8= Subject key identifier: 27:D0:80:0D:E4:ED:EA:FC:19:E0:2C:A4:3D:C8:40:B7:14:4D:8A:EA Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B80B76CC6D315E01468170380 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396356 IP address blocks: 192.253.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6c:c6:d3:15:e0:14:68:17:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=e61bad03-5b2a-4ad8-bb1c-bc87b246413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:f3:f6:cf:1d:18:d1:63:15:01:67:51:c7: 00:be:ef:38:91:ae:15:ad:85:8c:85:81:8a:33:15: 9f:ee:99:eb:e6:97:5e:cd:ae:ca:3d:73:52:2f:35: 90:e7:03:c6:18:91:75:e4:36:48:dc:a8:69:63:02: 30:a4:3f:32:47:38:1d:cb:8e:5a:e2:9f:31:15:81: 4c:68:e2:99:f7:ba:07:fb:ce:e8:bb:1f:a4:fb:77: 22:d5:ee:7a:f6:0d:de:1b:40:1e:98:8f:f7:f3:f3: 42:12:e2:68:9f:16:36:e9:03:4d:d4:c5:c2:67:24: 11:8a:9f:32:e9:ad:cb:ed:77:08:2b:6e:72:ea:7a: 2a:6d:68:86:cf:8a:e9:9f:3d:97:8e:d0:13:ef:a1: 4e:58:6e:32:4b:32:05:16:ba:2d:29:fb:46:b1:7b: 39:6c:dd:cc:e0:88:1c:48:d1:ab:61:7f:35:61:a6: 46:24:d4:64:15:2e:dd:f8:3e:73:52:a4:01:55:aa: 30:04:82:fa:ee:ce:b1:5e:59:07:27:f6:b0:ec:c2: 9f:05:07:f0:4e:b1:de:c1:eb:90:57:a4:52:5f:6c: eb:f9:ed:30:ca:a5:90:cb:c1:9c:ee:e5:ee:5b:8d: 45:cb:18:4a:11:33:ee:fd:be:4f:8a:71:ce:85:b4: b4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D0:80:0D:E4:ED:EA:FC:19:E0:2C:A4:3D:C8:40:B7:14:4D:8A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1a7bfc39-b64d-3b65-80be-e3794b147834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:82:a9:f5:f7:b1:e8:7a:f2:41:74:bf:87:de:69:e7:6b:8f: 25:f6:22:b4:3d:3a:62:4d:93:09:61:b0:6a:90:45:70:d6:7b: 5a:74:79:d8:fe:be:6a:16:53:dc:e6:c7:88:79:47:33:f0:87: f8:49:db:d8:7c:14:74:2a:9e:93:5f:02:96:e1:b5:4b:67:ef: 5b:5b:34:4a:1e:35:d7:0a:7f:07:ae:53:18:37:46:32:44:15: 9e:1b:36:4d:63:df:82:c8:d1:95:e4:77:e0:25:3d:07:b0:a8: ce:3f:b6:a0:12:8a:25:c5:d4:31:3c:20:6f:a5:bc:3c:49:e6: c0:59:57:34:1d:04:d2:e8:27:46:55:1b:5f:00:b7:ae:6f:62: 41:87:d6:18:d7:d3:f7:de:c0:00:34:5c:5f:a8:3f:82:e2:d9: 41:7f:90:5e:d2:ae:b6:0b:8f:69:4f:92:f3:1f:c0:ae:3d:27: 5e:3b:75:1f:93:d3:ca:a2:fd:ce:64:f5:3e:68:4a:78:d2:8e: 27:45:ec:c1:65:58:4a:e2:6d:e8:49:70:c6:19:33:61:b0:6d: 99:6a:d5:9a:88:6c:19:55:eb:dc:07:79:95:cf:00:b1:23:8b: a1:fa:9c:78:79:ca:5b:8c:c5:55:e5:a2:05:69:a6:a4:16:bc: d2:4a:53:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2zG0xXgFGgXA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZTYxYmFkMDMtNWIyYS00YWQ4LWJiMWMtYmM4N2IyNDY0MTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xXz9s8dGNFjFQFnUccAvu84ka4VrYWMhYGK MxWf7pnr5pdeza7KPXNSLzWQ5wPGGJF15DZI3KhpYwIwpD8yRzgdy45a4p8xFYFM aOKZ97oH+87oux+k+3ci1e569g3eG0AemI/38/NCEuJonxY26QNN1MXCZyQRip8y 6a3L7XcIK25y6noqbWiGz4rpnz2XjtAT76FOWG4ySzIFFrotKftGsXs5bN3M4Igc SNGrYX81YaZGJNRkFS7d+D5zUqQBVaowBIL67s6xXlkHJ/aw7MKfBQfwTrHeweuQ V6RSX2zr+e0wyqWQy8Gc7uXuW41FyxhKETPu/b5PinHOhbS0YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfQgA3k7er8GeAspD3IQLcUTYrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWE3YmZjMzktYjY0ZC0z YjY1LTgwYmUtZTM3OTRiMTQ3ODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqCqfX3seh68kF0v4feaedrjyX2IrQ9OmJNkwlhsGqQRXDWe1p0edj+ vmoWU9zmx4h5RzPwh/hJ29h8FHQqnpNfApbhtUtn71tbNEoeNdcKfweuUxg3RjJE FZ4bNk1j34LI0ZXkd+AlPQewqM4/tqASiiXF1DE8IG+lvDxJ5sBZVzQdBNLoJ0ZV G18At65vYkGH1hjX0/fewAA0XF+oP4Li2UF/kF7SrrYLj2lPkvMfwK49J147dR+T 08qi/c5k9T5oSnjSjidF7MFlWEribehJcMYZM2GwbZlq1ZqIbBlV69wHeZXPALEj i6H6nHh5yluMxVXlogVppqQWvNJKU5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:49 2025 by rpki-client