$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/226cf27a-5877-327d-98bc-a0d2165e6324.roa File: 226cf27a-5877-327d-98bc-a0d2165e6324.roa (raw, json) Hash identifier: S3BX9ykM/hIo/gMopGEYIZ+ryYNCcbNtkgybbZPu2OA= Subject key identifier: A4:D3:49:B5:08:D6:C1:21:77:EE:6B:2B:CA:E6:42:05:E8:71:A4:78 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B785743F977D2975F38A52980 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/226cf27a-5877-327d-98bc-a0d2165e6324.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 329007 IP address blocks: 192.253.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:43:f9:77:d2:97:5f:38:a5:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=3acd5eb4-d84b-4a43-a376-18f4068a1ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:98:ad:d2:bc:48:6c:2e:40:1e:d4:d2:58:09: 5f:e7:30:1f:10:f3:86:79:6d:72:9a:ba:87:07:55: 22:53:4c:06:6f:12:b1:d8:3d:b3:4b:31:0c:56:16: c0:8b:a1:cd:b4:24:eb:d4:6c:6c:67:4e:60:bc:32: a1:ed:a8:8a:bd:66:c7:7a:1d:16:e7:62:d8:77:7d: bd:80:19:c0:b9:c0:eb:69:33:c5:ac:48:7d:81:c1: 95:fc:4a:3d:f2:d5:78:c4:ff:e1:ad:0e:f5:a0:a8: 1f:c6:9d:aa:0e:b3:e8:86:41:3f:52:46:2e:2d:1e: a8:ad:c3:47:98:8b:56:25:e0:90:c6:fc:0e:39:bc: 36:d2:4a:6d:75:5b:8e:b8:b0:b1:13:d6:6a:0e:52: 82:b5:0e:03:83:2f:36:d5:e3:c5:e4:05:7c:ec:a8: 4e:b1:6c:30:31:f1:ce:a1:fd:e4:0b:d8:f7:38:5c: b1:29:c9:9d:84:72:0c:52:10:90:91:5f:55:ad:f4: 77:96:39:2e:36:c0:5c:98:83:99:33:5f:de:de:98: 5b:d0:7c:fc:43:7a:0a:8f:40:78:50:5e:dd:94:81: db:8a:76:b2:4b:5d:7a:77:6b:4a:28:ca:7d:54:9a: 2b:72:28:31:32:1f:e0:88:7c:e3:1e:25:df:7b:c7: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D3:49:B5:08:D6:C1:21:77:EE:6B:2B:CA:E6:42:05:E8:71:A4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/226cf27a-5877-327d-98bc-a0d2165e6324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:fb:aa:0f:c4:08:30:80:1f:a6:f1:50:66:9a:e7:79:95:50: e2:68:25:1f:ad:cd:75:84:54:7a:be:5c:76:da:9d:f8:e4:29: f4:3d:cc:5c:b6:eb:0a:2a:2d:5c:20:0e:e5:82:ba:fd:e0:14: f9:81:a9:32:14:df:d4:97:5e:d5:73:46:ac:b3:5e:b4:c6:a3: 55:96:7c:8d:1d:5d:e0:e7:83:31:29:1c:22:61:8a:7c:61:7f: ec:22:24:2b:22:88:92:49:2e:b2:62:18:6c:e2:64:f5:c4:e4: 9d:a9:1f:2c:68:ca:8e:06:34:0c:b2:38:ac:45:c3:58:3d:ff: f0:d9:2a:f8:6f:be:49:fa:06:7f:d4:69:01:1f:36:ae:90:38: 2b:39:e7:93:9c:f9:1c:79:91:60:49:8b:98:63:87:b7:67:8c: 5e:0d:fd:8a:6c:fb:64:1f:c4:f5:94:51:c3:f0:8f:7d:1e:83: 06:83:d4:5b:0a:17:75:3c:6f:a2:1d:72:f0:03:ac:6c:b9:9b: e4:f2:a6:4a:b7:c5:1f:08:61:43:9a:0a:da:ae:1a:14:f9:3b: 3d:19:12:ed:ef:33:91:a2:bd:73:9d:e7:90:3f:74:0f:bb:05: 52:a0:c3:39:f4:f3:95:eb:de:03:04:0a:dd:c1:7d:2c:eb:2d: 41:e7:06:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0P5d9KXXzilKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk M2FjZDVlYjQtZDg0Yi00YTQzLWEzNzYtMThmNDA2OGExZWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpit0rxIbC5AHtTSWAlf5zAfEPOGeW1ymrqH B1UiU0wGbxKx2D2zSzEMVhbAi6HNtCTr1GxsZ05gvDKh7aiKvWbHeh0W52LYd329 gBnAucDraTPFrEh9gcGV/Eo98tV4xP/hrQ71oKgfxp2qDrPohkE/UkYuLR6orcNH mItWJeCQxvwOObw20kptdVuOuLCxE9ZqDlKCtQ4Dgy821ePF5AV87KhOsWwwMfHO of3kC9j3OFyxKcmdhHIMUhCQkV9VrfR3ljkuNsBcmIOZM1/e3phb0Hz8Q3oKj0B4 UF7dlIHbinayS116d2tKKMp9VJorcigxMh/giHzjHiXfe8czDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTTSbUI1sEhd+5rK8rmQgXocaR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMjI2Y2YyN2EtNTg3Ny0z MjdkLTk4YmMtYTBkMjE2NWU2MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP7qg/ECDCAH6bxUGaa53mVUOJoJR+tzXWEVHq+XHbanfjkKfQ9zFy2 6woqLVwgDuWCuv3gFPmBqTIU39SXXtVzRqyzXrTGo1WWfI0dXeDngzEpHCJhinxh f+wiJCsiiJJJLrJiGGziZPXE5J2pHyxoyo4GNAyyOKxFw1g9//DZKvhvvkn6Bn/U aQEfNq6QOCs555Oc+Rx5kWBJi5hjh7dnjF4N/Yps+2QfxPWUUcPwj30egwaD1FsK F3U8b6IdcvADrGy5m+Typkq3xR8IYUOaCtquGhT5Oz0ZEu3vM5GivXOd55A/dA+7 BVKgwzn085Xr3gMECt3BfSzrLUHnBo8= -----END CERTIFICATE-----Generated at Mon Oct 20 21:34:44 2025 by rpki-client