$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa File: 41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa (raw, json) Hash identifier: 1LJv9zGJF/Oq/v/gJD9j7H7VcG1GdDZ2qYM80OyFEBk= Subject key identifier: A2:B1:91:79:D7:D3:53:B2:D5:E9:92:89:54:FF:76:94:E2:0F:61:52 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC2E0FBC15220D7CAEB9DE6C8 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa Signing time: Wed 06 Aug 2025 01:00:33 +0000 ROA not before: Wed 06 Aug 2025 01:00:33 +0000 ROA not after: Tue 04 Nov 2025 02:00:33 +0000 asID: 3223 IP address blocks: 192.253.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:e0:fb:c1:52:20:d7:ca:eb:9d:e6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 6 01:00:33 2025 GMT Not After : Nov 4 02:00:33 2025 GMT Subject: CN=dedbfe3c-d472-4c0c-9453-2d3ccab4c1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:04:0a:2e:35:e8:ed:8c:a5:4e:45:d6:9b:b2: ee:04:5d:02:dd:63:e8:a3:81:0b:25:da:f9:38:cc: d5:fb:f8:04:9f:76:9b:cf:db:d8:d4:76:e0:54:25: c1:0a:5b:6f:61:9b:0e:67:1b:af:3d:55:da:a0:c6: ac:48:c3:5d:68:22:28:93:39:84:b1:af:ed:8b:4c: de:6b:ea:c7:e7:32:a1:67:ff:52:0d:14:ad:a3:9c: 60:a9:08:13:df:17:0d:77:61:e2:3d:33:20:0a:e3: 5d:4b:d5:44:c4:51:a7:f1:eb:35:99:d8:28:7b:b1: e2:e9:a5:b2:ff:41:30:c9:cd:76:4e:12:31:68:74: d6:52:f8:bf:3c:12:96:15:6c:84:11:76:64:20:90: aa:09:2c:3c:d7:23:49:63:7f:fc:92:05:0c:71:f3: f6:9d:5a:d9:5c:ec:9f:2b:95:c8:12:99:c3:0c:db: 5d:7e:96:63:16:3e:71:30:a7:a1:f1:9b:7f:93:62: 1c:f7:3e:b9:3f:6b:02:ff:2e:d0:f1:3b:85:ed:e1: 4d:5c:53:b1:25:6b:81:be:fe:f2:6b:2b:27:ca:e5: 13:f5:67:f0:b8:a0:70:65:7f:6e:02:b1:bb:3e:74: 6d:e1:ec:d1:68:f7:01:e6:2a:13:b7:5f:c8:13:ba: 9c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:B1:91:79:D7:D3:53:B2:D5:E9:92:89:54:FF:76:94:E2:0F:61:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/41c2f58e-b9d8-3806-973c-7e6256c0f28f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:21:57:bd:c1:6e:ae:36:cd:55:ad:22:b9:9a:f3:f1:5a:92: 5c:62:f6:4d:c4:e9:f6:34:b5:a1:e6:6b:d1:5b:cd:dc:89:c5: fd:3a:0a:6d:c2:06:af:1d:f5:78:59:e6:84:69:8f:5d:b7:d7: 10:e0:f5:ac:5a:2e:2f:34:9e:dc:e4:23:df:50:f2:f7:05:a2: d1:2f:d8:a2:41:c6:73:a2:de:ec:1c:bd:75:26:06:8c:b8:22: 12:ff:ae:f5:ee:22:a2:66:0a:27:41:dd:9c:ef:e0:84:c9:ea: 08:34:45:7d:e6:10:97:cd:a4:12:30:9e:3c:5c:ce:d6:2d:07: 53:00:e9:53:dc:0b:68:f3:cb:38:e0:6f:21:00:79:7d:27:0d: 3d:2e:de:11:7b:c2:a9:ed:67:ec:2e:e9:18:34:b6:fa:62:33: 6e:32:5f:a7:44:c7:47:34:0e:da:61:a8:c4:f7:6d:3f:d3:4f: fe:cf:46:1b:f7:e7:19:ee:2f:c8:e6:62:f5:28:f2:78:67:11: 67:8a:06:f3:b2:cd:d5:29:cd:87:89:7e:6e:d7:d0:23:bc:19: 24:34:65:b9:b9:7b:cf:30:de:15:26:56:24:10:96:02:b5:2d: 38:1d:e1:96:01:8a:46:29:00:8f:e6:06:e9:81:51:80:dc:0e: 61:3f:20:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4PvBUiDXyuud5sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZGVkYmZlM2MtZDQ3Mi00YzBjLTk0NTMtMmQzY2NhYjRjMWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwQKLjXo7YylTkXWm7LuBF0C3WPoo4ELJdr5 OMzV+/gEn3abz9vY1HbgVCXBCltvYZsOZxuvPVXaoMasSMNdaCIokzmEsa/ti0ze a+rH5zKhZ/9SDRSto5xgqQgT3xcNd2HiPTMgCuNdS9VExFGn8es1mdgoe7Hi6aWy /0Ewyc12ThIxaHTWUvi/PBKWFWyEEXZkIJCqCSw81yNJY3/8kgUMcfP2nVrZXOyf K5XIEpnDDNtdfpZjFj5xMKeh8Zt/k2Ic9z65P2sC/y7Q8TuF7eFNXFOxJWuBvv7y aysnyuUT9WfwuKBwZX9uArG7PnRt4ezRaPcB5ioTt1/IE7qcawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKxkXnX01Oy1emSiVT/dpTiD2FSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvNDFjMmY1OGUtYjlkOC0z ODA2LTk3M2MtN2U2MjU2YzBmMjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABshV73Bbq42zVWtIrma8/Faklxi9k3E6fY0taHma9FbzdyJxf06Cm3C Bq8d9XhZ5oRpj1231xDg9axaLi80ntzkI99Q8vcFotEv2KJBxnOi3uwcvXUmBoy4 IhL/rvXuIqJmCidB3Zzv4ITJ6gg0RX3mEJfNpBIwnjxcztYtB1MA6VPcC2jzyzjg byEAeX0nDT0u3hF7wqntZ+wu6Rg0tvpiM24yX6dEx0c0DtphqMT3bT/TT/7PRhv3 5xnuL8jmYvUo8nhnEWeKBvOyzdUpzYeJfm7X0CO8GSQ0Zbm5e88w3hUmViQQlgK1 LTgd4ZYBikYpAI/mBumBUYDcDmE/INc= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:39 2025 by rpki-client