$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa File: 9dc11acf-35bc-346d-b4f0-3b8229536a34.roa (raw, json) Hash identifier: /lk1vvBCG1uBdMuFe3eWXP8TaSgfyQmkDrGVB9+ThYk= Subject key identifier: F6:68:4F:7F:CF:B6:EA:7A:F9:C4:09:C0:DE:38:A9:D3:4A:FD:D6:9B Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584B80B76CE75D1BEF84AAFD9E80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 396356 IP address blocks: 192.253.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:6c:e7:5d:1b:ef:84:aa:fd:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=22ffe0d2-76e0-4574-9d50-cd71ac7d0862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ea:15:0c:a0:75:5c:6d:40:73:4c:07:a7:19: e5:e2:99:58:fa:58:c9:26:5b:24:2b:6d:29:99:9e: a7:e5:9a:b8:e0:9b:bf:2c:a1:8e:af:90:2c:1d:03: 70:5a:9b:7e:87:24:8b:82:dc:d9:87:5f:3d:5d:b5: f3:51:8e:c8:d9:cf:fc:5f:94:71:6f:0f:a6:91:d8: eb:ea:6c:be:5c:ec:fc:87:62:e1:4d:11:95:86:c8: 9a:2a:7e:8e:4a:0c:a7:74:c9:51:f5:30:50:4d:ab: b3:19:90:25:44:b5:94:cb:8e:1a:32:66:f6:cc:b2: 96:47:c0:90:ad:46:78:09:a6:34:f4:e2:d5:cc:0c: bf:ed:43:63:7a:9e:f6:17:ac:ca:cc:93:2b:d7:bc: ca:ef:b2:77:99:a3:53:75:e2:2e:7d:1d:15:da:cb: 47:75:9f:cd:d8:62:70:a4:20:37:9e:87:83:f8:66: 23:2f:d1:19:24:b8:2d:19:9d:04:2c:95:bd:8c:09: 34:37:64:a5:a9:63:54:cf:39:d5:11:4a:3d:f0:ce: f3:c4:89:01:4c:b6:67:b6:f1:6c:8c:63:62:a2:7d: 12:40:02:2c:d5:b1:1a:3a:ec:74:76:4f:da:0c:38: 0a:23:c5:a1:c5:8c:da:d1:a4:fa:09:e3:a5:86:23: a0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:68:4F:7F:CF:B6:EA:7A:F9:C4:09:C0:DE:38:A9:D3:4A:FD:D6:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/9dc11acf-35bc-346d-b4f0-3b8229536a34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e7:20:6c:5a:64:ba:7e:97:85:83:9b:5e:ca:77:de:c8:69: f1:c6:38:5b:9c:39:7a:da:2c:99:98:7f:7c:3d:e9:c9:a6:90: e4:d9:af:cb:02:7e:88:f0:53:a0:7c:b7:02:cf:23:50:11:2c: 2e:fb:68:9d:b4:61:70:bb:16:a6:a8:5e:db:65:f8:8f:11:99: a3:ad:ba:58:55:f4:0a:4a:a3:3a:3a:61:a6:1a:72:b8:56:56: 02:87:31:83:e9:19:1b:c6:a1:d9:63:8f:b4:e5:ae:08:85:f2: e1:12:7a:75:2f:8f:dd:ae:96:15:5c:8b:2c:aa:f5:63:0c:6a: 21:cb:ff:68:35:b8:2c:e5:1f:1e:5e:41:bd:aa:d0:91:99:0c: 11:05:e1:bc:d6:0a:89:a4:d3:6c:bf:4d:12:f0:c1:4c:da:9d: c1:ee:4c:79:f5:0f:7a:f1:c8:b3:72:2f:5b:1b:04:d7:7b:ce: e8:23:86:f7:c3:7c:c4:a2:e2:c7:15:9b:13:55:6a:40:82:90: 37:bc:f3:94:ce:f3:a1:30:79:17:44:31:8c:c0:3f:b7:f0:fe: 35:83:d2:9e:13:5e:5b:36:38:89:6f:a2:39:cd:9f:e2:af:9d: 5b:86:e9:4f:fa:5b:d0:cf:81:6b:24:66:b4:29:a0:cd:dc:56: a7:73:50:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt2znXRvvhKr9noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk MjJmZmUwZDItNzZlMC00NTc0LTlkNTAtY2Q3MWFjN2QwODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuoVDKB1XG1Ac0wHpxnl4plY+ljJJlskK20p mZ6n5Zq44Ju/LKGOr5AsHQNwWpt+hySLgtzZh189XbXzUY7I2c/8X5Rxbw+mkdjr 6my+XOz8h2LhTRGVhsiaKn6OSgyndMlR9TBQTauzGZAlRLWUy44aMmb2zLKWR8CQ rUZ4CaY09OLVzAy/7UNjep72F6zKzJMr17zK77J3maNTdeIufR0V2stHdZ/N2GJw pCA3noeD+GYjL9EZJLgtGZ0ELJW9jAk0N2SlqWNUzznVEUo98M7zxIkBTLZntvFs jGNion0SQAIs1bEaOux0dk/aDDgKI8WhxYza0aT6CeOlhiOgxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZoT3/Ptup6+cQJwN44qdNK/dabMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvOWRjMTFhY2YtMzViYy0z NDZkLWI0ZjAtM2I4MjI5NTM2YTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvnIGxaZLp+l4WDm17Kd97IafHGOFucOXraLJmYf3w96cmmkOTZr8sC fojwU6B8twLPI1ARLC77aJ20YXC7FqaoXttl+I8RmaOtulhV9ApKozo6YaYacrhW VgKHMYPpGRvGodljj7TlrgiF8uESenUvj92ulhVciyyq9WMMaiHL/2g1uCzlHx5e Qb2q0JGZDBEF4bzWComk02y/TRLwwUzancHuTHn1D3rxyLNyL1sbBNd7zugjhvfD fMSi4scVmxNVakCCkDe885TO86EweRdEMYzAP7fw/jWD0p4TXls2OIlvojnNn+Kv nVuG6U/6W9DPgWskZrQpoM3cVqdzULc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:32 2025 by rpki-client