$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c51dde25-53c6-317d-ae7e-937ee424c9b0.roa File: c51dde25-53c6-317d-ae7e-937ee424c9b0.roa (raw, json) Hash identifier: K5yZnFDLO/z8qXK5RAcAImP9V76MijE/GjJ3mvafKHU= Subject key identifier: E6:A9:BB:02:6A:19:2E:96:7D:47:69:35:C7:8F:FC:AF:CD:C8:A6:64 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584AC6CD47D42D3BBA11FEBA9880 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c51dde25-53c6-317d-ae7e-937ee424c9b0.roa Signing time: Thu 07 Aug 2025 10:44:26 +0000 ROA not before: Thu 07 Aug 2025 10:44:26 +0000 ROA not after: Wed 05 Nov 2025 11:44:26 +0000 asID: 29802 IP address blocks: 192.253.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c6:cd:47:d4:2d:3b:ba:11:fe:ba:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Aug 7 10:44:26 2025 GMT Not After : Nov 5 11:44:26 2025 GMT Subject: CN=ec4d1a23-65b7-4d49-ad2e-6b002a46335e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:49:bf:23:e1:c1:10:23:cc:f6:93:ea:3b: 8b:6e:54:07:81:dc:82:e9:37:78:5a:3c:63:92:1b: 28:32:9a:ba:1e:09:30:b3:9d:fd:1e:69:fb:c4:3f: b9:04:f3:79:f4:a7:e6:3c:82:82:f3:20:83:e3:80: a2:18:61:73:b3:9f:b9:93:4b:38:de:57:c5:6b:73: 6a:21:37:c7:2e:76:e0:65:07:9b:d0:1f:12:49:b7: a7:3e:83:c6:c5:1a:9a:c0:fe:65:32:9b:fa:05:43: 90:25:f6:07:9c:a6:54:94:d6:e2:43:60:9d:c1:20: 70:46:5e:e9:7a:40:cd:65:cf:4c:25:b2:47:8c:36: 9b:ab:8d:b7:dc:b2:27:b6:d5:a6:53:73:12:db:00: 29:2e:74:27:2a:65:8e:37:81:30:c9:56:30:c3:34: 64:6d:7c:b8:76:27:68:bc:31:ef:f8:c6:18:e2:89: 84:d7:59:af:2e:48:b1:ce:c4:c1:75:a4:32:50:f6: 85:54:7d:99:79:a0:96:52:ba:e0:3e:fa:b9:08:88: 33:84:73:d8:47:95:a2:9e:e7:14:02:43:62:a1:86: 6a:34:c0:55:85:98:85:4f:cc:c5:d2:45:c5:62:05: 86:44:b3:58:23:a2:28:92:bc:ef:81:00:07:12:0f: 59:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A9:BB:02:6A:19:2E:96:7D:47:69:35:C7:8F:FC:AF:CD:C8:A6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/c51dde25-53c6-317d-ae7e-937ee424c9b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:87:7f:0a:15:6b:7c:c1:3a:67:ca:1e:8b:b0:40:94:e9:33: da:87:5d:c9:90:93:f6:57:13:a8:c0:d7:48:6c:56:d3:88:ab: 62:58:8f:5c:17:69:9c:d3:91:c8:7e:8d:88:28:82:28:dd:16: 65:db:27:2f:0c:ba:fa:41:0c:c2:71:e8:20:ea:b6:72:4b:20: 1f:af:b3:5d:cf:98:37:5c:c5:92:ff:a5:1b:bd:aa:55:bd:72: c8:52:43:ea:b9:fc:02:fd:a0:90:0f:e2:f6:69:f5:7a:da:dc: 49:6b:b0:89:25:37:91:40:e6:b5:11:a4:91:e1:1a:bf:b3:39: de:fa:e3:f3:70:b3:79:9d:e9:ff:b0:fa:6b:45:44:60:62:c3: 3c:fe:9e:b3:03:8e:5f:31:0e:0e:06:43:6f:8d:79:e8:62:f3: 46:b4:35:ef:79:35:f3:ed:31:e8:6d:24:a5:e0:3c:a7:f9:5d: 37:2e:87:20:25:ed:5f:f0:4c:ae:2b:ec:40:eb:2f:6d:d5:e6: b0:0f:42:08:77:2c:fb:31:33:6a:64:41:bb:39:29:f3:d3:ad: 61:95:e9:85:10:4a:31:9d:b4:98:2f:8d:76:fb:a5:35:26:dd: 6e:f6:f4:1c:2b:bc:d6:d5:2d:f4:98:04:f9:7d:e2:0b:ae:f1: a4:14:3a:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErGzUfULTu6Ef66mIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDgwNzEwNDQyNloXDTI1MTEwNTExNDQyNlowLzEtMCsGA1UEAxMk ZWM0ZDFhMjMtNjViNy00ZDQ5LWFkMmUtNmIwMDJhNDYzMzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUVJvyPhwRAjzPaT6juLblQHgdyC6Td4Wjxj khsoMpq6Hgkws539Hmn7xD+5BPN59KfmPIKC8yCD44CiGGFzs5+5k0s43lfFa3Nq ITfHLnbgZQeb0B8SSbenPoPGxRqawP5lMpv6BUOQJfYHnKZUlNbiQ2CdwSBwRl7p ekDNZc9MJbJHjDabq4233LInttWmU3MS2wApLnQnKmWON4EwyVYwwzRkbXy4dido vDHv+MYY4omE11mvLkixzsTBdaQyUPaFVH2ZeaCWUrrgPvq5CIgzhHPYR5WinucU AkNioYZqNMBVhZiFT8zF0kXFYgWGRLNYI6IokrzvgQAHEg9ZxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOapuwJqGS6WfUdpNceP/K/NyKZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvYzUxZGRlMjUtNTNjNi0z MTdkLWFlN2UtOTM3ZWU0MjRjOWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2HfwoVa3zBOmfKHouwQJTpM9qHXcmQk/ZXE6jA10hsVtOIq2JYj1wX aZzTkch+jYgogijdFmXbJy8MuvpBDMJx6CDqtnJLIB+vs13PmDdcxZL/pRu9qlW9 cshSQ+q5/AL9oJAP4vZp9Xra3ElrsIklN5FA5rURpJHhGr+zOd764/Nws3md6f+w +mtFRGBiwzz+nrMDjl8xDg4GQ2+Neehi80a0Ne95NfPtMehtJKXgPKf5XTcuhyAl 7V/wTK4r7EDrL23V5rAPQgh3LPsxM2pkQbs5KfPTrWGV6YUQSjGdtJgvjXb7pTUm 3W729BwrvNbVLfSYBPl94guu8aQUOuc= -----END CERTIFICATE-----Generated at Sat Aug 23 18:52:35 2025 by rpki-client