$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dfd151f9-9a82-3b85-8e61-09500fd7752f.roa File: dfd151f9-9a82-3b85-8e61-09500fd7752f.roa (raw, json) Hash identifier: nzk7qyOOxBhD48DmE6WFPuNoRWhQgWi8oD0F/EJWJDI= Subject key identifier: 73:F5:23:B3:55:EA:0D:2B:F3:70:79:DF:7B:9E:1C:1B:1B:72:B3:88 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F9E989D2D8B7DF31CC3B3CA80 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dfd151f9-9a82-3b85-8e61-09500fd7752f.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 834 IP address blocks: 192.253.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:9d:2d:8b:7d:f3:1c:c3:b3:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=4a323f4d-4db0-4107-9084-a9dd88dc8e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dc:17:59:ee:ba:51:ca:70:0e:35:9f:13:08: 52:9c:9e:76:1d:96:ee:a0:d1:96:17:a5:18:e5:9a: f0:09:45:4d:6f:f2:18:f1:57:64:f3:e2:67:d0:0c: e3:d3:4c:f3:06:e1:57:df:77:9c:3a:37:af:22:70: d6:26:a5:78:a7:8a:f2:31:22:64:a7:96:08:0d:81: f2:1e:24:e6:7f:e6:ec:a3:30:08:12:c3:04:78:0a: b2:a0:8e:5e:27:8a:07:38:11:05:1d:83:a6:6f:fb: ef:c3:57:0f:70:24:6e:78:f9:82:4e:4d:76:7a:45: 58:f0:cc:8f:a7:78:df:38:e5:e0:4c:fc:a8:2b:08: 2d:49:af:62:38:e5:0d:c5:44:a8:69:63:4a:7f:a0: 7b:1f:ac:bb:4e:ad:7d:19:04:6f:57:1a:38:c5:53: 1b:0b:24:b1:ec:95:58:6c:b5:4a:58:ff:5b:1c:20: 05:2d:8f:08:62:5e:3c:1f:d5:96:38:c4:c4:76:8f: a9:8f:3a:45:ca:02:41:41:29:e0:e1:67:80:77:22: 07:99:b2:4e:07:7f:7a:51:68:f7:da:8d:72:ea:b3: f2:84:5c:10:9d:1a:13:2c:70:fe:49:04:f5:42:e9: d2:a5:a4:2b:a5:b4:d6:12:3c:d4:4f:b7:c6:d0:e5: 05:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F5:23:B3:55:EA:0D:2B:F3:70:79:DF:7B:9E:1C:1B:1B:72:B3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/dfd151f9-9a82-3b85-8e61-09500fd7752f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:90:d8:38:30:b6:bd:49:34:3d:01:fb:99:de:01:03:d1:d6: 90:06:4e:b1:57:56:cd:aa:e3:61:15:0a:d6:5b:85:88:c8:a6: 13:00:93:5a:a2:74:28:35:74:00:2a:33:ca:b0:6d:92:1c:c8: 74:82:18:8d:1f:e0:18:a6:f9:4e:c4:74:a6:4f:04:3a:5d:63: 23:5a:e9:23:02:23:c9:80:b0:98:23:43:56:ab:82:78:57:16: 69:f4:13:0e:e5:ea:c6:40:a2:47:59:b1:f0:c6:54:26:1b:20: da:a1:14:74:3a:41:88:52:b7:3d:e7:cc:d8:6d:5d:50:c5:e6: 6e:ba:7a:98:f2:62:04:5b:bf:81:54:17:33:f4:95:2c:6c:1b: bc:63:e2:b4:43:a5:0d:d6:56:66:b1:10:1d:2d:8d:7a:ee:bc: 4e:92:ad:0e:99:bc:48:c0:aa:82:cd:9a:a1:e5:ce:19:12:0e: 65:7e:3f:81:74:68:9d:10:f7:5b:e8:b5:ff:3a:30:d8:06:eb: 90:e9:c8:21:bb:1d:db:89:ee:dc:ae:b1:4e:5c:35:91:a2:4b: a5:df:98:48:e6:c4:8c:d0:56:33:b7:68:fe:91:2c:97:dd:09: 95:d7:1b:8f:19:d6:17:90:f9:0a:af:ab:f6:df:fc:65:dc:8e: c7:20:f5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emJ0ti33zHMOzyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NGEzMjNmNGQtNGRiMC00MTA3LTkwODQtYTlkZDg4ZGM4ZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytwXWe66UcpwDjWfEwhSnJ52HZbuoNGWF6UY 5ZrwCUVNb/IY8Vdk8+Jn0Azj00zzBuFX33ecOjevInDWJqV4p4ryMSJkp5YIDYHy HiTmf+bsozAIEsMEeAqyoI5eJ4oHOBEFHYOmb/vvw1cPcCRuePmCTk12ekVY8MyP p3jfOOXgTPyoKwgtSa9iOOUNxUSoaWNKf6B7H6y7Tq19GQRvVxo4xVMbCySx7JVY bLVKWP9bHCAFLY8IYl48H9WWOMTEdo+pjzpFygJBQSng4WeAdyIHmbJOB396UWj3 2o1y6rPyhFwQnRoTLHD+SQT1QunSpaQrpbTWEjzUT7fG0OUFLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP1I7NV6g0r83B533ueHBsbcrOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZGZkMTUxZjktOWE4Mi0z Yjg1LThlNjEtMDk1MDBmZDc3NTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWQ2Dgwtr1JND0B+5neAQPR1pAGTrFXVs2q42EVCtZbhYjIphMAk1qi dCg1dAAqM8qwbZIcyHSCGI0f4Bim+U7EdKZPBDpdYyNa6SMCI8mAsJgjQ1argnhX Fmn0Ew7l6sZAokdZsfDGVCYbINqhFHQ6QYhStz3nzNhtXVDF5m66epjyYgRbv4FU FzP0lSxsG7xj4rRDpQ3WVmaxEB0tjXruvE6SrQ6ZvEjAqoLNmqHlzhkSDmV+P4F0 aJ0Q91votf86MNgG65DpyCG7HduJ7tyusU5cNZGiS6XfmEjmxIzQVjO3aP6RLJfd CZXXG48Z1heQ+Qqvq/bf/GXcjscg9ZA= -----END CERTIFICATE-----Generated at Sun Nov 15 18:10:38 2026 by rpki-client