$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1be5f8af-2b88-36a1-bab9-8eef0ceae9d4.roa File: 1be5f8af-2b88-36a1-bab9-8eef0ceae9d4.roa (raw, json) Hash identifier: /eGdTribx1Y6JKPPdl9+pwoF0VqzHP+Qw6okpFQncdY= Subject key identifier: 01:B7:66:A4:FA:9F:B8:6F:CB:D9:C3:69:7D:7B:B1:B8:6A:66:8B:27 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584F9E989FB10ACDEC8D51228780 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1be5f8af-2b88-36a1-bab9-8eef0ceae9d4.roa Signing time: Sun 25 Oct 2026 13:00:13 +0000 ROA not before: Sun 25 Oct 2026 13:00:13 +0000 ROA not after: Sat 23 Jan 2027 14:00:13 +0000 asID: 834 IP address blocks: 192.253.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9e:98:9f:b1:0a:cd:ec:8d:51:22:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Oct 25 13:00:13 2026 GMT Not After : Jan 23 14:00:13 2027 GMT Subject: CN=5cb09c93-72f2-4b58-8670-1636ecc1374b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:aa:ef:d3:32:44:51:3b:d8:51:fc:0f:07:2e: 61:97:bb:af:d9:71:7a:eb:1d:2f:87:7c:99:cc:a2: c5:4d:06:2c:45:c3:52:84:db:46:a3:80:4a:9d:2a: 50:f3:45:08:b5:4f:9e:b8:a6:e8:af:60:f1:d8:25: 6b:03:90:2a:10:90:6b:2f:05:a7:7b:4e:24:37:1b: e8:d4:36:34:13:53:86:92:d4:5f:0e:e6:44:ec:03: e7:51:9f:99:f7:9d:1f:25:d7:dc:b4:11:73:20:57: f2:a1:80:4b:36:7d:0e:20:50:d7:bd:ae:2b:af:70: a0:9f:02:85:05:25:ef:1d:ee:0e:00:98:ee:41:d3: c2:cb:be:83:40:59:d1:9c:1c:86:5f:92:53:c9:86: f6:4f:bc:36:41:1f:26:73:37:3b:5a:c0:f1:1a:4a: e4:e4:53:4c:a3:b6:a3:2f:4d:d6:42:39:3e:32:55: 46:8b:57:a1:7f:64:41:3d:30:ad:4c:07:40:10:ab: 3d:f7:75:13:f6:c1:00:16:64:1a:4d:c0:65:38:11: 3b:98:f6:0f:85:32:0b:d8:4c:0e:20:c0:28:7f:d1: 84:15:7b:01:75:8b:db:28:14:d7:c8:5f:f9:ba:92: bb:99:f1:7b:3d:ea:fe:a0:63:45:e8:4e:39:07:6f: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:66:A4:FA:9F:B8:6F:CB:D9:C3:69:7D:7B:B1:B8:6A:66:8B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/1be5f8af-2b88-36a1-bab9-8eef0ceae9d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ee:ca:f6:fe:29:6a:55:6a:22:c3:2a:e3:65:31:d0:89:14: 22:10:e8:76:91:5d:ce:71:59:cb:ec:c9:15:48:e7:3b:af:a7: 7f:0c:10:46:01:bf:2b:8e:c8:d9:50:f8:ff:e0:ef:7c:45:90: 60:7f:a7:8b:8c:25:09:04:dd:3e:05:f0:3a:7e:9c:44:74:74: ad:68:1f:21:75:81:94:ad:de:d8:5c:73:33:e0:10:7f:32:dd: f6:36:69:5d:3f:e7:8e:61:9a:bd:91:bb:79:75:f4:67:42:5c: 5a:c4:ce:b7:3c:1e:88:30:f0:95:9e:2b:dd:98:3e:35:fd:1b: 41:7e:67:63:da:53:91:4d:58:79:ed:b5:22:e6:8a:53:74:11: e5:8d:2a:ca:5c:56:0a:d4:bb:6b:3b:3a:74:b1:c2:98:bd:1d: ff:9c:c3:11:47:a8:df:e7:ab:7f:b8:ba:33:04:19:f9:81:ef: a4:08:d1:d9:29:29:a5:10:e6:73:32:42:fd:e3:b6:b5:e0:83: dc:94:f9:41:97:07:30:4d:60:5f:9a:12:ee:6c:7f:f3:8f:ac: 3a:78:55:84:ce:5a:16:b0:47:d2:ae:79:47:ed:44:da:b9:30: 13:b7:39:fe:3e:ac:dd:f3:8d:84:73:46:db:2a:90:0a:3c:91: 15:64:38:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+emJ+xCs3sjVEih4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MTAyNTEzMDAxM1oXDTI3MDEyMzE0MDAxM1owLzEtMCsGA1UEAxMk NWNiMDljOTMtNzJmMi00YjU4LTg2NzAtMTYzNmVjYzEzNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qrv0zJEUTvYUfwPBy5hl7uv2XF66x0vh3yZ zKLFTQYsRcNShNtGo4BKnSpQ80UItU+euKbor2Dx2CVrA5AqEJBrLwWne04kNxvo 1DY0E1OGktRfDuZE7APnUZ+Z950fJdfctBFzIFfyoYBLNn0OIFDXva4rr3CgnwKF BSXvHe4OAJjuQdPCy76DQFnRnByGX5JTyYb2T7w2QR8mczc7WsDxGkrk5FNMo7aj L03WQjk+MlVGi1ehf2RBPTCtTAdAEKs993UT9sEAFmQaTcBlOBE7mPYPhTIL2EwO IMAof9GEFXsBdYvbKBTXyF/5upK7mfF7Per+oGNF6E45B2/C/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAG3ZqT6n7hvy9nDaX17sbhqZosnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMWJlNWY4YWYtMmI4OC0z NmExLWJhYjktOGVlZjBjZWFlOWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbuyvb+KWpVaiLDKuNlMdCJFCIQ6HaRXc5xWcvsyRVI5zuvp38MEEYB vyuOyNlQ+P/g73xFkGB/p4uMJQkE3T4F8Dp+nER0dK1oHyF1gZSt3thcczPgEH8y 3fY2aV0/545hmr2Ru3l19GdCXFrEzrc8Hogw8JWeK92YPjX9G0F+Z2PaU5FNWHnt tSLmilN0EeWNKspcVgrUu2s7OnSxwpi9Hf+cwxFHqN/nq3+4ujMEGfmB76QI0dkp KaUQ5nMyQv3jtrXgg9yU+UGXBzBNYF+aEu5sf/OPrDp4VYTOWhawR9KueUftRNq5 MBO3Of4+rN3zjYRzRtsqkAo8kRVkOLI= -----END CERTIFICATE-----Generated at Sun Oct 25 16:43:54 2026 by rpki-client