$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa File: d99b025b-4b90-3aed-8469-1094c7405548.roa (raw, json) Hash identifier: IzO2CX0PebxlAUxjzSaBkxHa0olDcS5UmU8WcIi7Szw= Subject key identifier: 0B:4E:70:32:62:E3:96:8F:60:C1:E0:D2:99:E1:A9:75:29:53:EF:C2 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584A093AA34CDAD65DAEF1AAF6C0 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 9009 IP address blocks: 192.253.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:a3:4c:da:d6:5d:ae:f1:aa:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=c3a00b0d-3be2-479c-b92d-7ab32e544f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3b:51:d0:f6:3e:a9:cf:26:d5:cb:dc:7c:09: c3:01:99:65:b1:da:f2:69:a4:b4:85:88:cc:19:a8: 34:d1:0c:98:51:7d:52:22:f0:39:da:8f:67:fe:bc: 3d:6a:d5:b6:26:69:a2:98:a7:4b:14:8f:ba:d3:f4: 86:f4:54:a2:ba:b1:3e:cd:cf:c7:3f:55:ee:8a:46: 2c:d4:85:9d:24:f8:4f:41:9d:e1:02:71:b2:d6:7f: 85:e8:f4:8f:1a:51:0e:94:60:99:3e:35:af:52:99: ca:75:fe:02:2c:f9:7f:e1:92:e3:38:6f:9c:ec:7d: 73:eb:54:9c:5c:92:1d:ab:08:06:f4:23:a5:ea:ac: 8d:23:72:5a:b0:dc:60:ab:d0:e5:7b:99:11:4c:fd: b6:f4:18:35:95:06:96:d6:8d:60:d2:5a:76:ff:88: fd:90:cb:e6:69:82:fb:64:6a:9a:a8:17:53:9e:8c: 33:37:e3:f5:78:02:04:e2:82:1b:be:b2:d4:fc:5c: ee:d6:e2:f5:c9:cc:1e:bc:8b:6f:75:a3:8c:29:6d: 90:7f:31:9a:6f:a2:19:ff:2e:de:be:b7:93:3a:5f: 56:e2:3c:2b:88:fe:5f:06:6a:93:3c:4d:ad:2e:94: 1d:31:20:84:a6:99:12:72:d9:a9:d6:1b:12:32:7b: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4E:70:32:62:E3:96:8F:60:C1:E0:D2:99:E1:A9:75:29:53:EF:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:54:a8:ce:10:08:90:bd:96:b9:50:9b:fd:81:3b:dd:ae:60: a1:2b:08:5b:f9:6a:32:91:9a:09:ba:d0:ee:d8:b2:53:4d:d2: 2e:1d:35:10:6e:4a:62:e9:fc:ea:77:0e:7d:77:fc:e8:67:ec: f5:dd:71:84:22:af:1d:02:ed:79:35:d1:34:dc:2a:a6:fa:bc: 10:6d:d5:36:5e:47:92:ec:42:40:33:4e:88:9d:23:42:07:ec: 5c:13:bc:c6:68:7a:58:db:36:af:2f:dd:ad:49:0b:58:16:01: 92:c2:b3:7b:e7:2e:c2:31:7f:7b:2f:0d:b7:4e:19:03:23:1c: eb:79:c7:ee:57:6c:75:d3:e2:5d:fb:65:8c:fa:68:1b:16:f3: 11:50:e6:76:20:a8:52:6c:14:da:0f:06:b7:73:1c:3a:2c:e1: fa:27:41:4b:6f:88:8c:c0:6c:40:80:38:08:4a:56:75:96:ff: 14:ed:86:2e:1e:48:f2:f7:99:44:3b:0a:69:08:2a:f7:07:0d: e7:0e:85:42:02:00:83:33:07:b5:fd:73:e4:5d:35:73:f1:1f: d5:8a:e4:5c:c3:b0:c9:26:02:43:f8:1a:ac:46:d9:82:f7:d9: 13:15:b0:18:19:52:17:d7:0b:5c:5d:55:d5:5f:e5:d0:72:fe: c5:7a:2f:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoJOqNM2tZdrvGq9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk YzNhMDBiMGQtM2JlMi00NzljLWI5MmQtN2FiMzJlNTQ0ZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTtR0PY+qc8m1cvcfAnDAZllsdryaaS0hYjM Gag00QyYUX1SIvA52o9n/rw9atW2JmmimKdLFI+60/SG9FSiurE+zc/HP1XuikYs 1IWdJPhPQZ3hAnGy1n+F6PSPGlEOlGCZPjWvUpnKdf4CLPl/4ZLjOG+c7H1z61Sc XJIdqwgG9COl6qyNI3JasNxgq9Dle5kRTP229Bg1lQaW1o1g0lp2/4j9kMvmaYL7 ZGqaqBdTnowzN+P1eAIE4oIbvrLU/Fzu1uL1ycwevItvdaOMKW2QfzGab6IZ/y7e vreTOl9W4jwriP5fBmqTPE2tLpQdMSCEppkSctmp1hsSMnsFMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtOcDJi45aPYMHg0pnhqXUpU+/CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDk5YjAyNWItNGI5MC0z YWVkLTg0NjktMTA5NGM3NDA1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpUqM4QCJC9lrlQm/2BO92uYKErCFv5ajKRmgm60O7YslNN0i4dNRBu SmLp/Op3Dn13/Ohn7PXdcYQirx0C7Xk10TTcKqb6vBBt1TZeR5LsQkAzToidI0IH 7FwTvMZoeljbNq8v3a1JC1gWAZLCs3vnLsIxf3svDbdOGQMjHOt5x+5XbHXT4l37 ZYz6aBsW8xFQ5nYgqFJsFNoPBrdzHDos4fonQUtviIzAbECAOAhKVnWW/xTthi4e SPL3mUQ7CmkIKvcHDecOhUICAIMzB7X9c+RdNXPxH9WK5FzDsMkmAkP4GqxG2YL3 2RMVsBgZUhfXC1xdVdVf5dBy/sV6L+4= -----END CERTIFICATE-----Generated at Tue Jun 3 10:22:21 2025 by rpki-client