$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa File: d99b025b-4b90-3aed-8469-1094c7405548.roa (raw, json) Hash identifier: nL9qcEpvI0lAsFcLTN8XjPky6EYj4Ajrh7uIl732Qns= Subject key identifier: E6:3C:39:39:E7:AF:77:59:92:05:22:76:26:C1:EA:9F:FA:45:22:06 Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Certificate serial: 010D0C9F4328584E6C6F6B8AE9190668D5D84480 Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 9009 IP address blocks: 192.253.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:6b:8a:e9:19:06:68:d5:d8:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=4be0c779-4cda-473b-a407-e9ace031eda5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:01:2d:e7:27:bd:35:d6:25:53:4f:33:6e: bf:d5:72:06:96:8c:78:22:18:ac:e7:58:8e:54:bf: f7:c0:5f:fe:1e:60:f1:27:75:29:52:70:71:b1:14: 5e:f5:05:ee:81:33:55:e8:b1:b5:31:61:60:c0:7a: 21:db:02:10:20:1c:dc:3f:e0:e7:90:b6:69:23:77: 13:c2:4c:73:97:4d:8c:30:08:ad:2d:fc:2a:77:6b: e7:c7:71:04:37:69:5b:66:bb:f4:89:44:a5:b6:6b: 94:2c:ba:b5:b1:19:a8:84:f7:84:34:50:87:b2:e7: a9:48:85:05:34:5f:da:35:8e:b2:c3:3c:7d:47:d1: b4:90:3e:f9:8e:74:d1:4e:99:88:c7:36:22:50:6c: f2:ec:96:ef:b0:5e:2a:b1:32:21:95:7f:2d:4d:a2: 24:48:a7:88:59:1b:48:54:8b:50:0a:d3:d1:8e:16: 2a:68:8e:ef:14:08:19:37:20:de:68:ff:e2:a4:48: 84:de:d0:c2:24:b4:fa:13:fd:aa:a5:22:c0:02:d6: f2:e7:5e:47:0c:47:96:c3:67:94:90:dc:dd:2c:4c: 01:4a:96:ed:8d:f5:c0:69:70:88:55:31:8a:75:a5: 40:56:dd:de:22:9d:29:5d:cc:9b:26:dc:0e:ba:19: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3C:39:39:E7:AF:77:59:92:05:22:76:26:C1:EA:9F:FA:45:22:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/d99b025b-4b90-3aed-8469-1094c7405548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl X509v3 Authority Key Identifier: keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer sbgp-ipAddrBlock: critical IPv4: 192.253.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4e:29:a4:83:e1:91:07:0f:c6:bb:fe:8d:b2:4f:4f:0a:ec: d5:cd:bc:42:ac:ca:06:67:96:b2:00:0c:82:e8:36:84:fa:20: b5:e9:8e:64:b6:5d:1a:27:a9:61:b1:ca:b9:d5:d6:00:a7:41: 3a:1e:3e:f3:ff:ec:d9:19:c0:23:4b:b8:cf:f1:1f:54:26:91: 7c:16:5b:73:93:bc:f4:90:e0:95:8f:0c:1d:66:f8:58:06:6a: 7f:9a:ff:f2:4a:be:8f:44:62:32:d1:4d:d2:6f:5d:82:6a:e2: fc:a5:c4:87:84:3f:20:2c:87:e0:5a:07:9a:f5:1a:4d:3b:f3: 46:98:ae:29:e9:d0:8e:25:bc:93:8f:73:f4:f2:44:44:22:cb: 89:ed:eb:3e:20:a5:2e:f9:36:89:0d:db:92:fc:b3:2d:8c:84: 34:ea:55:0f:e1:c7:ce:33:80:3a:4d:5a:25:07:82:e5:1c:c0: 1e:00:0c:06:e1:b2:c9:db:1c:3e:51:fa:96:4c:01:18:7c:26: 40:44:dd:a1:c0:57:d0:57:07:2a:56:86:e3:5d:2c:c5:4d:52: 1b:a0:16:bd:ad:15:86:89:e8:fd:59:a3:eb:12:6f:cc:c4:9e: 8b:00:e0:3e:50:99:ba:06:8e:da:d4:bf:17:d3:10:f8:38:b0: 9e:c2:70:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb2uK6RkGaNXYRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi MWI4MB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk NGJlMGM3NzktNGNkYS00NzNiLWE0MDctZTlhY2UwMzFlZGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMoBLecnvTXWJVNPM26/1XIGlox4Ihis51iO VL/3wF/+HmDxJ3UpUnBxsRRe9QXugTNV6LG1MWFgwHoh2wIQIBzcP+DnkLZpI3cT wkxzl02MMAitLfwqd2vnx3EEN2lbZrv0iUSltmuULLq1sRmohPeENFCHsuepSIUF NF/aNY6ywzx9R9G0kD75jnTRTpmIxzYiUGzy7JbvsF4qsTIhlX8tTaIkSKeIWRtI VItQCtPRjhYqaI7vFAgZNyDeaP/ipEiE3tDCJLT6E/2qpSLAAtby515HDEeWw2eU kNzdLEwBSpbtjfXAaXCIVTGKdaVAVt3eIp0pXcybJtwOuhl/VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOY8OTnnr3dZkgUidibB6p/6RSIGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZDk5YjAyNWItNGI5MC0z YWVkLTg0NjktMTA5NGM3NDA1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwP36MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZOKaSD4ZEHD8a7/o2yT08K7NXNvEKsygZnlrIADILoNoT6ILXpjmS2 XRonqWGxyrnV1gCnQToePvP/7NkZwCNLuM/xH1QmkXwWW3OTvPSQ4JWPDB1m+FgG an+a//JKvo9EYjLRTdJvXYJq4vylxIeEPyAsh+BaB5r1Gk0780aYrinp0I4lvJOP c/TyREQiy4nt6z4gpS75NokN25L8sy2MhDTqVQ/hx84zgDpNWiUHguUcwB4ADAbh ssnbHD5R+pZMARh8JkBE3aHAV9BXBypWhuNdLMVNUhugFr2tFYaJ6P1Zo+sSb8zE nosA4D5QmboGjtrUvxfTEPg4sJ7CcH0= -----END CERTIFICATE-----Generated at Tue Jul 21 14:58:54 2026 by rpki-client