$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/09457b91-6ab3-365d-877f-66a15aa9bde4.roa File: 09457b91-6ab3-365d-877f-66a15aa9bde4.roa (raw, json) Hash identifier: /u+0FrSum965GjSl85KiTltKMdEvj0tEgh9rgyQbgFU= Subject key identifier: C6:4B:C6:DC:24:AE:D0:E7:62:7B:DA:25:47:B7:F9:32:9B:AC:8F:4C Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6ED70D8590BD532E2380 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/09457b91-6ab3-365d-877f-66a15aa9bde4.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 81 IP address blocks: 152.54.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6e:d7:0d:85:90:bd:53:2e:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=6ef0be15-012a-4b7a-8ded-6104c0eacf17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:95:51:41:f8:45:8e:6b:51:b9:e5:0e:4b:c4: a6:e1:29:a7:d1:53:15:e3:f8:71:fe:11:b7:29:90: 3c:97:6d:f4:c1:11:1e:19:ef:7c:88:9a:2a:a5:85: be:9e:43:b0:88:a9:47:23:03:d5:98:92:84:24:d3: 83:b1:6d:32:11:7c:88:67:a5:27:40:7d:64:f9:67: 04:18:2f:a5:bb:f5:6e:71:32:85:44:11:4c:06:ad: 9d:6d:d4:67:49:f1:75:20:c0:93:9a:8b:92:b6:75: 3e:dc:96:cb:4b:29:2d:a6:18:96:d1:b6:f2:90:b5: c1:b3:16:79:c6:92:82:f7:c8:8b:46:a3:3c:12:87: 5e:5a:ee:a1:dc:c5:e9:d3:33:62:90:d1:a1:9f:24: e3:25:57:07:07:cd:54:77:6c:17:83:96:97:64:df: 80:c3:10:87:7f:64:a2:3f:d3:e2:36:34:f6:e4:11: 8f:43:24:23:01:7e:cd:f8:ae:3f:82:0d:d4:64:f4: 10:ec:94:47:a2:1f:81:97:35:b0:e0:5b:f9:1e:31: 61:0a:5f:f5:fd:c5:2e:96:23:7f:d0:a8:72:04:99: 62:1d:31:f9:2c:06:23:b3:f4:03:7a:c6:c6:08:9a: f0:93:1e:c9:08:3c:d5:b1:da:bd:b1:14:07:0c:56: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:4B:C6:DC:24:AE:D0:E7:62:7B:DA:25:47:B7:F9:32:9B:AC:8F:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/09457b91-6ab3-365d-877f-66a15aa9bde4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.54.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4a:9c:bf:ef:6b:51:53:3c:9e:22:14:f5:32:ea:14:89:81: 46:70:6c:0e:d3:35:fe:91:ab:a2:30:5b:53:43:d3:11:27:03: 9c:86:27:c8:5a:f2:88:cc:d4:f4:00:fe:01:d3:82:c9:0d:cc: aa:d2:ea:1b:19:7c:d5:7e:a2:94:37:28:2f:ed:f6:e8:f3:57: ee:3b:15:47:67:ba:c6:a9:53:a3:be:a0:6b:f2:2f:29:94:3d: 16:ca:18:02:11:da:ef:c8:2e:77:38:44:2f:49:f7:6f:5c:44: 62:43:67:6c:08:bf:bf:c4:a8:3d:84:77:2e:a2:b1:f4:02:c9: 17:00:56:1f:37:a6:4e:cc:c4:52:00:af:0b:15:23:51:9d:bd: eb:27:b1:8a:61:b2:ae:a4:9c:60:01:3c:4b:6a:09:0f:78:df: c1:d4:fd:84:51:da:ee:b7:02:7f:48:d4:9b:34:19:62:4c:0a: 45:92:39:02:7c:27:34:0c:a2:c7:a6:fc:1c:df:30:1d:09:f8: 01:34:b4:d1:90:80:58:72:86:6f:ec:9d:1e:d8:7b:01:e9:1f: 0d:e8:78:18:0f:99:24:d1:25:3b:f1:b6:9c:4b:70:17:cb:ac: f8:f6:06:99:54:ad:26:1c:c4:d5:79:7a:f0:f8:02:a9:49:e9: 03:86:b2:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG7XDYWQvVMuI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk NmVmMGJlMTUtMDEyYS00YjdhLThkZWQtNjEwNGMwZWFjZjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pVRQfhFjmtRueUOS8Sm4Smn0VMV4/hx/hG3 KZA8l230wREeGe98iJoqpYW+nkOwiKlHIwPVmJKEJNODsW0yEXyIZ6UnQH1k+WcE GC+lu/VucTKFRBFMBq2dbdRnSfF1IMCTmouStnU+3JbLSyktphiW0bbykLXBsxZ5 xpKC98iLRqM8EodeWu6h3MXp0zNikNGhnyTjJVcHB81Ud2wXg5aXZN+AwxCHf2Si P9PiNjT25BGPQyQjAX7N+K4/gg3UZPQQ7JRHoh+BlzWw4Fv5HjFhCl/1/cUuliN/ 0KhyBJliHTH5LAYjs/QDesbGCJrwkx7JCDzVsdq9sRQHDFY4lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZLxtwkrtDnYnvaJUe3+TKbrI9MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMDk0NTdiOTEtNmFiMy0z NjVkLTg3N2YtNjZhMTVhYTliZGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmDYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdKnL/va1FTPJ4iFPUy6hSJgUZwbA7TNf6Rq6IwW1ND0xEnA5yGJ8ha 8ojM1PQA/gHTgskNzKrS6hsZfNV+opQ3KC/t9ujzV+47FUdnusapU6O+oGvyLymU PRbKGAIR2u/ILnc4RC9J929cRGJDZ2wIv7/EqD2Edy6isfQCyRcAVh83pk7MxFIA rwsVI1GdvesnsYphsq6knGABPEtqCQ9438HU/YRR2u63An9I1Js0GWJMCkWSOQJ8 JzQMosem/BzfMB0J+AE0tNGQgFhyhm/snR7YewHpHw3oeBgPmSTRJTvxtpxLcBfL rPj2BplUrSYcxNV5evD4AqlJ6QOGssY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:58 2025 by rpki-client