$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a6273e3-3536-31d5-b395-9cd42d3d563a.roa File: 3a6273e3-3536-31d5-b395-9cd42d3d563a.roa (raw, json) Hash identifier: uBNTeW5FONixoyusadyR9RcN0pFzGSuXnM/Vb/3mYD4= Subject key identifier: A2:2F:06:75:BF:DC:F4:01:A0:93:D4:2D:5B:B0:DD:2A:3F:FD:9B:0E Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C67D0EB4D9B3A9807B480 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a6273e3-3536-31d5-b395-9cd42d3d563a.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 192.154.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:67:d0:eb:4d:9b:3a:98:07:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=c864d268-1735-4cb0-a54b-f662ab432f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:99:cf:8a:41:46:33:9c:9d:a3:dd:bd:ea: 21:f9:48:8c:8d:84:bd:47:5b:d8:c8:ac:08:2f:4b: d4:b4:cc:bf:92:b8:5f:5c:4c:d1:dc:21:cd:92:fc: 57:66:6e:54:f9:44:66:ca:f1:8e:86:17:94:86:62: 20:68:41:4c:b7:05:18:f6:99:d8:94:c4:7e:ef:21: 5e:44:6e:cb:13:63:e7:e9:b9:ab:cc:76:06:74:65: cc:f1:9a:dc:a7:28:8e:80:7c:3e:73:5d:c6:f3:a7: 68:94:ba:7f:16:6b:16:1f:7e:e6:bb:4f:9e:d7:ea: 26:c6:fe:f6:f3:de:66:8a:ae:6b:1c:57:63:40:3c: f6:5c:e8:15:94:c8:36:5f:1d:c5:42:a6:63:12:49: 70:3e:7e:71:ee:fb:8d:27:88:95:bc:a8:87:2a:a3: 67:9b:28:2f:c0:2b:2f:a0:d8:b0:00:8c:1c:83:40: 30:69:ac:33:0d:21:3e:f8:68:d6:82:18:26:52:5e: 32:40:8c:29:25:8f:af:67:c0:c5:93:55:17:99:50: 13:86:af:d7:9d:1f:c9:5e:1d:14:4e:c7:bb:f2:8c: aa:84:b3:a1:fa:65:1d:80:b5:b0:65:d3:e6:98:61: ab:ea:91:26:a4:58:70:47:5d:4d:e3:b2:c3:96:55: 2d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2F:06:75:BF:DC:F4:01:A0:93:D4:2D:5B:B0:DD:2A:3F:FD:9B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a6273e3-3536-31d5-b395-9cd42d3d563a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 192.154.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6d:5a:f9:c9:79:40:c0:88:ca:a5:6d:88:d9:31:d3:5f:1c: f1:36:e3:28:68:39:13:da:c1:d1:0c:24:ca:c3:53:ff:9f:f3: e4:c4:a5:d9:7e:48:a9:62:2a:0d:98:67:53:a6:ab:dc:d7:1a: c5:11:3d:d2:56:35:0e:28:d5:5d:38:60:85:06:d7:2d:f9:a0: 2d:00:75:e8:2a:4b:e5:ae:5e:e2:94:2e:53:47:ac:aa:2f:8d: 0d:4f:da:81:cd:c8:2f:f2:16:82:9f:f0:31:fd:57:56:45:42: 51:5e:b4:c8:ef:89:03:2e:05:cb:a0:8c:4b:ca:5a:ed:8f:80: 76:af:9a:2d:46:d8:14:14:62:cb:2a:fb:f6:a3:bd:00:7f:00: a5:e1:0b:36:63:13:0e:32:6a:33:3f:c5:7a:cf:73:68:00:1e: 40:fe:98:19:fc:7c:03:4e:b6:10:a6:dd:80:f2:92:00:4f:48: 64:56:ee:42:1a:b4:5c:41:da:2b:ab:b6:3a:13:b9:79:a9:5e: 70:b7:6a:cb:4d:2a:46:2a:9a:eb:2d:47:63:ce:a6:56:cb:eb: 1b:86:e0:9e:4d:e0:28:a0:0e:93:e7:e8:5a:e8:e7:53:b4:2c: 6f:7f:54:64:f1:bf:e7:28:bd:ad:51:32:be:12:9f:eb:73:db: dd:90:13:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGfQ602bOpgHtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk Yzg2NGQyNjgtMTczNS00Y2IwLWE1NGItZjY2MmFiNDMyZjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9mZz4pBRjOcnaPdveoh+UiMjYS9R1vYyKwI L0vUtMy/krhfXEzR3CHNkvxXZm5U+URmyvGOhheUhmIgaEFMtwUY9pnYlMR+7yFe RG7LE2Pn6bmrzHYGdGXM8ZrcpyiOgHw+c13G86dolLp/FmsWH37mu0+e1+omxv72 895miq5rHFdjQDz2XOgVlMg2Xx3FQqZjEklwPn5x7vuNJ4iVvKiHKqNnmygvwCsv oNiwAIwcg0AwaawzDSE++GjWghgmUl4yQIwpJY+vZ8DFk1UXmVAThq/XnR/JXh0U Tse78oyqhLOh+mUdgLWwZdPmmGGr6pEmpFhwR11N47LDllUtNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIvBnW/3PQBoJPULVuw3So//ZsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2E2MjczZTMtMzUzNi0z MWQ1LWIzOTUtOWNkNDJkM2Q1NjNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABltWvnJeUDAiMqlbYjZMdNfHPE24yhoORPawdEMJMrDU/+f8+TEpdl+ SKliKg2YZ1Omq9zXGsURPdJWNQ4o1V04YIUG1y35oC0AdegqS+WuXuKULlNHrKov jQ1P2oHNyC/yFoKf8DH9V1ZFQlFetMjviQMuBcugjEvKWu2PgHavmi1G2BQUYssq +/ajvQB/AKXhCzZjEw4yajM/xXrPc2gAHkD+mBn8fANOthCm3YDykgBPSGRW7kIa tFxB2iurtjoTuXmpXnC3astNKkYqmustR2POplbL6xuG4J5N4CigDpPn6Fro51O0 LG9/VGTxv+cova1RMr4Sn+tz292QE4c= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:50 2025 by rpki-client