$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c009e9cf-86b1-3400-a745-538222ebb3a6.roa File: c009e9cf-86b1-3400-a745-538222ebb3a6.roa (raw, json) Hash identifier: FwJ+2r0Wl9WOZwmpWHH8Vu3InWYisz+28NHxByIwjTo= Subject key identifier: 0E:C7:D0:CE:9D:A4:7C:01:67:ED:85:7F:86:10:3B:30:A0:BC:04:83 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C67C1BA30872B42E6FB00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c009e9cf-86b1-3400-a745-538222ebb3a6.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 192.154.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:67:c1:ba:30:87:2b:42:e6:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=d5104059-afbf-4201-9b28-a29d958008d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:06:96:32:32:5e:b3:37:5f:c6:47:c7:b1: 3f:1f:1c:a6:81:05:ed:02:91:9b:0e:d2:71:ed:ac: ec:24:c6:4f:5f:a0:43:c1:cc:ab:f6:47:c2:53:21: 10:14:ee:5c:6e:c2:f2:0d:c7:6d:b5:eb:ee:4d:82: 80:45:d6:64:54:30:a4:98:b2:f5:d5:d3:2f:b7:29: 22:82:60:21:e1:72:e8:24:10:a3:a9:64:6c:62:78: 5d:5e:2f:06:0a:36:16:fb:89:a7:bd:a0:90:8d:81: fc:38:f0:11:83:07:93:10:4b:16:88:d0:29:e1:48: bf:ad:ac:4b:da:ee:ae:fd:8b:13:b6:44:af:15:1a: 7d:ac:02:80:67:a4:87:99:7d:37:b3:94:7d:a3:4b: bd:84:fd:01:92:c8:f9:07:53:55:0c:47:7f:e5:d0: 03:f2:08:25:f4:1e:b1:a9:cd:0a:5d:34:81:80:b9: 7e:70:4f:3e:5a:a1:04:29:aa:46:94:8a:f5:5d:e2: 09:cd:dd:46:33:45:2d:ff:55:b3:42:e5:5d:00:9f: 0f:7a:96:12:7f:89:22:6e:59:93:ce:2f:23:35:24: a8:63:dc:79:10:e4:91:ed:2e:72:82:96:ba:ac:75: 71:96:9a:cb:6e:23:04:37:20:68:59:0b:94:92:07: 65:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C7:D0:CE:9D:A4:7C:01:67:ED:85:7F:86:10:3B:30:A0:BC:04:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c009e9cf-86b1-3400-a745-538222ebb3a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 192.154.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c2:5d:b3:45:bd:48:31:62:6c:72:96:15:7c:63:1a:92:be: f6:eb:8a:e3:2a:6a:5e:97:6d:f9:0e:a2:2e:c1:bf:d3:46:38: e6:46:ec:b8:ec:cc:2f:c1:44:b1:9d:c5:ea:44:79:c4:a2:5b: 85:98:49:45:b8:e3:e3:94:ab:a7:71:b6:a8:12:a7:2a:1b:42: c6:bd:50:60:99:95:20:0b:27:32:e7:b6:c7:6c:ba:9b:cb:4a: 27:4b:e1:2e:62:c9:1c:e6:03:3b:7d:04:8e:15:34:a4:5b:2c: 41:b0:49:91:13:bc:98:1d:32:6f:be:c6:d5:8b:e6:d8:ec:ae: 9f:57:ef:b7:e4:9e:54:df:1a:74:14:ed:8b:26:26:b2:f6:3e: 67:5f:04:9d:48:b3:ab:9b:1e:fd:64:ea:e0:3a:0f:40:11:51: 97:a1:c0:5d:6c:33:3e:b0:f6:12:46:16:75:02:6d:48:13:dc: 89:cc:ab:02:2e:12:74:45:8d:89:8f:91:48:2c:67:fc:23:a5: 6a:6e:29:31:f7:0d:36:71:0a:1d:94:80:68:c8:73:b2:89:cd: 6f:dd:77:bf:4e:35:69:5f:69:0f:5e:d7:fe:ad:99:6a:cd:0b: 8e:de:57:31:c5:56:c9:c4:8b:d1:b3:de:3f:86:e1:f3:b4:61: a9:42:ff:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGfBujCHK0Lm+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk ZDUxMDQwNTktYWZiZi00MjAxLTliMjgtYTI5ZDk1ODAwOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXIGljIyXrM3X8ZHx7E/HxymgQXtApGbDtJx 7azsJMZPX6BDwcyr9kfCUyEQFO5cbsLyDcdttevuTYKARdZkVDCkmLL11dMvtyki gmAh4XLoJBCjqWRsYnhdXi8GCjYW+4mnvaCQjYH8OPARgweTEEsWiNAp4Ui/raxL 2u6u/YsTtkSvFRp9rAKAZ6SHmX03s5R9o0u9hP0Bksj5B1NVDEd/5dAD8ggl9B6x qc0KXTSBgLl+cE8+WqEEKapGlIr1XeIJzd1GM0Ut/1WzQuVdAJ8PepYSf4kiblmT zi8jNSSoY9x5EOSR7S5ygpa6rHVxlprLbiMENyBoWQuUkgdlQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7H0M6dpHwBZ+2Ff4YQOzCgvASDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzAwOWU5Y2YtODZiMS0z NDAwLWE3NDUtNTM4MjIyZWJiM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJowMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbCXbNFvUgxYmxylhV8YxqSvvbriuMqal6XbfkOoi7Bv9NGOOZG7Ljs zC/BRLGdxepEecSiW4WYSUW44+OUq6dxtqgSpyobQsa9UGCZlSALJzLntsdsupvL SidL4S5iyRzmAzt9BI4VNKRbLEGwSZETvJgdMm++xtWL5tjsrp9X77fknlTfGnQU 7YsmJrL2PmdfBJ1Is6ubHv1k6uA6D0ARUZehwF1sMz6w9hJGFnUCbUgT3InMqwIu EnRFjYmPkUgsZ/wjpWpuKTH3DTZxCh2UgGjIc7KJzW/dd79ONWlfaQ9e1/6tmWrN C47eVzHFVsnEi9Gz3j+G4fO0YalC/14= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:09 2025 by rpki-client