$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa File: 15a352be-1ca7-3a48-977f-0bef64fffe17.roa (raw, json) Hash identifier: 2LAlu27A2f08PqugDgJqR/s1e3T02Kv2cyfpIK2CyZI= Subject key identifier: 92:51:0E:4F:6C:01:20:7D:2F:B4:BF:52:E6:48:2C:FC:03:87:79:90 Certificate issuer: /CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629 Certificate serial: 010D0C9F4328584B92DCE12E88CF65FEE895D2C0 Authority key identifier: BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 10965 IP address blocks: 192.245.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:e1:2e:88:cf:65:fe:e8:95:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=2db7b862-e11d-40f5-89a5-0caf2763fad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:c7:3d:03:f8:04:4f:e2:11:2b:8d:a1:ad: 7f:6f:82:4b:e7:94:aa:00:db:32:b2:13:0a:7d:8e: 05:2f:cf:7f:09:ea:24:e1:9e:e5:a2:dd:41:ee:a7: d3:ee:1f:eb:28:c9:c4:3e:97:93:3e:d0:f3:ed:7a: 1d:9e:84:7e:0c:7f:50:24:ba:1a:05:35:74:50:c1: f4:e5:e6:54:ad:4f:33:0a:d3:60:04:87:e5:ba:c1: c3:f9:fc:d6:90:a2:0e:78:30:04:2c:52:cf:eb:22: 7e:91:5e:2f:6e:9e:d3:c8:c5:a6:4a:27:66:d1:8e: ba:ae:a1:fe:22:ca:22:26:f2:05:dd:6c:99:ed:15: 25:f3:6d:01:30:65:b9:66:8a:9e:c0:fc:22:e9:b8: 85:97:dc:70:05:23:df:71:3a:1b:36:b6:84:78:d0: 9b:77:e1:8e:6c:5a:1c:05:80:56:32:b1:da:e6:7c: 24:a3:50:e6:18:28:eb:d5:18:aa:04:e2:e4:92:9b: 11:e6:e0:6b:20:cf:f6:c8:33:30:cf:c6:c9:fa:b7: 7a:38:70:fa:ca:37:6f:81:d3:40:f3:5f:a0:cc:31: 99:6f:3f:b9:ee:d7:53:d2:95:b9:c0:16:9e:e8:f5: 98:13:40:f2:59:60:96:cb:15:c8:01:e5:05:8d:3e: 64:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:51:0E:4F:6C:01:20:7D:2F:B4:BF:52:E6:48:2C:FC:03:87:79:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl X509v3 Authority Key Identifier: keyid:BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer sbgp-ipAddrBlock: critical IPv4: 192.245.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c0:d2:26:8e:8d:28:49:0c:f7:ea:39:4c:a0:b6:c1:a5:98: 48:79:95:e2:19:c3:58:9a:70:c2:0b:c9:96:95:1f:30:45:50: 0d:e9:48:b8:f2:1f:a9:05:4c:15:4b:a8:6d:af:7e:90:c2:f3: d8:4b:c1:80:b9:f4:01:7d:ab:fd:3b:f2:6f:01:cc:e1:c3:13: 52:7d:8c:d3:14:dd:a0:10:ad:e3:03:32:58:31:40:13:6f:c7: 25:67:7d:61:d0:1e:b9:92:d5:b7:e3:f4:c3:06:64:c9:30:3d: 71:57:0e:e9:fe:56:5a:ae:1b:61:d0:72:d6:69:d2:a8:72:25: 73:bd:d2:a0:d3:91:46:a6:18:89:2d:11:b4:59:a2:c2:6c:71: bf:ad:00:5e:fe:03:4b:2f:5f:c4:08:20:12:21:08:0f:c6:ee: be:bf:7a:f0:03:c6:30:f2:90:fb:8d:54:66:da:e8:85:dd:1d: 80:9b:ae:43:95:b9:cd:d9:c4:0e:4b:da:87:f9:90:27:d1:24: b0:03:45:03:8c:6d:c4:25:7f:6a:4a:de:9d:cb:27:de:2b:a4: 87:84:82:d0:ca:f8:09:b2:6c:0c:31:ff:6b:b6:67:04:16:ef: 3d:cc:5b:9c:a5:68:07:6e:73:15:dc:c0:a5:09:9a:a2:9a:68: a4:06:de:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3OEuiM9l/uiV0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ2NDY2MGUtYWRiOS00ZGMzLWEwMmItZDAyZDBkNWQ5 NjI5MB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk MmRiN2I4NjItZTExZC00MGY1LTg5YTUtMGNhZjI3NjNmYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvjHPQP4BE/iESuNoa1/b4JL55SqANsyshMK fY4FL89/Ceok4Z7lot1B7qfT7h/rKMnEPpeTPtDz7XodnoR+DH9QJLoaBTV0UMH0 5eZUrU8zCtNgBIflusHD+fzWkKIOeDAELFLP6yJ+kV4vbp7TyMWmSidm0Y66rqH+ IsoiJvIF3WyZ7RUl820BMGW5ZoqewPwi6biFl9xwBSPfcTobNraEeNCbd+GObFoc BYBWMrHa5nwko1DmGCjr1RiqBOLkkpsR5uBrIM/2yDMwz8bJ+rd6OHD6yjdvgdNA 81+gzDGZbz+57tdT0pW5wBae6PWYE0DyWWCWyxXIAeUFjT5kMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJRDk9sASB9L7S/UuZILPwDh3mQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZDY0 NjYwZS1hZGI5LTRkYzMtYTAyYi1kMDJkMGQ1ZDk2MjkvMTVhMzUyYmUtMWNhNy0z YTQ4LTk3N2YtMGJlZjY0ZmZmZTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWQ2NDY2MGUtYWRiOS00ZGMzLWEw MmItZDAyZDBkNWQ5NjI5LzVkNjQ2NjBlLWFkYjktNGRjMy1hMDJiLWQwMmQwZDVk OTYyOS5jcmwwHwYDVR0jBBgwFoAUvulMlw0L87ZVDtbi5jaytUfBL5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZDY0NjYwZS1hZGI5LTRkYzMtYTAyYi1kMDJk MGQ1ZDk2MjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPUzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLA0iaOjShJDPfqOUygtsGlmEh5leIZw1iacMILyZaVHzBFUA3pSLjy H6kFTBVLqG2vfpDC89hLwYC59AF9q/078m8BzOHDE1J9jNMU3aAQreMDMlgxQBNv xyVnfWHQHrmS1bfj9MMGZMkwPXFXDun+VlquG2HQctZp0qhyJXO90qDTkUamGIkt EbRZosJscb+tAF7+A0svX8QIIBIhCA/G7r6/evADxjDykPuNVGba6IXdHYCbrkOV uc3ZxA5L2of5kCfRJLADRQOMbcQlf2pK3p3LJ94rpIeEgtDK+AmybAwx/2u2ZwQW 7z3MW5ylaAducxXcwKUJmqKaaKQG3i8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:50:30 2025 by rpki-client