$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa File: acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa (raw, json) Hash identifier: NFbEUy00ngEhYXiE7E+79JC4i7hkvzOreu++jVP6/MI= Subject key identifier: BE:21:9A:B1:6E:BC:AA:BD:49:EC:1B:DF:0D:43:FB:2C:80:72:BC:78 Certificate issuer: /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e Certificate serial: 010D0C9F4328584B5F37289123CD123C1B4C7D00 Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 19442 IP address blocks: 192.25.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:28:91:23:cd:12:3c:1b:4c:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=99e0ea45-c50f-431a-8ae2-52b57ede94a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:f3:cb:75:06:c9:63:ae:ad:b1:46:78:f1: be:04:07:92:2b:5d:af:c6:bd:c0:dc:b5:4b:cf:88: 4e:bb:a3:01:77:2a:bb:63:d5:7e:c4:8f:d7:49:bc: 29:ce:ca:3d:24:29:b7:4f:ea:20:49:6c:6f:3f:30: 66:5c:0f:18:91:5d:ea:f8:d0:1c:29:d7:85:0e:9b: 50:1a:d0:42:2c:ac:7f:0c:fa:59:23:db:50:5e:5e: b3:ff:71:fa:d2:03:15:62:95:9a:54:f6:7c:bf:ee: 0f:a1:4b:46:a0:be:1e:90:aa:59:1b:e8:08:7a:8d: d2:51:7d:d6:48:19:9a:68:6a:f5:b3:c8:aa:23:18: 10:3f:57:47:e7:77:f2:a5:3a:53:a5:97:49:90:69: 06:4c:93:f4:44:0e:11:f4:4d:74:f5:23:92:8f:10: a1:52:f7:cc:58:c8:e7:0c:2c:d0:dc:a8:d0:6a:21: 48:2e:38:71:32:92:ca:53:8e:36:a8:62:8d:6e:17: 48:c0:57:99:e1:5e:8a:a5:c1:60:6f:8f:64:ee:84: c7:50:91:a3:dc:33:18:f3:28:92:6a:6e:5b:40:36: ef:03:78:73:5b:1f:15:03:23:1d:d0:27:72:78:45: d0:a5:25:7d:92:c6:66:25:2b:c4:45:77:bf:9d:91: 33:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:21:9A:B1:6E:BC:AA:BD:49:EC:1B:DF:0D:43:FB:2C:80:72:BC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl X509v3 Authority Key Identifier: keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer sbgp-ipAddrBlock: critical IPv4: 192.25.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ce:98:a7:6d:4e:6f:12:63:e4:85:4a:7b:fd:85:3c:61:bc: b1:09:8b:c0:31:57:d2:4d:bf:64:71:67:6f:b3:5a:52:ab:5e: 52:71:c8:ea:72:a3:53:90:12:43:62:69:cd:e3:39:68:00:1a: f3:8d:1a:5e:b8:da:47:f9:ee:3a:4c:8c:8b:ce:a1:da:d5:29: b8:9a:1f:57:03:17:e4:97:95:12:5b:fe:24:5d:30:65:72:ab: 3b:12:3f:66:76:ac:49:b9:a4:95:f8:41:2c:b4:05:29:1b:ce: 72:8c:21:9a:fe:bc:a9:21:e2:b3:9e:28:15:88:49:1d:c9:66: 43:8e:41:66:74:b8:aa:99:a3:73:82:57:d6:88:3d:84:60:16: 08:01:02:ed:ec:f8:ca:3a:17:76:c5:fb:5c:86:85:05:73:40: 2d:11:90:28:00:ff:03:a7:b4:f2:d9:48:8f:79:d2:d2:37:3e: 2b:94:80:f5:31:f2:37:13:b7:f1:22:8e:18:ec:72:d6:9e:e7: 50:bd:df:17:1e:cd:0e:3f:36:b7:88:3c:2e:c6:e7:7a:f6:fb: e8:75:95:12:93:6c:ed:e1:8b:e4:48:ac:2b:b0:9b:50:fe:0b: 18:3b:70:71:4c:85:1a:7b:43:a1:89:3b:64:51:9c:85:87:83: 65:40:8d:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfNyiRI80SPBtMfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg0ZjQ1YmMtNjFiMy00M2RkLWI4NTgtMGViMWE2YTdi NzJlMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk OTllMGVhNDUtYzUwZi00MzFhLThhZTItNTJiNTdlZGU5NGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK7zy3UGyWOurbFGePG+BAeSK12vxr3A3LVL z4hOu6MBdyq7Y9V+xI/XSbwpzso9JCm3T+ogSWxvPzBmXA8YkV3q+NAcKdeFDptQ GtBCLKx/DPpZI9tQXl6z/3H60gMVYpWaVPZ8v+4PoUtGoL4ekKpZG+gIeo3SUX3W SBmaaGr1s8iqIxgQP1dH53fypTpTpZdJkGkGTJP0RA4R9E109SOSjxChUvfMWMjn DCzQ3KjQaiFILjhxMpLKU442qGKNbhdIwFeZ4V6KpcFgb49k7oTHUJGj3DMY8yiS am5bQDbvA3hzWx8VAyMd0CdyeEXQpSV9ksZmJSvERXe/nZEzmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4hmrFuvKq9Sewb3w1D+yyAcrx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRm NDViYy02MWIzLTQzZGQtYjg1OC0wZWIxYTZhN2I3MmUvYWNmNmY5MGUtNmUwNC0z N2NiLWEyYjYtYTk4NTM1ZGQ2MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTg0ZjQ1YmMtNjFiMy00M2RkLWI4 NTgtMGViMWE2YTdiNzJlLzE4NGY0NWJjLTYxYjMtNDNkZC1iODU4LTBlYjFhNmE3 YjcyZS5jcmwwHwYDVR0jBBgwFoAU1su1+FzryDHOMvoxQFhDa7e70sswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRmNDViYy02MWIzLTQzZGQtYjg1OC0wZWIx YTZhN2I3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPOmKdtTm8SY+SFSnv9hTxhvLEJi8AxV9JNv2RxZ2+zWlKrXlJxyOpy o1OQEkNiac3jOWgAGvONGl642kf57jpMjIvOodrVKbiaH1cDF+SXlRJb/iRdMGVy qzsSP2Z2rEm5pJX4QSy0BSkbznKMIZr+vKkh4rOeKBWISR3JZkOOQWZ0uKqZo3OC V9aIPYRgFggBAu3s+Mo6F3bF+1yGhQVzQC0RkCgA/wOntPLZSI950tI3PiuUgPUx 8jcTt/Eijhjsctae51C93xcezQ4/NreIPC7G53r2++h1lRKTbO3hi+RIrCuwm1D+ Cxg7cHFMhRp7Q6GJO2RRnIWHg2VAjcQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:34:47 2025 by rpki-client