$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/a2e41fd1-a26d-319c-9815-a983df5dfa36.roa File: a2e41fd1-a26d-319c-9815-a983df5dfa36.roa (raw, json) Hash identifier: 3SiE6GW23MbHT/TTcWDaXN98X0EGjB0by1NMUFDAQSU= Subject key identifier: B0:73:06:30:24:7F:F0:9F:B3:8F:D5:94:0D:6D:79:DA:91:70:C5:55 Certificate issuer: /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Certificate serial: 010D0C9F4328584B515FF07594ECE45DC49D0240 Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/a2e41fd1-a26d-319c-9815-a983df5dfa36.roa Signing time: Fri 26 Sep 2025 02:01:29 +0000 ROA not before: Fri 26 Sep 2025 02:01:29 +0000 ROA not after: Thu 25 Dec 2025 03:01:29 +0000 asID: 21507 IP address blocks: 153.53.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:5f:f0:75:94:ec:e4:5d:c4:9d:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Validity Not Before: Sep 26 02:01:29 2025 GMT Not After : Dec 25 03:01:29 2025 GMT Subject: CN=1a1debef-68ed-4708-8638-b73e29abc91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:fa:4c:60:0a:ca:78:56:c2:ec:52:70:eb:a5: 8f:c4:52:80:31:ed:ce:75:a8:77:9d:ce:27:7e:d3: c2:04:56:67:8f:d4:49:e2:3a:b7:3b:57:0e:b6:0c: b1:9a:46:63:2a:2f:10:96:31:e6:fe:00:76:b9:c0: 46:08:ac:0a:93:14:07:f2:8d:5b:5c:53:cd:a6:3c: 38:f6:fb:10:b8:b6:90:b6:51:b9:43:25:fa:21:02: 5e:89:ed:93:9d:a6:f4:20:49:93:1a:da:f0:0f:e6: 80:67:26:c1:07:c7:74:2a:e1:cb:97:de:67:f7:68: 34:4b:e1:f2:11:8a:f7:c6:d3:f3:92:67:b8:be:73: 4f:ee:94:44:c6:cc:80:16:60:8e:98:78:a4:0f:22: a9:51:b5:43:9d:db:f7:3e:af:bc:d7:d7:05:2a:ec: e6:98:9e:c9:28:93:93:d2:51:e7:71:33:fc:d3:a7: 11:1e:2b:33:93:59:3b:8b:b2:cd:5c:ee:f4:96:37: de:3e:32:a9:81:81:bb:08:f0:af:1c:9b:21:79:b2: 59:fc:be:9b:72:30:e1:4b:35:95:62:ac:c2:f0:a2: 1d:7b:e3:23:4c:09:a0:01:01:92:db:d7:07:6a:92: 87:15:23:3b:22:49:7f:ea:53:da:3a:15:c8:38:d0: a9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:73:06:30:24:7F:F0:9F:B3:8F:D5:94:0D:6D:79:DA:91:70:C5:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/a2e41fd1-a26d-319c-9815-a983df5dfa36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl X509v3 Authority Key Identifier: keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer sbgp-ipAddrBlock: critical IPv4: 153.53.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:62:89:82:92:50:74:8c:0c:ae:f0:9e:df:3a:2e:29:f6:c7: f9:e4:64:15:0f:8f:da:06:6d:70:40:0c:d4:c8:9e:d8:63:65: 04:0f:c0:d7:53:9a:98:4d:f3:a0:f0:27:7e:4a:57:47:73:9a: a1:48:fc:9a:51:ce:ae:f1:05:2e:6a:8b:99:36:73:87:aa:79: 90:0d:24:5f:16:68:07:7b:81:a5:e5:89:22:57:69:d8:00:8a: 47:10:2f:65:12:db:b1:ae:fc:cd:f2:34:45:08:1a:b8:31:43: d5:b5:7e:6b:42:f1:87:79:07:84:31:61:bf:d0:3c:35:6c:23: 09:fc:3f:c4:7c:d5:dc:d6:fe:b3:8e:23:d3:13:78:c4:8e:c6: de:dc:26:f3:65:0b:c1:e7:be:e0:3d:08:bb:39:e8:3e:51:fc: fd:58:ec:d5:49:bc:4c:52:fa:d6:f9:de:33:29:78:fc:87:55: c6:3d:7e:d0:13:d5:04:a6:a8:d8:23:f8:c9:51:8a:fe:e9:52: 7c:28:94:c7:db:54:53:c8:8f:94:9d:2e:ee:c9:3f:48:2d:82: bc:36:4a:97:94:de:0b:aa:d2:95:ca:46:2c:1c:c1:38:a4:40: 1e:fd:48:00:fc:d4:4e:70:c5:33:f1:b0:4b:1d:fd:7f:5e:ef: 2c:b8:9f:05 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEtRX/B1lOzkXcSdAkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI1ZjRkOGUtMjIwZC00YjIxLWE4ZjgtNTdlZDkxYmE4 NmU0MB4XDTI1MDkyNjAyMDEyOVoXDTI1MTIyNTAzMDEyOVowLzEtMCsGA1UEAxMk MWExZGViZWYtNjhlZC00NzA4LTg2MzgtYjczZTI5YWJjOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPpMYArKeFbC7FJw66WPxFKAMe3Odah3nc4n ftPCBFZnj9RJ4jq3O1cOtgyxmkZjKi8QljHm/gB2ucBGCKwKkxQH8o1bXFPNpjw4 9vsQuLaQtlG5QyX6IQJeie2Tnab0IEmTGtrwD+aAZybBB8d0KuHLl95n92g0S+Hy EYr3xtPzkme4vnNP7pRExsyAFmCOmHikDyKpUbVDndv3Pq+819cFKuzmmJ7JKJOT 0lHncTP806cRHiszk1k7i7LNXO70ljfePjKpgYG7CPCvHJshebJZ/L6bcjDhSzWV YqzC8KIde+MjTAmgAQGS29cHapKHFSM7Ikl/6lPaOhXIONCpiwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLBzBjAkf/Cfs4/VlA1tedqRcMVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVm NGQ4ZS0yMjBkLTRiMjEtYThmOC01N2VkOTFiYTg2ZTQvYTJlNDFmZDEtYTI2ZC0z MTljLTk4MTUtYTk4M2RmNWRmYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzI1ZjRkOGUtMjIwZC00YjIxLWE4 ZjgtNTdlZDkxYmE4NmU0L2MyNWY0ZDhlLTIyMGQtNGIyMS1hOGY4LTU3ZWQ5MWJh ODZlNC5jcmwwHwYDVR0jBBgwFoAULMAHHFwzZ6QTgXk+lrcV2bN7LlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVmNGQ4ZS0yMjBkLTRiMjEtYThmOC01N2Vk OTFiYTg2ZTQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmTUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAE2KJgpJQdIwMrvCe3zouKfbH+eRkFQ+P2gZtcEAM1Mie2GNlBA/A11Oa mE3zoPAnfkpXR3OaoUj8mlHOrvEFLmqLmTZzh6p5kA0kXxZoB3uBpeWJIldp2ACK RxAvZRLbsa78zfI0RQgauDFD1bV+a0Lxh3kHhDFhv9A8NWwjCfw/xHzV3Nb+s44j 0xN4xI7G3twm82ULwee+4D0IuznoPlH8/Vjs1Um8TFL61vneMyl4/IdVxj1+0BPV BKao2CP4yVGK/ulSfCiUx9tUU8iPlJ0u7sk/SC2CvDZKl5TeC6rSlcpGLBzBOKRA Hv1IAPzUTnDFM/GwSx39f17vLLifBQ== -----END CERTIFICATE-----Generated at Thu Oct 9 03:30:09 2025 by rpki-client