$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa File: 48ed3810-816a-3e90-8728-bcb8b396c1a9.roa (raw, json) Hash identifier: hWgsiCTL5TGIwyJ2CaAa+vvYzJjuPuLEMzxbfsnCCwY= Subject key identifier: C9:24:8D:A0:6B:D8:BA:E0:71:96:A3:63:8A:DD:C5:1C:13:C2:25:54 Certificate issuer: /CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450 Certificate serial: 010D0C9F4328584AF256793009A8813EF1E4C100 Authority key identifier: A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 394688 IP address blocks: 192.152.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:79:30:09:a8:81:3e:f1:e4:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=a5fa8dd3-0f41-4967-bd1a-00c5f8d27be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:59:ff:f5:8e:85:f6:01:ed:19:a4:14:4a:23: f3:9b:24:a3:d4:90:09:d4:0d:0b:30:c1:97:17:b9: b8:f1:e2:03:63:5c:6b:96:ac:13:cd:de:c3:89:c9: 36:f6:bc:c2:6b:2e:58:92:20:30:b5:02:97:02:7b: 02:7e:5d:75:36:ff:86:a6:1b:2e:97:6c:fd:d9:d0: 5a:15:6a:ce:a2:87:b9:dc:8e:6a:05:29:b8:47:9a: c4:23:a0:ab:19:88:88:95:76:61:9e:f7:e0:db:a4: 90:60:ec:f6:90:05:44:1c:b4:c5:cd:77:80:bd:06: 3b:22:3b:a5:7d:9f:cd:41:d9:ee:72:5e:76:27:13: 73:f2:9d:4c:48:9a:cd:41:68:d8:d0:2a:4c:90:c2: a9:19:88:5d:47:4d:93:5e:b7:d4:48:26:81:82:50: e8:d9:52:ae:2a:8f:27:ea:1d:76:03:27:73:04:2a: e8:7f:5b:d2:67:f1:6a:4a:6b:64:65:3b:97:d9:8e: 69:54:8a:c8:38:f8:b7:d5:28:ac:58:00:3f:80:38: d7:c0:30:e8:52:30:c6:b9:db:5b:dc:2f:a5:4a:4e: 26:e2:4d:07:b7:91:8a:85:4f:7d:85:4e:33:4e:d3: 89:c4:1e:b9:fc:49:63:77:7e:d3:f9:4c:8f:05:5c: 6b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:24:8D:A0:6B:D8:BA:E0:71:96:A3:63:8A:DD:C5:1C:13:C2:25:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/48ed3810-816a-3e90-8728-bcb8b396c1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.crl X509v3 Authority Key Identifier: keyid:A2:42:64:E5:0B:6C:5C:DA:DE:37:D9:44:16:26:3D:B5:FC:75:92:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/02db41c6-f8ef-4ee2-b6dc-a61ba0fb9450.cer sbgp-ipAddrBlock: critical IPv4: 192.152.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c8:c1:58:a0:5e:b4:92:14:59:e4:41:50:7f:10:97:e5:9d: af:70:f5:fd:e1:05:52:75:f6:50:31:a0:bd:d7:d7:df:90:49: 29:cc:13:69:e0:32:c9:33:fa:71:ac:93:cd:b7:ac:86:bc:eb: 88:1d:e5:5a:df:55:2d:68:99:98:15:f5:44:6c:cc:05:67:f1: c8:e0:3a:d5:88:65:b5:30:ce:9f:69:97:cb:4b:cc:a4:88:7e: cc:ec:ac:16:b7:2c:38:43:38:e5:61:d3:ea:55:3d:0d:ca:07: 10:88:c2:79:6b:58:8e:cf:04:b0:10:04:f0:5d:cb:78:50:94: 4b:8c:45:54:2d:1c:3a:6b:dc:97:77:b1:d1:ec:1d:4b:0a:54: d9:fd:a3:8d:5e:be:38:ec:ef:0a:b1:37:b1:b4:94:5c:57:59: 20:9f:8d:9d:bb:cc:eb:72:58:92:67:95:bc:e3:d6:c9:71:c1: c2:e6:4b:c3:f3:c4:79:55:6c:26:17:6f:d0:d4:fd:e2:57:bc: d1:cf:fb:cd:2c:86:b2:0d:1a:60:d3:5a:e9:0c:cc:77:2b:33: b8:4d:69:b0:9f:71:96:5c:b1:3a:13:90:bd:24:ea:52:56:9f: fa:5e:21:60:57:2a:4b:19:41:56:39:e9:63:1d:7d:c9:1a:d1: da:ed:e1:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnkwCaiBPvHkwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDJkYjQxYzYtZjhlZi00ZWUyLWI2ZGMtYTYxYmEwZmI5 NDUwMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk YTVmYThkZDMtMGY0MS00OTY3LWJkMWEtMDBjNWY4ZDI3YmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVn/9Y6F9gHtGaQUSiPzmySj1JAJ1A0LMMGX F7m48eIDY1xrlqwTzd7Dick29rzCay5YkiAwtQKXAnsCfl11Nv+Gphsul2z92dBa FWrOooe53I5qBSm4R5rEI6CrGYiIlXZhnvfg26SQYOz2kAVEHLTFzXeAvQY7Ijul fZ/NQdnucl52JxNz8p1MSJrNQWjY0CpMkMKpGYhdR02TXrfUSCaBglDo2VKuKo8n 6h12AydzBCrof1vSZ/FqSmtkZTuX2Y5pVIrIOPi31SisWAA/gDjXwDDoUjDGudtb 3C+lSk4m4k0Ht5GKhU99hU4zTtOJxB65/Eljd37T+UyPBVxriwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkkjaBr2LrgcZajY4rdxRwTwiVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wMmRi NDFjNi1mOGVmLTRlZTItYjZkYy1hNjFiYTBmYjk0NTAvNDhlZDM4MTAtODE2YS0z ZTkwLTg3MjgtYmNiOGIzOTZjMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDJkYjQxYzYtZjhlZi00ZWUyLWI2 ZGMtYTYxYmEwZmI5NDUwLzAyZGI0MWM2LWY4ZWYtNGVlMi1iNmRjLWE2MWJhMGZi OTQ1MC5jcmwwHwYDVR0jBBgwFoAUokJk5QtsXNreN9lEFiY9tfx1koswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wMmRiNDFjNi1mOGVmLTRlZTItYjZkYy1hNjFi YTBmYjk0NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJjzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXIwVigXrSSFFnkQVB/EJflna9w9f3hBVJ19lAxoL3X19+QSSnME2ng Mskz+nGsk823rIa864gd5VrfVS1omZgV9URszAVn8cjgOtWIZbUwzp9pl8tLzKSI fszsrBa3LDhDOOVh0+pVPQ3KBxCIwnlrWI7PBLAQBPBdy3hQlEuMRVQtHDpr3Jd3 sdHsHUsKVNn9o41evjjs7wqxN7G0lFxXWSCfjZ27zOtyWJJnlbzj1slxwcLmS8Pz xHlVbCYXb9DU/eJXvNHP+80shrINGmDTWukMzHcrM7hNabCfcZZcsToTkL0k6lJW n/peIWBXKksZQVY56WMdfcka0drt4XI= -----END CERTIFICATE-----Generated at Sun Nov 2 21:22:43 2025 by rpki-client