$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa File: 76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa (raw, json) Hash identifier: ISpViZCfV6nmFUIbEBdI2V0IY/V56AeWNw4AGAs7fW0= Subject key identifier: F1:82:5F:17:C3:B7:8C:AE:A1:D2:9D:96:14:6E:76:A5:AF:C8:74:1F Certificate issuer: /CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b Certificate serial: 010D0C9F4328584AFC1BF50C59D6E90517992500 Authority key identifier: B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 394414 IP address blocks: 192.154.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f5:0c:59:d6:e9:05:17:99:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c5256e48-88f9-413d-a1bf-e14eaab2e51b Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=838c1ec5-94e6-4ee6-b0f2-77d9548cedfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:84:0d:17:75:1d:af:1b:67:b4:89:e0:71:67: eb:53:fc:f7:5a:2a:cc:f9:8f:50:cc:54:25:42:5b: 28:67:0c:84:2d:cf:85:58:eb:09:87:4c:2d:72:b3: 40:1f:64:b2:63:ce:b3:83:15:7e:e7:e3:64:75:20: f7:ab:28:9f:19:cb:25:71:1f:8b:23:72:7e:27:2e: df:ae:b5:38:28:8b:b4:08:7c:b1:a0:c0:bf:78:b5: 99:c6:69:08:2a:99:f9:e7:1d:e5:05:8c:de:88:3e: 31:30:e7:6c:88:1d:12:32:bd:fd:76:72:d7:4a:e5: f1:aa:88:29:1b:ea:8f:f5:eb:af:0f:39:55:5d:95: 37:db:97:79:5b:3e:58:9f:ba:0f:c3:b5:de:2f:7e: 65:5a:52:12:e2:e9:27:4b:ee:78:66:9d:b4:d6:6a: cc:56:d0:01:e9:8d:70:de:09:bc:d2:da:8c:59:97: 34:63:f4:2d:b1:b1:98:68:81:36:f8:0f:12:57:e5: 26:cd:ae:7d:bd:f0:eb:03:75:d5:08:d7:d5:47:63: 45:af:e2:3c:c0:08:00:ee:95:ba:0d:3c:76:bc:b6: 07:b0:17:86:6d:5c:46:7a:4e:60:15:8f:6c:17:9b: df:8a:84:f0:fe:3b:12:5d:79:e5:c2:d2:df:3b:14: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:82:5F:17:C3:B7:8C:AE:A1:D2:9D:96:14:6E:76:A5:AF:C8:74:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/76fd694a-9b12-33c3-95f0-cf5fb6e77a89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b/c5256e48-88f9-413d-a1bf-e14eaab2e51b.crl X509v3 Authority Key Identifier: keyid:B9:88:57:D7:0A:19:65:04:8C:ED:4B:19:B2:24:E5:62:E2:77:8B:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c5256e48-88f9-413d-a1bf-e14eaab2e51b.cer sbgp-ipAddrBlock: critical IPv4: 192.154.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:dd:52:03:4e:c6:c4:2a:47:9f:2a:71:60:90:aa:23:7d:ca: 8c:29:f7:b1:e9:6d:6d:c2:b8:f2:ef:f1:02:f7:4d:c7:2a:70: 08:8f:1f:61:44:61:61:11:dc:bb:16:3b:06:93:ff:9b:1d:65: 2e:92:25:e2:e1:9e:4e:4b:94:9b:79:6f:9f:9a:2f:10:3a:27: 6f:e4:68:80:67:c0:c3:d2:69:05:4d:0b:92:c6:cf:72:80:f8: 18:dd:05:a8:9f:30:25:c5:aa:f7:04:57:7e:f2:d6:5f:68:b9: d3:46:5f:33:7f:1f:a3:a1:0d:eb:07:31:76:6e:22:ae:0a:af: 96:1b:a7:e8:ca:25:70:74:30:32:42:e1:26:ba:ae:f4:f6:88: aa:cf:9a:3b:3c:cb:7d:2e:e5:a0:60:e2:e0:f6:d7:4d:8b:0b: 39:c7:84:5a:fd:0e:f1:15:dd:30:4d:fd:bd:5d:97:25:3a:80: 9a:7b:af:49:69:72:2c:bb:83:ca:8d:25:3e:b1:c4:5d:a7:d9: 7c:18:1b:d6:06:78:d7:d0:37:0e:c5:9e:ef:6e:05:41:68:36: 21:fe:bd:a0:66:e3:7d:c9:53:df:90:58:0c:b9:35:ae:5f:02: cd:db:8a:97:36:43:2b:91:1c:95:84:d0:d2:a6:ce:dd:29:cf: 94:36:15:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/UMWdbpBReZJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzUyNTZlNDgtODhmOS00MTNkLWExYmYtZTE0ZWFhYjJl NTFiMB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ODM4YzFlYzUtOTRlNi00ZWU2LWIwZjItNzdkOTU0OGNlZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIQNF3UdrxtntIngcWfrU/z3WirM+Y9QzFQl QlsoZwyELc+FWOsJh0wtcrNAH2SyY86zgxV+5+NkdSD3qyifGcslcR+LI3J+Jy7f rrU4KIu0CHyxoMC/eLWZxmkIKpn55x3lBYzeiD4xMOdsiB0SMr39dnLXSuXxqogp G+qP9euvDzlVXZU325d5Wz5Yn7oPw7XeL35lWlIS4uknS+54Zp201mrMVtAB6Y1w 3gm80tqMWZc0Y/QtsbGYaIE2+A8SV+Umza59vfDrA3XVCNfVR2NFr+I8wAgA7pW6 DTx2vLYHsBeGbVxGek5gFY9sF5vfioTw/jsSXXnlwtLfOxTyjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGCXxfDt4yuodKdlhRudqWvyHQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1 NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRlYWFiMmU1MWIvNzZmZDY5NGEtOWIxMi0z M2MzLTk1ZjAtY2Y1ZmI2ZTc3YTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzUyNTZlNDgtODhmOS00MTNkLWEx YmYtZTE0ZWFhYjJlNTFiL2M1MjU2ZTQ4LTg4ZjktNDEzZC1hMWJmLWUxNGVhYWIy ZTUxYi5jcmwwHwYDVR0jBBgwFoAUuYhX1woZZQSM7UsZsiTlYuJ3i2QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jNTI1NmU0OC04OGY5LTQxM2QtYTFiZi1lMTRl YWFiMmU1MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJoDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXdUgNOxsQqR58qcWCQqiN9yowp97HpbW3CuPLv8QL3TccqcAiPH2FE YWER3LsWOwaT/5sdZS6SJeLhnk5LlJt5b5+aLxA6J2/kaIBnwMPSaQVNC5LGz3KA +BjdBaifMCXFqvcEV37y1l9oudNGXzN/H6OhDesHMXZuIq4Kr5Ybp+jKJXB0MDJC 4Sa6rvT2iKrPmjs8y30u5aBg4uD2102LCznHhFr9DvEV3TBN/b1dlyU6gJp7r0lp ciy7g8qNJT6xxF2n2XwYG9YGeNfQNw7Fnu9uBUFoNiH+vaBm433JU9+QWAy5Na5f As3bipc2QyuRHJWE0NKmzt0pz5Q2FaY= -----END CERTIFICATE-----Generated at Wed Sep 10 09:04:59 2025 by rpki-client