$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24641704-cbd7-37d6-a51c-82756ccdf81b.roa File: 24641704-cbd7-37d6-a51c-82756ccdf81b.roa (raw, json) Hash identifier: eNLoX3CByDacQa2E0C8MzZEY3nJNRkZAk7JqxNWk9e4= Subject key identifier: 47:5B:8F:88:9E:7D:09:AB:A1:F1:CE:99:BD:2C:32:6B:6F:A8:64:DB Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A161B6D478028571767CC0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24641704-cbd7-37d6-a51c-82756ccdf81b.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 192.154.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:61:b6:d4:78:02:85:71:76:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=d20f31b0-c19d-4134-81e3-4a6a17e532f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:48:50:2f:23:4a:02:8d:80:5b:85:b6:5f:e9: f4:29:2e:11:93:0b:52:78:60:87:cf:4e:8f:ec:aa: d9:83:37:fa:bf:05:fe:30:13:69:1e:3f:4c:72:54: 4f:17:f0:11:89:e7:08:70:f7:c7:4e:5e:e3:ca:19: 6e:71:cf:3a:04:23:34:67:70:f1:65:f3:4b:5d:57: dd:84:8b:7c:1c:ca:7f:60:56:1e:c9:5a:42:f1:64: 7e:ae:7d:b3:39:17:35:86:eb:95:81:3a:73:b2:31: 15:85:a5:21:b1:92:84:cb:35:44:f2:f1:cd:64:41: cd:2d:39:93:2b:06:24:3f:9a:61:ca:19:bd:6f:e9: 61:de:59:07:60:be:b4:da:60:34:1e:8a:8b:4f:b4: d8:b5:71:7b:b3:02:87:e7:f9:33:22:5b:e5:8d:d5: ad:f0:a8:ee:1c:37:ab:4a:b7:8d:ec:d1:af:ce:25: 60:bb:da:b0:ce:67:88:19:4c:bb:63:2c:4f:ae:e7: c3:34:df:b7:14:c1:e2:83:05:a5:7f:cf:45:2b:0e: d4:ad:5e:c9:a4:bb:bd:64:e3:b6:86:73:96:a2:5a: e8:3e:58:dc:44:6f:f4:8d:26:74:b8:38:a4:06:79: bf:99:2d:c5:aa:2b:b9:11:1b:69:2f:59:17:21:62: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:5B:8F:88:9E:7D:09:AB:A1:F1:CE:99:BD:2C:32:6B:6F:A8:64:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/24641704-cbd7-37d6-a51c-82756ccdf81b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 192.154.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:2e:13:7b:68:1e:8c:21:1f:e6:39:5f:e7:f8:80:15:3c:2e: 17:40:57:84:72:04:4c:1b:fc:23:84:64:73:1c:ea:9e:c6:4d: 76:09:1b:ba:d3:aa:34:79:1e:da:89:b4:cb:22:79:e9:97:53: cf:bd:29:6a:3b:d2:d5:0f:2f:be:01:a3:10:f5:47:de:d3:bf: 2b:af:e9:2f:12:77:34:0e:a8:13:5b:e5:e5:e1:ab:39:f1:b2: 83:2c:07:29:5d:8b:c3:ae:bd:39:15:63:ff:11:b7:7c:6f:65: a2:02:e3:3d:c0:c2:3a:7f:bc:1a:d3:9c:8f:a3:87:23:dd:fc: 59:d7:ee:d0:59:00:6d:97:c6:9f:20:b3:93:0a:21:13:0b:98: a9:37:9e:22:46:9e:0f:60:04:b1:cb:9a:90:1e:48:09:9b:00: 76:e1:9a:b8:57:dc:37:a6:b9:15:6a:c9:61:40:58:d5:21:a6: f6:43:ab:37:d6:ea:7f:f7:bc:95:65:10:67:07:e6:c0:e3:d5: f6:1d:bf:39:f9:0d:3f:9c:f7:fa:0a:b5:78:31:0c:22:70:78: 8a:7b:c2:bb:29:16:7a:a5:a8:46:3e:f9:45:bb:92:ae:a9:2f: 45:26:3c:70:7f:4d:d2:c5:03:49:5b:49:81:15:75:43:82:78: 60:4f:95:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWG21HgChXF2fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDIwZjMxYjAtYzE5ZC00MTM0LTgxZTMtNGE2YTE3ZTUzMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEhQLyNKAo2AW4W2X+n0KS4RkwtSeGCHz06P 7KrZgzf6vwX+MBNpHj9MclRPF/ARiecIcPfHTl7jyhlucc86BCM0Z3DxZfNLXVfd hIt8HMp/YFYeyVpC8WR+rn2zORc1huuVgTpzsjEVhaUhsZKEyzVE8vHNZEHNLTmT KwYkP5phyhm9b+lh3lkHYL602mA0HoqLT7TYtXF7swKH5/kzIlvljdWt8KjuHDer SreN7NGvziVgu9qwzmeIGUy7YyxPrufDNN+3FMHigwWlf89FKw7UrV7JpLu9ZOO2 hnOWolroPljcRG/0jSZ0uDikBnm/mS3Fqiu5ERtpL1kXIWIftQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdbj4iefQmrofHOmb0sMmtvqGTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjQ2NDE3MDQtY2JkNy0z N2Q2LWE1MWMtODI3NTZjY2RmODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQuE3toHowhH+Y5X+f4gBU8LhdAV4RyBEwb/COEZHMc6p7GTXYJG7rT qjR5HtqJtMsieemXU8+9KWo70tUPL74BoxD1R97Tvyuv6S8SdzQOqBNb5eXhqznx soMsByldi8OuvTkVY/8Rt3xvZaIC4z3Awjp/vBrTnI+jhyPd/FnX7tBZAG2Xxp8g s5MKIRMLmKk3niJGng9gBLHLmpAeSAmbAHbhmrhX3DemuRVqyWFAWNUhpvZDqzfW 6n/3vJVlEGcH5sDj1fYdvzn5DT+c9/oKtXgxDCJweIp7wrspFnqlqEY++UW7kq6p L0UmPHB/TdLFA0lbSYEVdUOCeGBPlXY= -----END CERTIFICATE-----Generated at Tue Sep 9 07:59:33 2025 by rpki-client