$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa File: ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa (raw, json) Hash identifier: IcLbqastGgCh6HPS+DURPh+azpNX+3UZpaMKH4Zn8NI= Subject key identifier: D8:D7:81:14:9B:39:22:FB:56:C4:71:D9:6B:AA:D4:42:12:D3:5F:29 Certificate issuer: /CN=12fa7453-6b85-412b-b280-7c71eec6c46b Certificate serial: 010D0C9F4328584B2496C5AC803E17DBDBF90DCA Authority key identifier: 6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 394356 IP address blocks: 158.51.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:c5:ac:80:3e:17:db:db:f9:0d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12fa7453-6b85-412b-b280-7c71eec6c46b Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=5b3f5a6c-71f1-41cd-8ae0-5e1aaeb538da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:42:b3:e3:65:13:bd:7d:0f:ca:38:1d:f8:2c: 3e:ea:47:53:59:a2:1b:56:75:2b:a3:00:d3:3f:d8: ca:7a:30:fc:98:7f:09:c9:aa:a6:0c:5a:4e:28:f4: de:69:0e:25:c4:53:a3:45:a9:11:79:88:49:8e:0c: 9e:88:0a:ad:d5:b7:c6:ea:fb:04:8a:70:11:1d:e9: 5b:61:62:ad:60:89:52:4a:34:94:8a:84:03:bd:99: 11:92:29:c6:a5:fb:ad:61:45:dc:b6:4e:f0:f9:92: 8b:79:80:be:e3:69:21:ea:a9:49:34:75:0b:91:4a: 63:34:0f:0a:c8:9f:d6:18:a4:b5:60:26:e4:a8:24: 71:18:ae:09:3c:f8:a4:be:21:e7:a1:3d:f9:c5:46: 1b:eb:f7:17:87:80:89:42:93:af:12:5c:e7:bc:0f: c7:3c:f7:29:13:ff:e1:ba:1d:1c:21:66:4d:2a:30: 03:49:1f:95:f4:ee:39:6e:99:42:66:2d:68:bf:fd: 44:04:94:9b:95:ae:f7:c1:b9:63:22:35:9e:e8:c3: b8:b4:8b:ee:1f:b4:3a:70:44:e2:d5:3f:81:ea:0d: 90:1b:e4:6f:ab:95:72:75:04:34:5d:1b:4c:18:19: 72:b8:c4:33:53:be:26:a3:c3:54:79:e7:7f:88:68: 74:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:81:14:9B:39:22:FB:56:C4:71:D9:6B:AA:D4:42:12:D3:5F:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/ffa280a4-d0de-3791-8fdc-60d53efa6d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b/12fa7453-6b85-412b-b280-7c71eec6c46b.crl X509v3 Authority Key Identifier: keyid:6A:52:B7:00:A6:FA:7F:6D:B6:3C:CC:97:63:A0:7F:18:31:EF:1A:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/12fa7453-6b85-412b-b280-7c71eec6c46b.cer sbgp-ipAddrBlock: critical IPv4: 158.51.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0d:39:1d:bd:f6:09:8b:05:5b:b4:66:2d:9c:55:03:2e:47: 7b:f7:82:2a:fa:90:64:ef:eb:a3:74:d6:5c:9c:bd:30:dc:52: c8:e2:69:02:5f:61:5b:70:e2:93:ce:2d:90:5c:4e:3d:f0:66: ab:c4:9b:4a:0b:4d:c2:41:09:b2:e6:7f:89:2a:a4:39:16:a5: 54:ae:5b:82:ba:eb:e1:d6:34:25:7b:be:12:03:1f:03:eb:d5: 55:1b:83:1b:7f:a4:45:65:b4:54:b0:17:65:75:07:d7:a2:27: ef:76:09:8d:5e:d7:76:5e:58:6b:91:94:0d:fb:02:04:20:79: 67:15:29:cb:16:df:73:56:fe:bf:80:db:b0:06:09:12:0d:df: 54:d0:c2:71:c6:5b:7b:39:95:e3:71:4a:59:50:aa:62:cb:d0: 9c:86:22:ac:05:87:61:59:61:11:4d:f7:a9:45:f9:40:d3:ce: 8b:c6:9f:45:4c:c2:fb:9a:62:1b:bd:72:ca:3c:48:4a:0a:57: 43:7f:72:b5:44:ba:cd:2e:67:7f:2d:f7:1a:46:28:2e:55:f8: c9:4a:bb:1f:45:e8:d8:10:21:b9:03:22:10:5f:9f:25:b6:d6: fe:ce:16:ea:31:68:0c:ef:0d:f6:fa:04:9f:1b:97:af:b8:1b: 52:41:fc:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsWsgD4X29v5DcowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTJmYTc0NTMtNmI4NS00MTJiLWIyODAtN2M3MWVlYzZj NDZiMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NWIzZjVhNmMtNzFmMS00MWNkLThhZTAtNWUxYWFlYjUzOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUKz42UTvX0Pyjgd+Cw+6kdTWaIbVnUrowDT P9jKejD8mH8JyaqmDFpOKPTeaQ4lxFOjRakReYhJjgyeiAqt1bfG6vsEinARHelb YWKtYIlSSjSUioQDvZkRkinGpfutYUXctk7w+ZKLeYC+42kh6qlJNHULkUpjNA8K yJ/WGKS1YCbkqCRxGK4JPPikviHnoT35xUYb6/cXh4CJQpOvElznvA/HPPcpE//h uh0cIWZNKjADSR+V9O45bplCZi1ov/1EBJSbla73wbljIjWe6MO4tIvuH7Q6cETi 1T+B6g2QG+Rvq5VydQQ0XRtMGBlyuMQzU74mo8NUeed/iGh0OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjXgRSbOSL7VsRx2Wuq1EIS018pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZh NzQ1My02Yjg1LTQxMmItYjI4MC03YzcxZWVjNmM0NmIvZmZhMjgwYTQtZDBkZS0z NzkxLThmZGMtNjBkNTNlZmE2ZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTJmYTc0NTMtNmI4NS00MTJiLWIy ODAtN2M3MWVlYzZjNDZiLzEyZmE3NDUzLTZiODUtNDEyYi1iMjgwLTdjNzFlZWM2 YzQ2Yi5jcmwwHwYDVR0jBBgwFoAUalK3AKb6f222PMyXY6B/GDHvGhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMmZhNzQ1My02Yjg1LTQxMmItYjI4MC03Yzcx ZWVjNmM0NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMNOR299gmLBVu0Zi2cVQMuR3v3gir6kGTv66N01lycvTDcUsjiaQJf YVtw4pPOLZBcTj3wZqvEm0oLTcJBCbLmf4kqpDkWpVSuW4K66+HWNCV7vhIDHwPr 1VUbgxt/pEVltFSwF2V1B9eiJ+92CY1e13ZeWGuRlA37AgQgeWcVKcsW33NW/r+A 27AGCRIN31TQwnHGW3s5leNxSllQqmLL0JyGIqwFh2FZYRFN96lF+UDTzovGn0VM wvuaYhu9cso8SEoKV0N/crVEus0uZ38t9xpGKC5V+MlKux9F6NgQIbkDIhBfnyW2 1v7OFuoxaAzvDfb6BJ8bl6+4G1JB/Fk= -----END CERTIFICATE-----Generated at Mon Nov 3 18:51:41 2025 by rpki-client