$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa File: e4e25509-90e2-3048-8aef-d1f4b44a806e.roa (raw, json) Hash identifier: SAcasJ5FL8vbtklsPmsmHy+SxEXCsfQ6tCX0NHa2AmM= Subject key identifier: 37:01:E7:81:9E:D0:B7:1C:5F:C9:C8:54:6A:AF:C6:6F:03:2C:CD:EE Certificate issuer: /CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Certificate serial: 010D0C9F4328584B715CA2228AC4D771FE2A8780 Authority key identifier: D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 22987 IP address blocks: 152.86.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:a2:22:8a:c4:d7:71:fe:2a:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6acf8afa-6cb1-4c9d-84c7-5ee8845003d1 Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=7a6eb886-31cb-4671-bb44-e35f1e5adf4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:52:86:fd:ed:ae:b2:40:a3:28:82:de:ea:f4: 5e:35:6d:23:59:33:df:88:bf:36:e7:b1:97:5e:60: cf:77:14:de:e5:1d:9f:a8:6a:5b:7b:65:cb:59:67: bf:0e:6d:9e:0a:be:66:ce:ae:1d:48:90:c3:2e:87: 26:81:a0:39:12:0e:82:56:d0:45:ef:43:85:de:b6: fe:85:a7:c4:53:82:2b:5a:1a:90:32:a2:41:15:af: 21:6d:dc:ab:74:00:4a:2b:93:9a:5d:7f:53:23:9e: 1b:ad:21:3e:01:bc:8a:1a:5b:55:b2:c4:27:10:ed: 0b:3e:1b:e0:a0:9a:28:04:80:50:90:c2:7a:8f:52: 83:aa:13:b8:13:b9:a2:c1:74:37:86:3b:76:68:75: 58:2b:d8:d1:1e:87:98:b9:de:e6:13:31:13:49:e8: 91:6b:55:bf:5f:02:f5:64:53:db:05:fb:57:cd:cf: 0a:c0:07:ca:8d:d4:7f:a0:3e:a2:2d:bc:c8:3c:37: 36:33:da:5b:eb:63:31:04:2d:1b:6d:cc:3f:f3:bb: 0c:77:a2:89:e9:1a:a4:ae:ba:f3:30:aa:32:54:25: ca:6a:39:80:5c:3c:43:d4:bd:f9:1e:e5:9b:aa:08: 52:68:d2:3a:e3:66:c9:c4:48:3d:9c:14:33:49:02: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:01:E7:81:9E:D0:B7:1C:5F:C9:C8:54:6A:AF:C6:6F:03:2C:CD:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/e4e25509-90e2-3048-8aef-d1f4b44a806e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.crl X509v3 Authority Key Identifier: keyid:D8:2C:17:54:D8:10:8C:24:31:5E:DA:EA:32:BD:49:1C:54:5E:95:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6acf8afa-6cb1-4c9d-84c7-5ee8845003d1.cer sbgp-ipAddrBlock: critical IPv4: 152.86.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:67:30:f2:08:a2:b8:89:bf:a4:83:3a:b2:3c:9f:eb:36:be: 7d:27:26:d4:94:bf:af:cb:99:fe:cc:e0:ea:df:82:99:68:be: 03:e1:eb:09:d6:83:58:cc:ad:3e:56:80:15:fe:f5:cc:7a:8f: 7d:94:0b:36:18:c3:f7:ac:11:9f:b0:81:ad:7b:63:fb:46:6b: 76:39:22:2d:da:fc:23:6a:8a:d5:42:53:68:e2:cd:d5:aa:ea: d7:f8:56:c4:e9:08:a8:83:50:27:2c:c7:1c:a2:5c:fc:d9:a6: 5e:11:2e:b2:69:54:f1:42:95:a0:b3:f5:ab:5c:12:cb:6a:73: 0b:5e:d0:fe:09:b4:ac:10:dd:18:2e:30:31:17:c5:bd:65:14: 12:ba:92:33:22:47:63:61:6e:a3:77:d7:4e:f4:03:f4:64:25: 13:dd:b7:26:53:d1:36:cb:51:76:70:35:63:66:a3:8d:ca:81: e7:bd:5a:a2:ec:3d:87:f9:b4:39:a2:0d:a5:05:a1:3d:a8:41: 95:a7:e4:0c:9a:76:eb:29:1f:f7:e2:ee:c8:fa:bc:fd:35:8e: 2d:1f:4c:08:55:f7:6a:e4:29:c9:04:f5:38:ff:ee:c7:f4:60: 73:53:64:8b:13:1f:7f:3a:6d:79:c3:59:c0:05:91:5e:a6:96: 56:16:c4:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKIiisTXcf4qh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmFjZjhhZmEtNmNiMS00YzlkLTg0YzctNWVlODg0NTAw M2QxMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk N2E2ZWI4ODYtMzFjYi00NjcxLWJiNDQtZTM1ZjFlNWFkZjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFKG/e2uskCjKILe6vReNW0jWTPfiL8257GX XmDPdxTe5R2fqGpbe2XLWWe/Dm2eCr5mzq4dSJDDLocmgaA5Eg6CVtBF70OF3rb+ hafEU4IrWhqQMqJBFa8hbdyrdABKK5OaXX9TI54brSE+AbyKGltVssQnEO0LPhvg oJooBIBQkMJ6j1KDqhO4E7miwXQ3hjt2aHVYK9jRHoeYud7mEzETSeiRa1W/XwL1 ZFPbBftXzc8KwAfKjdR/oD6iLbzIPDc2M9pb62MxBC0bbcw/87sMd6KJ6Rqkrrrz MKoyVCXKajmAXDxD1L35HuWbqghSaNI642bJxEg9nBQzSQKPDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcB54Ge0LccX8nIVGqvxm8DLM3uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YWNm OGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4ODQ1MDAzZDEvZTRlMjU1MDktOTBlMi0z MDQ4LThhZWYtZDFmNGI0NGE4MDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmFjZjhhZmEtNmNiMS00YzlkLTg0 YzctNWVlODg0NTAwM2QxLzZhY2Y4YWZhLTZjYjEtNGM5ZC04NGM3LTVlZTg4NDUw MDNkMS5jcmwwHwYDVR0jBBgwFoAU2CwXVNgQjCQxXtrqMr1JHFRelVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YWNmOGFmYS02Y2IxLTRjOWQtODRjNy01ZWU4 ODQ1MDAzZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmFZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtnMPIIoriJv6SDOrI8n+s2vn0nJtSUv6/Lmf7M4OrfgplovgPh6wnW g1jMrT5WgBX+9cx6j32UCzYYw/esEZ+wga17Y/tGa3Y5Ii3a/CNqitVCU2jizdWq 6tf4VsTpCKiDUCcsxxyiXPzZpl4RLrJpVPFClaCz9atcEstqcwte0P4JtKwQ3Rgu MDEXxb1lFBK6kjMiR2NhbqN31070A/RkJRPdtyZT0TbLUXZwNWNmo43Kgee9WqLs PYf5tDmiDaUFoT2oQZWn5AyaduspH/fi7sj6vP01ji0fTAhV92rkKckE9Tj/7sf0 YHNTZIsTH386bXnDWcAFkV6mllYWxGY= -----END CERTIFICATE-----Generated at Tue Oct 21 02:33:56 2025 by rpki-client