$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa File: acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa (raw, json) Hash identifier: wt6UHUWbXROGHJ3BIZ/4NDjzanABGA4cGmBFe/GLiKE= Subject key identifier: 91:46:75:E9:65:90:74:EB:F5:2F:E1:ED:07:F7:FE:24:3F:EC:E8:34 Certificate issuer: /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e Certificate serial: 010D0C9F4328584C401110755FD67C1D94459DFC Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa Signing time: Sat 20 Dec 2025 14:00:38 +0000 ROA not before: Sat 20 Dec 2025 14:00:38 +0000 ROA not after: Fri 20 Mar 2026 13:00:38 +0000 asID: 19442 IP address blocks: 192.25.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:40:11:10:75:5f:d6:7c:1d:94:45:9d:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e Validity Not Before: Dec 20 14:00:38 2025 GMT Not After : Mar 20 13:00:38 2026 GMT Subject: CN=ee4f145f-7d04-4545-a080-bfbbfbc17999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:bb:95:f8:b5:7d:80:1e:a5:d5:6e:89:71: 47:27:8e:f3:50:dd:c2:c1:74:d1:d1:fa:c5:5e:47: ca:74:6d:f4:10:e1:dc:87:6e:88:d4:b1:6a:7d:26: bf:b7:d3:44:0c:6c:ce:46:e0:36:2a:2b:40:91:3f: f7:2f:63:6c:de:62:66:94:dd:c6:ea:9d:fb:a6:8a: e9:c8:12:51:28:39:9a:ff:ed:28:59:9b:cd:5f:44: 3e:9e:69:c8:92:49:5b:f3:8e:4c:0c:4b:21:05:89: 7f:36:bb:89:7c:7c:46:2c:dd:0b:be:2c:e6:71:fd: 79:db:7c:06:f6:12:ed:92:4e:59:db:34:44:56:d9: 7d:a1:97:21:50:5e:ec:6c:49:9e:98:b4:7f:d7:d3: 06:72:46:34:22:74:50:68:bd:fa:cc:85:6a:f6:da: 28:37:66:fb:9f:ad:e9:ce:9d:5f:a6:58:82:0a:41: c1:45:fb:6d:18:c5:c7:44:a2:cb:88:78:98:4d:58: 46:62:a9:06:d3:89:8d:17:a3:4f:a1:35:29:e8:39: 0d:aa:00:2c:ea:28:c4:86:40:3f:78:2f:c9:49:84: 8a:aa:c4:e3:75:1f:d7:57:fc:a0:e3:5f:93:3e:9e: ec:ef:b1:9a:8c:f7:76:c1:1b:92:06:36:89:4a:9c: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:46:75:E9:65:90:74:EB:F5:2F:E1:ED:07:F7:FE:24:3F:EC:E8:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/acf6f90e-6e04-37cb-a2b6-a98535dd6261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl X509v3 Authority Key Identifier: keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer sbgp-ipAddrBlock: critical IPv4: 192.25.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:5c:3f:a6:cd:b9:85:84:79:91:01:a1:b9:45:b2:f1:2a:fb: ca:67:ad:83:80:f0:77:5c:5e:79:c3:a7:de:65:4c:f0:3c:c5: 3a:11:a7:2d:10:37:49:be:75:59:b6:1a:b4:1d:71:1e:83:c4: 5e:af:29:ca:db:83:3f:97:ea:16:8e:22:40:c7:78:99:34:87: 9a:23:2f:8b:df:59:62:0c:6a:6e:24:8e:b9:b8:1d:45:27:45: 3f:6f:cf:c1:cf:6b:b5:1c:31:51:d3:7b:b6:61:bf:35:a5:bf: 2d:a0:4d:43:bd:00:fb:ac:2f:86:de:ee:3a:b1:e0:a8:91:6b: 00:55:ea:52:1e:d2:d1:7e:b8:0d:e9:e9:fa:e7:64:3b:59:ba: 07:26:1a:6c:c8:b8:3c:bc:d5:d9:34:6f:8e:b3:92:71:4c:30: d8:1a:bc:45:7e:1b:42:8c:fb:7d:6b:60:d0:df:1b:2f:4b:14: 57:33:af:bd:81:a5:37:98:7e:fe:9f:52:43:ad:aa:29:33:83: 7f:d5:6c:6b:f6:82:a0:80:f4:dc:f8:1f:17:80:6c:a4:12:00: 70:06:ab:2c:e3:2e:7a:b9:de:80:69:f1:a0:6f:df:20:a0:82: 0b:4c:0d:13:d3:0a:02:ed:d0:42:3f:ea:87:f8:fc:7b:d0:e5: bc:8e:24:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExAERB1X9Z8HZRFnfwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg0ZjQ1YmMtNjFiMy00M2RkLWI4NTgtMGViMWE2YTdi NzJlMB4XDTI1MTIyMDE0MDAzOFoXDTI2MDMyMDEzMDAzOFowLzEtMCsGA1UEAxMk ZWU0ZjE0NWYtN2QwNC00NTQ1LWEwODAtYmZiYmZiYzE3OTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlC7lfi1fYAepdVuiXFHJ47zUN3CwXTR0frF XkfKdG30EOHch26I1LFqfSa/t9NEDGzORuA2KitAkT/3L2Ns3mJmlN3G6p37porp yBJRKDma/+0oWZvNX0Q+nmnIkklb845MDEshBYl/NruJfHxGLN0Lvizmcf1523wG 9hLtkk5Z2zREVtl9oZchUF7sbEmemLR/19MGckY0InRQaL36zIVq9tooN2b7n63p zp1fpliCCkHBRfttGMXHRKLLiHiYTVhGYqkG04mNF6NPoTUp6DkNqgAs6ijEhkA/ eC/JSYSKqsTjdR/XV/yg41+TPp7s77GajPd2wRuSBjaJSpyUMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFGdellkHTr9S/h7Qf3/iQ/7Og0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRm NDViYy02MWIzLTQzZGQtYjg1OC0wZWIxYTZhN2I3MmUvYWNmNmY5MGUtNmUwNC0z N2NiLWEyYjYtYTk4NTM1ZGQ2MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTg0ZjQ1YmMtNjFiMy00M2RkLWI4 NTgtMGViMWE2YTdiNzJlLzE4NGY0NWJjLTYxYjMtNDNkZC1iODU4LTBlYjFhNmE3 YjcyZS5jcmwwHwYDVR0jBBgwFoAU1su1+FzryDHOMvoxQFhDa7e70sswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xODRmNDViYy02MWIzLTQzZGQtYjg1OC0wZWIx YTZhN2I3MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZcP6bNuYWEeZEBoblFsvEq+8pnrYOA8HdcXnnDp95lTPA8xToRpy0Q N0m+dVm2GrQdcR6DxF6vKcrbgz+X6haOIkDHeJk0h5ojL4vfWWIMam4kjrm4HUUn RT9vz8HPa7UcMVHTe7ZhvzWlvy2gTUO9APusL4be7jqx4KiRawBV6lIe0tF+uA3p 6frnZDtZugcmGmzIuDy81dk0b46zknFMMNgavEV+G0KM+31rYNDfGy9LFFczr72B pTeYfv6fUkOtqikzg3/VbGv2gqCA9Nz4HxeAbKQSAHAGqyzjLnq53oBp8aBv3yCg ggtMDRPTCgLt0EI/6of4/HvQ5byOJIY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:27:50 2026 by rpki-client