$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa File: 6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa (raw, json) Hash identifier: +r3+OTabG7XLqYeV7ZKBqVjZYh+MpzX9P5Nu7bjDVg4= Subject key identifier: 48:30:6A:A9:52:93:E9:EA:E0:D7:DB:67:BA:55:1F:29:60:0F:CD:19 Certificate issuer: /CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db Certificate serial: 010D0C9F4328584B715CAC059256B2E356CE5200 Authority key identifier: 82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa Signing time: Tue 07 Oct 2025 13:00:37 +0000 ROA not before: Tue 07 Oct 2025 13:00:37 +0000 ROA not after: Mon 05 Jan 2026 14:00:37 +0000 asID: 3066 IP address blocks: 192.148.252.0/23 maxlen: 23 192.148.252.0/24 maxlen: 24 192.148.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:5c:ac:05:92:56:b2:e3:56:ce:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e11e0f43-7d84-4ecc-a694-873b3d92a8db Validity Not Before: Oct 7 13:00:37 2025 GMT Not After : Jan 5 14:00:37 2026 GMT Subject: CN=b8d90d63-e6ff-4256-83ff-85b53bafb8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:06:ed:6f:a4:44:12:dc:e1:b6:b0:3f:f6:a0: bd:db:3f:64:b3:72:65:01:ed:63:8f:b9:8d:2e:a4: 21:64:b9:21:10:61:d9:bb:a1:1e:0d:6a:de:3f:cb: fb:0b:df:5e:be:6d:2f:5e:a8:7a:0a:e3:65:42:34: 43:cc:1f:21:d5:18:d7:6e:60:99:37:b1:64:10:94: be:ef:08:b6:8f:08:71:9f:5e:24:ab:bd:7c:ed:33: d0:de:9e:53:51:67:50:12:e4:f0:79:f3:d6:38:69: 7b:e9:fb:6a:14:55:69:a2:cf:d8:ad:f8:a9:e5:1f: 42:05:cf:e8:6f:3a:03:66:5e:eb:6e:c2:6a:19:a2: ff:bb:1a:bf:b0:ad:54:b8:79:10:4e:66:48:94:82: 60:95:0a:cf:d3:50:44:52:5c:02:f6:ef:af:96:5d: c9:d8:44:4d:62:74:25:98:ad:4d:f0:72:df:99:8b: 17:20:10:1c:22:ef:ef:71:d1:4e:2a:8a:9b:e8:3e: 46:0e:ad:14:10:36:5c:7a:09:35:4b:c6:23:ea:25: 1c:93:61:23:c6:fa:7e:cf:20:20:84:23:1a:b7:9e: 2a:7c:8d:6d:c5:33:9f:4e:23:f7:66:6d:b9:c5:66: 19:05:1f:67:48:68:51:7c:dc:e7:42:24:1d:51:00: db:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:30:6A:A9:52:93:E9:EA:E0:D7:DB:67:BA:55:1F:29:60:0F:CD:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/6f20a05d-7cb2-3925-8015-0d100bc87c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db/e11e0f43-7d84-4ecc-a694-873b3d92a8db.crl X509v3 Authority Key Identifier: keyid:82:6B:47:39:40:65:5E:42:3F:33:D1:8E:3D:7A:3D:AC:B4:B9:F2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e11e0f43-7d84-4ecc-a694-873b3d92a8db.cer sbgp-ipAddrBlock: critical IPv4: 192.148.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:06:37:e8:e0:5a:41:cc:aa:d7:b9:cf:fd:51:53:1d:b0:0a: e5:7e:a4:f5:94:76:22:48:47:12:1b:2d:c2:ed:e8:a1:ab:b0: d7:dd:e0:ea:60:f0:56:82:31:f1:36:e6:7b:f9:57:8b:06:af: 71:fb:fc:97:0b:5e:6b:bb:d0:f7:c1:0c:d1:c9:da:f6:db:24: 1f:6d:e7:a0:00:b1:8e:32:b9:2f:ce:b5:0d:52:af:bc:c8:2a: c7:f7:3d:61:7b:94:64:75:24:1f:41:d1:05:a0:a0:7e:c7:4c: 43:50:d5:63:32:69:d6:6a:59:2d:c6:a9:8d:9e:a9:77:d2:9f: 70:3e:62:b4:5f:71:79:e5:a0:fb:68:b0:32:06:54:60:b6:ab: 00:0d:63:6f:b4:d2:de:67:d4:cf:84:79:31:77:0d:b9:a4:3a: 26:f5:5a:61:a0:f1:ee:0b:5f:b9:5c:f2:3f:e1:b8:8e:10:0b: fb:61:40:77:96:05:19:4d:90:b8:2c:a4:ac:02:a1:f2:39:02: c8:02:41:97:9c:e7:6d:16:c0:12:14:d8:0c:8d:43:6e:46:f9: 46:f4:99:e8:15:32:de:1a:59:3e:ea:c2:2e:9a:fe:d7:aa:49: f0:3a:44:57:fd:44:94:9d:a7:af:4d:01:67:22:41:8a:6e:81: 8b:fa:c2:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxXKwFklay41bOUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTExZTBmNDMtN2Q4NC00ZWNjLWE2OTQtODczYjNkOTJh OGRiMB4XDTI1MTAwNzEzMDAzN1oXDTI2MDEwNTE0MDAzN1owLzEtMCsGA1UEAxMk YjhkOTBkNjMtZTZmZi00MjU2LTgzZmYtODViNTNiYWZiOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAbtb6REEtzhtrA/9qC92z9ks3JlAe1jj7mN LqQhZLkhEGHZu6EeDWreP8v7C99evm0vXqh6CuNlQjRDzB8h1RjXbmCZN7FkEJS+ 7wi2jwhxn14kq7187TPQ3p5TUWdQEuTwefPWOGl76ftqFFVpos/Yrfip5R9CBc/o bzoDZl7rbsJqGaL/uxq/sK1UuHkQTmZIlIJglQrP01BEUlwC9u+vll3J2ERNYnQl mK1N8HLfmYsXIBAcIu/vcdFOKoqb6D5GDq0UEDZcegk1S8Yj6iUck2Ejxvp+zyAg hCMat54qfI1txTOfTiP3Zm25xWYZBR9nSGhRfNznQiQdUQDbLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgwaqlSk+nq4NfbZ7pVHylgD80ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFl MGY0My03ZDg0LTRlY2MtYTY5NC04NzNiM2Q5MmE4ZGIvNmYyMGEwNWQtN2NiMi0z OTI1LTgwMTUtMGQxMDBiYzg3YzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZTExZTBmNDMtN2Q4NC00ZWNjLWE2 OTQtODczYjNkOTJhOGRiL2UxMWUwZjQzLTdkODQtNGVjYy1hNjk0LTg3M2IzZDky YThkYi5jcmwwHwYDVR0jBBgwFoAUgmtHOUBlXkI/M9GOPXo9rLS58t4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lMTFlMGY0My03ZDg0LTRlY2MtYTY5NC04NzNi M2Q5MmE4ZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJT8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAGN+jgWkHMqte5z/1RUx2wCuV+pPWUdiJIRxIbLcLt6KGrsNfd4Opg 8FaCMfE25nv5V4sGr3H7/JcLXmu70PfBDNHJ2vbbJB9t56AAsY4yuS/OtQ1Sr7zI Ksf3PWF7lGR1JB9B0QWgoH7HTENQ1WMyadZqWS3GqY2eqXfSn3A+YrRfcXnloPto sDIGVGC2qwANY2+00t5n1M+EeTF3DbmkOib1WmGg8e4LX7lc8j/huI4QC/thQHeW BRlNkLgspKwCofI5AsgCQZec520WwBIU2AyNQ25G+Ub0megVMt4aWT7qwi6a/teq SfA6RFf9RJSdp69NAWciQYpugYv6whA= -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:26 2025 by rpki-client