$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa File: 653b963f-a553-3554-a571-619ed9f7c4e3.roa (raw, json) Hash identifier: f+a1seONRCBKX/FaYXRO4B/oOHriiaTw49pCUhDHKK0= Subject key identifier: FB:76:F7:1D:52:2B:21:6C:1A:F4:4D:75:75:1D:B1:93:A4:C3:34:A8 Certificate issuer: /CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc Certificate serial: 010D0C9F4328584BA39CF62DC39FE10BD2D512C0 Authority key identifier: 4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 62490 IP address blocks: 136.175.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9c:f6:2d:c3:9f:e1:0b:d2:d5:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5754a89f-37ee-48bb-8a3c-139ee06fe0fc Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=599622b6-3f38-4d31-8726-b35feb681350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:25:58:5a:0a:65:b7:30:f6:88:d5:20:fb: a8:f0:95:aa:87:20:b5:81:69:94:fe:70:28:21:6c: 5b:46:5c:b2:34:4e:e3:50:45:b5:ad:d3:a1:99:b2: ca:6c:8e:a0:e7:f1:8a:57:51:43:f0:3b:06:89:72: 17:35:9f:ca:30:6b:fd:f4:cc:ac:c2:32:65:33:db: b3:8c:ec:6d:9d:37:97:6d:b6:9b:f4:a7:87:0b:bc: 8d:d8:68:cc:e9:a4:c2:aa:30:45:e4:86:3c:19:87: 61:26:c8:81:da:20:15:f4:f9:be:8f:ab:0d:49:28: ac:71:97:85:4e:b9:96:a9:af:dc:8b:db:e0:d7:43: dd:6c:16:30:71:e6:60:26:b6:3c:b5:a6:40:7c:52: dd:58:26:ce:67:17:ed:95:61:ac:9e:a4:9c:34:ab: 22:59:af:7b:44:0d:4d:97:4e:91:d7:08:c2:fc:d0: 45:d9:04:f9:c6:d2:fc:ba:bb:8f:b4:24:24:a8:6b: 67:fa:cb:56:35:2b:3e:8a:11:6a:da:e4:f1:cf:09: 56:3a:b1:6d:4b:36:23:35:5a:32:8c:1c:15:39:04: 21:27:b0:63:7e:6f:c7:30:d8:4d:65:a6:6c:a7:5e: b2:03:52:3e:ee:d6:f7:6b:ab:3a:08:06:0f:a3:51: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:76:F7:1D:52:2B:21:6C:1A:F4:4D:75:75:1D:B1:93:A4:C3:34:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/653b963f-a553-3554-a571-619ed9f7c4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.crl X509v3 Authority Key Identifier: keyid:4A:5B:7C:62:2B:70:D9:86:B9:F4:7E:69:5C:F7:5B:B3:C5:4D:EA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5754a89f-37ee-48bb-8a3c-139ee06fe0fc.cer sbgp-ipAddrBlock: critical IPv4: 136.175.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:3c:bf:af:10:74:58:4a:bd:1f:b9:80:61:b7:46:4f:f8:bd: cf:75:0e:7e:23:a2:8e:49:7a:1d:28:c8:bb:b4:1f:33:94:c4: 99:f3:21:d6:2b:c4:5d:41:f6:e3:cb:60:00:07:aa:f9:8b:aa: 64:5e:58:8d:e0:46:07:09:73:8b:58:b9:1d:57:24:1b:37:cd: b5:53:71:2e:36:87:14:eb:79:85:5e:21:c4:22:38:16:90:25: 9f:bb:bb:6f:10:89:d4:3e:51:cf:ac:39:ec:64:87:94:43:0f: b5:6b:d1:2a:0a:80:74:83:99:ec:f5:fc:3a:13:c3:40:c3:d1: ee:15:63:a7:ff:56:16:47:2d:ef:1b:92:4e:40:51:23:b3:89: 2d:fa:2a:2a:f4:b6:b7:33:20:da:9c:1d:23:d1:29:e0:ec:ce: 84:71:3a:4e:a6:a9:be:73:b8:47:aa:7e:c9:3f:fb:2e:cc:23: af:ab:72:f9:6f:12:e6:4b:c1:e2:23:ba:55:53:b1:35:19:9a: de:3a:1e:d7:1f:fb:d3:d9:b3:f2:ba:58:b2:8a:54:64:33:1f: c1:21:8f:63:7a:dd:e5:3f:a6:5a:44:69:43:e7:30:8c:f1:dc: f0:79:e9:05:b0:3b:ff:a5:e6:1a:1b:12:b4:d5:91:2f:9e:d3: 70:ec:2a:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnPYtw5/hC9LVEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTc1NGE4OWYtMzdlZS00OGJiLThhM2MtMTM5ZWUwNmZl MGZjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NTk5NjIyYjYtM2YzOC00ZDMxLTg3MjYtYjM1ZmViNjgxMzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeclWFoKZbcw9ojVIPuo8JWqhyC1gWmU/nAo IWxbRlyyNE7jUEW1rdOhmbLKbI6g5/GKV1FD8DsGiXIXNZ/KMGv99MyswjJlM9uz jOxtnTeXbbab9KeHC7yN2GjM6aTCqjBF5IY8GYdhJsiB2iAV9Pm+j6sNSSiscZeF TrmWqa/ci9vg10PdbBYwceZgJrY8taZAfFLdWCbOZxftlWGsnqScNKsiWa97RA1N l06R1wjC/NBF2QT5xtL8uruPtCQkqGtn+stWNSs+ihFq2uTxzwlWOrFtSzYjNVoy jBwVOQQhJ7Bjfm/HMNhNZaZsp16yA1I+7tb3a6s6CAYPo1FMgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPt29x1SKyFsGvRNdXUdsZOkwzSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NzU0 YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzllZTA2ZmUwZmMvNjUzYjk2M2YtYTU1My0z NTU0LWE1NzEtNjE5ZWQ5ZjdjNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTc1NGE4OWYtMzdlZS00OGJiLThh M2MtMTM5ZWUwNmZlMGZjLzU3NTRhODlmLTM3ZWUtNDhiYi04YTNjLTEzOWVlMDZm ZTBmYy5jcmwwHwYDVR0jBBgwFoAUSlt8Yitw2Ya59H5pXPdbs8VN6ngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NzU0YTg5Zi0zN2VlLTQ4YmItOGEzYy0xMzll ZTA2ZmUwZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK8TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo8v68QdFhKvR+5gGG3Rk/4vc91Dn4joo5Jeh0oyLu0HzOUxJnzIdYr xF1B9uPLYAAHqvmLqmReWI3gRgcJc4tYuR1XJBs3zbVTcS42hxTreYVeIcQiOBaQ JZ+7u28QidQ+Uc+sOexkh5RDD7Vr0SoKgHSDmez1/DoTw0DD0e4VY6f/VhZHLe8b kk5AUSOziS36Kir0trczINqcHSPRKeDszoRxOk6mqb5zuEeqfsk/+y7MI6+rcvlv EuZLweIjulVTsTUZmt46Htcf+9PZs/K6WLKKVGQzH8Ehj2N63eU/plpEaUPnMIzx 3PB56QWwO/+l5hobErTVkS+e03DsKgI= -----END CERTIFICATE-----Generated at Wed Nov 5 17:32:42 2025 by rpki-client