$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/7bccef14-6bf3-3185-b3ed-6a39e782c834.roa File: 7bccef14-6bf3-3185-b3ed-6a39e782c834.roa (raw, json) Hash identifier: JIDWoN0iZQAwaokm1dDaDbQXdg/QgdvMiJwJbf2k1T4= Subject key identifier: E7:87:5C:4B:17:05:DB:8F:98:A4:7D:74:D2:CF:A8:DB:0E:79:DA:C4 Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Certificate serial: 010D0C9F4328584B38218FB91CCE5CE1DCC716C0 Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/7bccef14-6bf3-3185-b3ed-6a39e782c834.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 19381 IP address blocks: 192.147.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:8f:b9:1c:ce:5c:e1:dc:c7:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=ba1af5e0-2866-465a-a317-757aa21cee60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:44:53:3c:13:3a:01:de:ad:4e:0c:9b:d3:96: 8f:08:b9:86:ab:69:84:fc:69:cb:ee:d8:46:11:c5: a3:16:e3:ee:36:c8:ab:f7:db:59:66:cf:9b:e6:5c: 87:08:82:aa:c5:77:ab:5d:7d:53:a3:66:48:6b:14: f7:5e:f0:c3:fd:9f:c4:b2:f6:62:a7:66:22:92:5c: e8:df:ac:de:7a:25:aa:11:f1:c1:f3:82:3c:0b:be: 48:74:d1:e6:b9:b8:3b:46:6a:c9:03:86:a3:a5:93: fd:6c:d5:88:13:05:c9:40:32:00:9c:cb:15:bd:92: f9:7a:27:33:3b:49:a8:be:72:ce:7d:60:66:6d:5c: cf:81:7c:43:14:3c:bb:a2:87:47:4c:27:1b:b5:00: 36:2a:38:b8:70:32:16:cb:d7:9e:9a:36:39:3e:88: a7:09:9d:bd:7a:8d:a5:56:ce:8d:b3:00:2e:70:80: 07:d3:53:f5:cd:33:cf:7f:ca:f2:35:50:2f:81:9d: 21:4b:93:ca:57:47:43:cd:6a:51:b4:c1:15:ea:48: cd:4f:82:6b:48:97:05:9b:c4:a5:1f:74:da:8b:81: d2:7a:49:46:92:43:3e:d6:fb:30:72:ea:95:18:dd: 7a:50:07:4c:d7:a4:a0:40:66:48:78:70:67:6b:fc: 51:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:87:5C:4B:17:05:DB:8F:98:A4:7D:74:D2:CF:A8:DB:0E:79:DA:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/7bccef14-6bf3-3185-b3ed-6a39e782c834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl X509v3 Authority Key Identifier: keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer sbgp-ipAddrBlock: critical IPv4: 192.147.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:bf:5a:07:76:d4:ce:69:4d:fe:eb:62:77:5b:3b:b5:65:3e: 7e:e5:72:f4:d9:3e:12:92:99:91:6e:58:fa:5a:0e:e6:77:9f: 54:eb:b2:e4:98:00:bc:f6:fd:18:c2:61:62:52:22:9b:42:82: 4b:14:00:70:18:3b:6f:1b:f5:f5:b6:15:4e:e8:77:1a:50:b1: 30:e0:61:2c:61:ae:4d:eb:fe:65:38:47:4d:77:b1:bd:19:fe: 4f:69:1e:19:50:da:26:61:4b:47:27:a6:0d:ae:d9:e9:cd:0e: eb:a0:33:63:9a:ed:30:0e:58:55:49:e9:f0:b0:d1:ec:2d:e7: f8:4a:2f:fc:75:34:cf:85:08:fe:57:04:2d:4e:08:e3:63:e2: 75:27:3f:4c:ef:90:8c:04:06:7e:34:9f:dd:95:df:fa:e9:f1: 08:ad:1f:75:36:a2:af:14:47:d0:2c:08:38:90:95:41:52:83: c4:26:b1:af:73:42:e8:34:c2:8e:51:14:6a:14:2a:65:4e:16: 62:61:42:fd:54:3c:6a:ce:d3:e6:df:4c:86:5d:e9:08:12:bd: 85:6d:e4:76:49:19:5f:52:ba:bd:26:71:72:36:75:b9:06:0f: bc:51:25:e3:18:29:c5:4e:9d:32:a0:93:8f:80:70:e7:7c:1d: c3:96:c1:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IY+5HM5c4dzHFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl Njc0MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk YmExYWY1ZTAtMjg2Ni00NjVhLWEzMTctNzU3YWEyMWNlZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtURTPBM6Ad6tTgyb05aPCLmGq2mE/GnL7thG EcWjFuPuNsir99tZZs+b5lyHCIKqxXerXX1To2ZIaxT3XvDD/Z/EsvZip2Yiklzo 36zeeiWqEfHB84I8C75IdNHmubg7RmrJA4ajpZP9bNWIEwXJQDIAnMsVvZL5eicz O0movnLOfWBmbVzPgXxDFDy7oodHTCcbtQA2Kji4cDIWy9eemjY5PoinCZ29eo2l Vs6NswAucIAH01P1zTPPf8ryNVAvgZ0hS5PKV0dDzWpRtMEV6kjNT4JrSJcFm8Sl H3Tai4HSeklGkkM+1vswcuqVGN16UAdM16SgQGZIeHBna/xRQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeHXEsXBduPmKR9dNLPqNsOedrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvN2JjY2VmMTQtNmJmMy0z MTg1LWIzZWQtNmEzOWU3ODJjODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2 ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1 NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJPxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe/Wgd21M5pTf7rYndbO7VlPn7lcvTZPhKSmZFuWPpaDuZ3n1TrsuSY ALz2/RjCYWJSIptCgksUAHAYO28b9fW2FU7odxpQsTDgYSxhrk3r/mU4R013sb0Z /k9pHhlQ2iZhS0cnpg2u2enNDuugM2Oa7TAOWFVJ6fCw0ewt5/hKL/x1NM+FCP5X BC1OCONj4nUnP0zvkIwEBn40n92V3/rp8QitH3U2oq8UR9AsCDiQlUFSg8Qmsa9z Qug0wo5RFGoUKmVOFmJhQv1UPGrO0+bfTIZd6QgSvYVt5HZJGV9Sur0mcXI2dbkG D7xRJeMYKcVOnTKgk4+AcOd8HcOWwZA= -----END CERTIFICATE-----Generated at Tue Oct 21 16:29:40 2025 by rpki-client