$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa File: 974b8952-186c-379e-b0c2-e4fb964cf09d.roa (raw, json) Hash identifier: iIrhj42e8O7PLRyWl+SIYRIomflEjHncwm3c0Rvm4Hc= Subject key identifier: E9:BC:AD:74:9C:50:B2:11:19:B2:84:81:E0:FF:E8:A2:FB:81:B8:94 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584B7DECC606C99EB0954516A890 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 21928 IP address blocks: 208.54.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c6:06:c9:9e:b0:95:45:16:a8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=3419e8cb-ccc0-4c74-803a-bdbbe7d181be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c6:96:67:83:26:b2:c1:98:fe:74:9e:ae:43: 7f:2d:87:cd:93:da:01:33:48:2a:38:e9:7a:73:c6: 27:5b:a4:ab:b8:96:94:34:79:cd:8c:cb:b4:f0:45: 59:63:ec:3c:f5:7f:6c:5d:4a:51:66:e2:44:8f:bd: bb:d7:4a:10:37:00:f4:e7:7e:20:67:0e:4f:08:90: 6b:c6:d2:79:73:36:af:b7:35:06:b5:02:2d:8c:26: 0a:6e:1f:a4:f6:66:a6:75:1e:d4:84:34:ba:9d:4f: 0e:56:36:4b:5f:6f:b2:99:89:af:35:3b:ca:16:43: c9:01:a3:4d:a2:83:46:64:2e:0d:73:fa:51:78:33: 1f:58:0a:fc:9c:7d:75:e9:06:46:14:6c:7d:a9:40: fe:ea:31:34:a9:45:ed:32:ee:0b:16:89:8a:28:51: f7:4f:a7:87:64:58:6a:9e:c7:12:54:dc:d9:64:fa: d5:d0:e9:05:e7:a6:04:3f:15:6b:d8:3a:e0:7c:69: c9:64:ee:cc:31:bc:63:9b:a3:50:ac:ab:46:e8:e7: f7:d4:5d:7e:84:e9:70:9d:95:7d:cb:ef:06:e5:4a: 54:32:4b:85:90:37:11:59:23:f9:84:7c:6a:83:46: d2:0b:f8:3c:35:b9:c9:3a:27:23:27:ec:1b:ac:ed: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BC:AD:74:9C:50:B2:11:19:B2:84:81:E0:FF:E8:A2:FB:81:B8:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e7:0e:f9:6a:58:bc:7c:07:e8:bb:48:e0:fe:35:bb:f8:cb: 92:95:fa:18:5c:87:56:fe:dd:1b:f0:31:ad:1b:6f:00:0c:66: 5a:01:83:01:d4:06:18:0e:eb:40:41:f0:73:72:19:d8:a7:78: 1d:36:f0:0a:0a:d1:55:0c:fc:b9:b2:a3:5a:6d:e5:6c:74:32: 0a:7a:c8:f4:92:9e:66:49:3f:6f:4d:45:a4:ac:3c:5e:29:51: 02:cb:63:2e:77:c5:42:e3:8c:4c:e4:1a:e9:6a:f4:37:87:45: 9b:e0:76:1f:78:3d:09:9d:e7:2e:d4:c8:e2:37:c9:e9:22:ff: bd:20:0a:0c:cc:b9:53:88:9b:8a:6d:87:23:f5:ec:80:aa:d9: 7b:7f:81:e7:a5:6a:e5:b9:0d:34:40:2d:26:b7:52:f2:b6:62: f0:2a:96:3f:f7:2b:8d:d7:59:fe:c5:eb:a8:90:8f:a0:33:d4: e3:9b:66:be:5c:76:91:4c:90:54:02:39:f6:fe:f2:0c:17:f5: 1c:ce:6a:fb:55:8e:bf:70:ec:72:8a:b3:cf:9e:4f:87:aa:38: 62:fb:3e:40:af:c1:2b:ed:80:c5:2e:bb:86:b7:05:bc:2b:88: 5c:de:b3:26:aa:3a:4e:14:9a:0d:35:ca:f1:39:1c:43:0d:c8: 89:55:fa:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MYGyZ6wlUUWqJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk MzQxOWU4Y2ItY2NjMC00Yzc0LTgwM2EtYmRiYmU3ZDE4MWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMaWZ4MmssGY/nSerkN/LYfNk9oBM0gqOOl6 c8YnW6SruJaUNHnNjMu08EVZY+w89X9sXUpRZuJEj72710oQNwD0534gZw5PCJBr xtJ5czavtzUGtQItjCYKbh+k9mamdR7UhDS6nU8OVjZLX2+ymYmvNTvKFkPJAaNN ooNGZC4Nc/pReDMfWAr8nH116QZGFGx9qUD+6jE0qUXtMu4LFomKKFH3T6eHZFhq nscSVNzZZPrV0OkF56YEPxVr2DrgfGnJZO7MMbxjm6NQrKtG6Of31F1+hOlwnZV9 y+8G5UpUMkuFkDcRWSP5hHxqg0bSC/g8NbnJOicjJ+wbrO3zJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm8rXScULIRGbKEgeD/6KL7gbiUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvOTc0Yjg5NTItMTg2Yy0z NzllLWIwYzItZTRmYjk2NGNmMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrnDvlqWLx8B+i7SOD+Nbv4y5KV+hhch1b+3RvwMa0bbwAMZloBgwHU BhgO60BB8HNyGdineB028AoK0VUM/Lmyo1pt5Wx0Mgp6yPSSnmZJP29NRaSsPF4p UQLLYy53xULjjEzkGulq9DeHRZvgdh94PQmd5y7UyOI3yeki/70gCgzMuVOIm4pt hyP17ICq2Xt/geelauW5DTRALSa3UvK2YvAqlj/3K43XWf7F66iQj6Az1OObZr5c dpFMkFQCOfb+8gwX9RzOavtVjr9w7HKKs8+eT4eqOGL7PkCvwSvtgMUuu4a3Bbwr iFzesyaqOk4Umg01yvE5HEMNyIlV+pA= -----END CERTIFICATE-----Generated at Mon Oct 20 07:43:28 2025 by rpki-client