$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa File: d301a4b3-34ea-309b-80f1-90e66068431c.roa (raw, json) Hash identifier: X48/jmd7HqTiUXn7VZbb2mYY//yVtD0tsED2TqyMrLc= Subject key identifier: 74:B7:B2:7D:FC:70:5B:8A:D7:F8:DA:9C:75:CF:1E:9B:8D:71:6D:74 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584B7DECA8A157D38B1110398820 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 4323 IP address blocks: 208.54.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:a8:a1:57:d3:8b:11:10:39:88:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=c49fac7d-7244-489c-91eb-410520437e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:1a:e2:12:f4:3e:d8:e0:4c:55:44:0c:f2:1c: 42:36:27:dd:e5:b4:de:2e:c5:fb:16:b8:2c:2f:d4: d7:3a:9c:dc:29:f3:d8:25:53:5d:d6:b2:c4:f9:37: da:db:68:74:2e:19:d9:62:f1:04:75:a3:56:f6:78: b0:84:eb:e1:66:37:3e:f9:b8:37:2a:69:86:35:7f: ea:43:dd:c6:d6:b9:c8:5e:d5:37:99:e3:0d:b7:38: fe:07:c4:6f:da:93:5c:76:3d:ad:51:27:a7:ea:20: 1c:3e:5f:df:bf:95:3b:af:c9:33:92:99:6a:3f:ab: fb:38:4e:fe:c0:27:67:c5:f6:80:f1:9a:ea:a4:07: b9:2d:df:3a:26:e6:51:22:9f:26:f7:b7:f8:7a:8b: 33:fe:66:4f:df:95:28:33:13:36:15:5e:9b:3a:ef: fd:34:18:c8:3e:5f:5b:43:1d:a3:12:89:a2:2d:2f: eb:fe:dd:02:1a:c2:3a:78:b2:a1:94:91:82:53:bd: 7d:fb:de:ef:60:d4:72:e7:24:66:5c:4e:c8:af:40: 54:ba:f6:be:81:5a:aa:8e:68:2f:0b:5d:cc:17:79: e2:9c:55:9a:47:0c:75:75:ab:f7:b3:e7:4f:e4:2c: 10:21:40:c3:3c:4e:67:b1:5e:8b:30:bc:03:f5:3e: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B7:B2:7D:FC:70:5B:8A:D7:F8:DA:9C:75:CF:1E:9B:8D:71:6D:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5c:87:c1:97:df:4d:c2:ff:81:a3:72:37:8e:90:62:e8:0a: 24:c0:d0:f0:3d:ec:fa:98:71:ac:5c:63:46:06:1c:ce:d5:96: f9:5b:1a:28:31:63:a0:76:c9:b7:41:96:65:4a:82:7d:3b:0e: 56:b2:37:06:6d:c4:65:d9:0c:05:18:00:53:bc:96:60:ab:a0: 44:e5:2a:b5:59:b6:ed:92:20:3e:68:87:b1:49:8f:e5:be:a3: e2:34:d5:52:ea:bb:12:0d:6e:f5:7f:d4:c2:f1:9e:ee:84:91: 35:56:1b:41:0b:fe:91:d3:de:62:43:e5:00:8c:6d:6f:23:64: 9a:83:25:34:e6:f3:a6:90:46:ab:ea:38:f8:d2:70:e9:dd:1f: ab:b3:93:6a:7b:5c:d3:f9:9d:65:76:13:4c:c3:68:8a:19:f9: 39:ea:c3:d5:c5:0d:26:ba:29:36:bf:fc:ec:75:21:27:2c:a5: bf:16:3e:50:ee:5e:fe:61:da:93:21:3c:be:a8:a8:d8:ca:e6: 52:84:c1:ee:ad:16:df:7c:51:84:b6:ef:a9:15:b8:84:2a:43: e6:87:3e:42:47:41:20:ee:67:e8:40:fb:af:98:6a:4c:23:c5: 1d:53:65:cd:de:a5:58:c4:9a:1b:e7:19:8b:6d:aa:f7:8d:59: 60:4a:b1:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KihV9OLERA5iCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YzQ5ZmFjN2QtNzI0NC00ODljLTkxZWItNDEwNTIwNDM3ZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RriEvQ+2OBMVUQM8hxCNifd5bTeLsX7Frgs L9TXOpzcKfPYJVNd1rLE+Tfa22h0LhnZYvEEdaNW9niwhOvhZjc++bg3KmmGNX/q Q93G1rnIXtU3meMNtzj+B8Rv2pNcdj2tUSen6iAcPl/fv5U7r8kzkplqP6v7OE7+ wCdnxfaA8ZrqpAe5Ld86JuZRIp8m97f4eosz/mZP35UoMxM2FV6bOu/9NBjIPl9b Qx2jEomiLS/r/t0CGsI6eLKhlJGCU719+97vYNRy5yRmXE7Ir0BUuva+gVqqjmgv C13MF3ninFWaRwx1dav3s+dP5CwQIUDDPE5nsV6LMLwD9T5JNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHS3sn38cFuK1/janHXPHpuNcW10MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZDMwMWE0YjMtMzRlYS0z MDliLTgwZjEtOTBlNjYwNjg0MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxch8GX303C/4GjcjeOkGLoCiTA0PA97PqYcaxcY0YGHM7VlvlbGigx Y6B2ybdBlmVKgn07DlayNwZtxGXZDAUYAFO8lmCroETlKrVZtu2SID5oh7FJj+W+ o+I01VLquxINbvV/1MLxnu6EkTVWG0EL/pHT3mJD5QCMbW8jZJqDJTTm86aQRqvq OPjScOndH6uzk2p7XNP5nWV2E0zDaIoZ+Tnqw9XFDSa6KTa//Ox1IScspb8WPlDu Xv5h2pMhPL6oqNjK5lKEwe6tFt98UYS276kVuIQqQ+aHPkJHQSDuZ+hA+6+Yakwj xR1TZc3epVjEmhvnGYttqveNWWBKsRo= -----END CERTIFICATE-----Generated at Mon Oct 20 10:17:37 2025 by rpki-client