$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/18320922-8927-319d-8ad9-e1b5021a0ce7.roa File: 18320922-8927-319d-8ad9-e1b5021a0ce7.roa (raw, json) Hash identifier: 9mBLJobB4I5VPt6WhRXHeMpKNzV3wxtqTTrXvE5b2gI= Subject key identifier: 37:23:91:0E:23:C5:0B:6C:17:25:29:6E:77:AA:82:8D:3B:49:72:97 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584B4D11D8F7240469BAEB705BC0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/18320922-8927-319d-8ad9-e1b5021a0ce7.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 133952 IP address blocks: 206.54.1.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:d8:f7:24:04:69:ba:eb:70:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=1324377d-0ebb-4dfc-909f-6b2dd869295b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:79:12:f2:4c:cf:7f:59:2b:a2:b1:5a:48:93: a4:fd:fd:1d:be:cf:b0:66:cf:46:31:89:bc:cf:45: 74:54:db:61:4f:c3:ce:66:2b:45:0d:14:7e:35:27: ee:0f:fe:b2:9e:9f:0e:03:85:82:63:cd:4a:b8:7d: e7:fc:7e:29:2d:69:f6:87:98:d9:b1:01:45:3b:e8: 87:47:1f:e8:71:79:80:3b:66:32:1a:21:a1:f6:cd: d7:84:f7:3b:b7:d0:74:60:48:6a:d9:e9:44:b7:21: 8d:9f:bc:6a:ed:d9:0d:ec:ed:29:e5:29:71:8c:26: 25:ed:74:48:a3:ca:a9:16:10:72:fb:60:27:04:bd: 1e:9a:b0:c4:02:98:f1:1d:94:41:08:df:6f:a7:a9: 9f:bf:13:c7:da:f3:0c:2d:11:4d:e8:50:c3:62:1b: e7:da:a3:93:1a:b4:51:8b:d1:0f:10:90:3e:1d:c2: 8b:47:61:db:47:6d:e4:40:ee:6f:9c:93:09:0b:c1: d6:d9:3c:11:24:d8:51:68:dc:77:0c:47:00:fc:8b: 1d:73:b9:5d:85:db:c1:0f:3d:be:22:ac:cc:86:6f: 24:2a:d8:8a:cc:cb:b7:74:51:bf:d2:6f:36:21:e8: 72:fd:f3:47:8b:41:b2:41:f3:85:48:e5:6d:01:5f: 1c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:23:91:0E:23:C5:0B:6C:17:25:29:6E:77:AA:82:8D:3B:49:72:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/18320922-8927-319d-8ad9-e1b5021a0ce7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 206.54.1.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c0:2e:f8:b1:71:48:1e:eb:83:7d:e6:1d:6d:87:55:fe:2f: f0:f0:da:78:51:14:dc:69:63:56:1e:92:af:3e:0f:b1:5e:43: 02:39:c5:0d:9f:76:fe:2f:58:d7:a9:2d:75:1c:6d:eb:b1:df: ac:a7:04:db:18:b3:75:89:0c:bc:5b:05:6b:2f:6f:b7:97:44: dd:fa:a0:e0:06:a3:01:32:ef:1b:ae:6e:ba:a2:0a:98:79:ee: 1e:78:42:8b:b0:87:f8:63:7a:e1:3d:4e:3d:3b:8d:8f:38:db: 8e:25:a5:41:fe:9c:e6:87:09:44:d6:e1:d5:4b:08:e4:4a:01: 72:21:66:a3:32:b4:7f:c0:07:18:b9:1a:8a:bb:29:ae:73:b3: 7f:04:a6:42:7b:8f:f8:4a:f4:dc:79:8e:bc:96:22:de:53:d7: cc:e9:4c:b2:33:52:e6:58:65:eb:06:79:bc:de:11:4a:7f:b4: 98:7b:21:ce:32:07:b7:c6:9a:6a:a3:81:f5:01:ab:de:1b:43: d7:61:32:f5:d5:cd:ee:d8:f8:91:b8:d6:d6:de:4b:0d:3d:f0: e0:b9:08:84:13:a7:09:d3:26:74:7d:43:b9:7a:a4:85:0c:8f: ab:57:c2:3c:11:4c:16:4e:37:d5:67:27:60:8c:a7:44:3a:e7: a5:1c:44:c9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtNEdj3JARpuutwW8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk MTMyNDM3N2QtMGViYi00ZGZjLTkwOWYtNmIyZGQ4NjkyOTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3kS8kzPf1krorFaSJOk/f0dvs+wZs9GMYm8 z0V0VNthT8POZitFDRR+NSfuD/6ynp8OA4WCY81KuH3n/H4pLWn2h5jZsQFFO+iH Rx/ocXmAO2YyGiGh9s3XhPc7t9B0YEhq2elEtyGNn7xq7dkN7O0p5SlxjCYl7XRI o8qpFhBy+2AnBL0emrDEApjxHZRBCN9vp6mfvxPH2vMMLRFN6FDDYhvn2qOTGrRR i9EPEJA+HcKLR2HbR23kQO5vnJMJC8HW2TwRJNhRaNx3DEcA/Isdc7ldhdvBDz2+ IqzMhm8kKtiKzMu3dFG/0m82Iehy/fNHi0GyQfOFSOVtAV8ciQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDcjkQ4jxQtsFyUpbneqgo07SXKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMTgzMjA5MjItODkyNy0z MTlkLThhZDktZTFiNTAyMWEwY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHzjYBgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBlwC74sXFIHuuDfeYdbYdV/i/w8Np4URTcaWNWHpKvPg+xXkMCOcUN n3b+L1jXqS11HG3rsd+spwTbGLN1iQy8WwVrL2+3l0Td+qDgBqMBMu8brm66ogqY ee4eeEKLsIf4Y3rhPU49O42PONuOJaVB/pzmhwlE1uHVSwjkSgFyIWajMrR/wAcY uRqKuymuc7N/BKZCe4/4SvTceY68liLeU9fM6UyyM1LmWGXrBnm83hFKf7SYeyHO Mge3xppqo4H1AaveG0PXYTL11c3u2PiRuNbW3ksNPfDguQiEE6cJ0yZ0fUO5eqSF DI+rV8I8EUwWTjfVZydgjKdEOuelHETJ -----END CERTIFICATE-----Generated at Mon Oct 20 05:15:33 2025 by rpki-client