$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa File: dfef9103-b23c-342c-83da-159fd5780ea7.roa (raw, json) Hash identifier: rSMN2iKO+jy9GpDpAHu05Fr//9HAG+wfXyM4kXHb0tg= Subject key identifier: 16:11:2C:25:26:C5:D0:C1:B9:FB:7B:C5:7E:B3:8A:FE:B5:42:5C:01 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584B8EACEAF6725A953DE7258200 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 13638 IP address blocks: 65.254.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ea:f6:72:5a:95:3d:e7:25:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=54eae86c-82ba-4d52-94b5-830e91b0c559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f7:8d:56:05:79:82:75:c8:65:5e:07:72:45: 01:2b:cf:a4:80:67:e5:0c:af:08:13:20:7a:3d:ef: d7:b5:aa:21:41:94:27:cd:5b:b8:2e:6b:02:bd:ea: 25:87:86:ce:b1:87:6d:35:63:38:ef:66:be:aa:87: ab:8a:50:83:17:a7:72:1b:c0:d6:fc:2c:08:5a:ed: 99:14:95:5e:e4:59:f7:de:a4:76:34:6d:cf:1f:be: de:58:21:d8:62:45:8d:88:2e:b3:4e:fe:a1:6c:42: 1c:aa:ea:c9:08:6c:a2:8e:c0:16:da:8e:63:4e:1a: 49:b9:da:48:22:e4:37:66:ec:9c:5f:da:5f:ba:9a: da:7d:c9:20:c0:5a:5c:b6:17:6c:ab:43:97:6e:3a: c9:57:ff:c7:57:3e:61:d7:57:78:28:22:ad:1e:ed: 3a:97:b0:bd:14:38:c0:cf:a5:09:21:ec:2e:0b:7f: 9d:17:f0:86:e1:9a:2f:45:3b:10:4e:b6:ae:bd:63: e9:f3:85:f7:be:8a:fa:67:e1:ba:43:9a:ba:60:44: 70:c6:c5:e2:23:cd:dc:75:0a:a7:92:7d:51:68:81: ea:69:78:df:67:ad:da:6a:6f:ca:f3:3e:b0:52:a4: d1:0b:47:b3:ac:ce:11:5b:a1:88:a7:45:00:27:9a: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:11:2C:25:26:C5:D0:C1:B9:FB:7B:C5:7E:B3:8A:FE:B5:42:5C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/dfef9103-b23c-342c-83da-159fd5780ea7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 65.254.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:76:89:ae:0d:78:32:6d:c1:b3:60:1d:83:57:51:0d:e0:67: 99:2d:65:0f:2d:73:55:5d:b3:9f:8a:41:ad:87:a7:9c:0d:6b: 1f:1c:34:6f:92:17:d0:5a:d1:26:7c:6c:e3:09:e6:ac:02:8c: 70:92:bd:ce:15:be:fa:2f:43:78:8f:f2:42:1b:d6:95:b4:01: 91:e5:5f:d0:91:ae:0c:65:66:5a:68:b1:56:49:fa:51:f7:e1: 13:58:00:d4:64:37:c0:ec:fb:9f:ed:de:3d:34:2b:25:02:6c: f4:42:a0:43:f8:62:78:48:19:81:d6:6e:8b:de:1a:c0:06:1a: 70:4c:b0:4a:10:19:ac:cb:ae:d9:8c:c4:4c:b2:1f:4e:69:18: 9d:8d:7e:33:7d:e5:c5:a8:8f:ac:a5:fb:0b:f0:9d:e6:42:3c: 0f:bf:4a:4b:a9:95:be:16:b8:05:7e:35:73:bd:8a:ec:30:4d: a2:6f:aa:1e:d9:f4:f1:cd:97:9b:6c:fb:8c:e3:b8:af:53:1e: b7:18:57:f5:e6:41:fd:82:89:46:d5:6c:24:55:0c:79:47:f3: dd:95:fa:5f:6f:0d:9e:06:aa:b1:fd:b0:7e:f2:63:df:23:e6: 6a:81:7e:a0:54:0a:82:ac:4c:d8:81:47:59:2b:09:ea:19:39: 01:cc:07:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOr2clqVPeclggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NTRlYWU4NmMtODJiYS00ZDUyLTk0YjUtODMwZTkxYjBjNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1feNVgV5gnXIZV4HckUBK8+kgGflDK8IEyB6 Pe/XtaohQZQnzVu4LmsCveolh4bOsYdtNWM472a+qoerilCDF6dyG8DW/CwIWu2Z FJVe5Fn33qR2NG3PH77eWCHYYkWNiC6zTv6hbEIcqurJCGyijsAW2o5jThpJudpI IuQ3ZuycX9pfuprafckgwFpcthdsq0OXbjrJV//HVz5h11d4KCKtHu06l7C9FDjA z6UJIewuC3+dF/CG4ZovRTsQTrauvWPp84X3vor6Z+G6Q5q6YERwxsXiI83cdQqn kn1RaIHqaXjfZ63aam/K8z6wUqTRC0ezrM4RW6GIp0UAJ5rMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYRLCUmxdDBuft7xX6ziv61QlwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvZGZlZjkxMDMtYjIzYy0z NDJjLTgzZGEtMTU5ZmQ1NzgwZWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH92ia4NeDJtwbNgHYNXUQ3gZ5ktZQ8tc1Vds5+KQa2Hp5wNax8cNG+S F9Ba0SZ8bOMJ5qwCjHCSvc4VvvovQ3iP8kIb1pW0AZHlX9CRrgxlZlposVZJ+lH3 4RNYANRkN8Ds+5/t3j00KyUCbPRCoEP4YnhIGYHWboveGsAGGnBMsEoQGazLrtmM xEyyH05pGJ2NfjN95cWoj6yl+wvwneZCPA+/Skuplb4WuAV+NXO9iuwwTaJvqh7Z 9PHNl5ts+4zjuK9THrcYV/XmQf2CiUbVbCRVDHlH892V+l9vDZ4GqrH9sH7yY98j 5mqBfqBUCoKsTNiBR1krCeoZOQHMB5E= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:20 2025 by rpki-client