$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa File: a5fe454b-deb7-37cf-bd66-6552718aa14d.roa (raw, json) Hash identifier: UQH8AEmtwfZ3Yw1+L1qzS5qCL/b+kWnJJCESDSo+f9Y= Subject key identifier: B3:C9:01:AD:6D:6E:02:C1:C9:C9:9B:D8:54:3C:17:2F:75:F8:71:79 Certificate issuer: /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Certificate serial: 010D0C9F4328584B9442248D174EA31947F63400 Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 399244 IP address blocks: 208.92.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:24:8d:17:4e:a3:19:47:f6:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=088436b1-378d-4dd7-a0f1-808adf602964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5b:b4:1c:af:74:13:a4:ba:dd:06:6a:8a:94: ab:02:3c:aa:05:b6:ad:3a:26:8f:79:b7:ed:6c:22: c8:5b:8d:a8:58:ee:5a:e0:33:bb:b9:46:12:a9:46: 81:a4:41:3b:79:7d:e5:4b:4d:29:c1:c3:0c:3f:49: 30:a7:8a:ee:be:5b:5e:de:cb:14:de:8a:98:34:db: ee:d5:df:c7:fc:68:31:a4:3a:8d:d0:55:c1:7a:f4: 23:50:60:c4:05:a9:3f:03:7c:61:36:61:27:6b:8d: a6:5a:8a:74:4c:ca:04:19:6c:cd:2d:2a:dd:1a:ae: 25:0c:e5:40:9c:eb:48:c7:5d:e4:87:ac:a3:a5:7d: 83:2e:13:a4:55:ff:0b:86:2a:17:f4:92:86:c9:98: 2a:4d:5d:13:23:bc:7d:fc:45:e5:5f:28:14:97:33: ec:12:36:44:22:0b:38:29:fb:5c:55:c3:23:13:1d: 63:a5:48:10:14:53:2a:96:56:4c:19:37:87:d5:84: b5:9f:49:07:f4:93:fc:cd:79:67:97:8e:3d:b7:0e: 58:e5:e9:ad:50:5d:7a:5e:4a:f4:68:52:c5:24:f5: 3a:60:fd:c3:b6:56:8f:a4:83:87:bf:6d:6b:ed:90: 4f:ef:d2:c9:7e:7f:55:18:20:5e:90:cf:e3:f7:61: 96:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C9:01:AD:6D:6E:02:C1:C9:C9:9B:D8:54:3C:17:2F:75:F8:71:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/a5fe454b-deb7-37cf-bd66-6552718aa14d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl X509v3 Authority Key Identifier: keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer sbgp-ipAddrBlock: critical IPv4: 208.92.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:69:b0:65:eb:27:7b:86:66:0e:77:83:56:d0:e7:17:45:4a: a2:7b:e3:da:ba:87:42:ac:aa:79:77:ba:ec:b7:c0:52:c8:13: 2d:f0:b5:ec:bc:66:54:e6:82:f0:ac:f6:ca:d0:33:d1:cd:80: 35:f2:eb:23:41:d6:36:d0:61:95:df:19:ae:fb:8f:d9:c8:20: ac:a1:1d:66:38:c6:bd:63:7c:09:bf:d7:ac:45:f0:2e:98:97: a6:5a:56:92:2c:18:47:f5:87:29:44:5d:44:7f:d7:b3:38:48: 91:b9:18:20:89:a0:bb:a3:06:27:97:17:9e:3d:09:30:f8:2a: 77:cb:40:7c:ff:a5:07:61:95:38:50:93:11:ca:17:75:d1:bc: 68:1b:ea:95:6b:77:04:84:ba:61:71:54:4f:41:f4:07:a6:1f: 7b:88:1f:8a:54:50:3a:f8:b9:6c:be:34:7a:57:f3:c6:04:03: 0b:6b:6c:43:83:3b:49:f7:0f:fd:10:dc:46:0f:de:61:f0:6e: 58:c3:62:82:07:a0:6a:28:8f:17:00:cd:c7:66:8d:c7:f3:8c: bc:cc:6a:08:07:ba:59:15:08:f0:cc:dd:92:3e:59:39:a4:e2: 17:f8:a9:48:47:f7:6f:87:cd:23:fc:80:da:95:c3:02:ee:2c: 41:0f:b0:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQiSNF06jGUf2NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh MzhkMB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk MDg4NDM2YjEtMzc4ZC00ZGQ3LWEwZjEtODA4YWRmNjAyOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlu0HK90E6S63QZqipSrAjyqBbatOiaPebft bCLIW42oWO5a4DO7uUYSqUaBpEE7eX3lS00pwcMMP0kwp4ruvlte3ssU3oqYNNvu 1d/H/GgxpDqN0FXBevQjUGDEBak/A3xhNmEna42mWop0TMoEGWzNLSrdGq4lDOVA nOtIx13kh6yjpX2DLhOkVf8LhioX9JKGyZgqTV0TI7x9/EXlXygUlzPsEjZEIgs4 KftcVcMjEx1jpUgQFFMqllZMGTeH1YS1n0kH9JP8zXlnl449tw5Y5emtUF16Xkr0 aFLFJPU6YP3DtlaPpIOHv21r7ZBP79LJfn9VGCBekM/j92GWYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPJAa1tbgLBycmb2FQ8Fy91+HF5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvYTVmZTQ1NGItZGViNy0z N2NmLWJkNjYtNjU1MjcxOGFhMTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVpsGXrJ3uGZg53g1bQ5xdFSqJ749q6h0Ksqnl3uuy3wFLIEy3wtey8 ZlTmgvCs9srQM9HNgDXy6yNB1jbQYZXfGa77j9nIIKyhHWY4xr1jfAm/16xF8C6Y l6ZaVpIsGEf1hylEXUR/17M4SJG5GCCJoLujBieXF549CTD4KnfLQHz/pQdhlThQ kxHKF3XRvGgb6pVrdwSEumFxVE9B9AemH3uIH4pUUDr4uWy+NHpX88YEAwtrbEOD O0n3D/0Q3EYP3mHwbljDYoIHoGoojxcAzcdmjcfzjLzMaggHulkVCPDM3ZI+WTmk 4hf4qUhH92+HzSP8gNqVwwLuLEEPsHU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:30 2025 by rpki-client