$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5e18674d-225a-320d-a1f0-0e697322be1b.roa File: 5e18674d-225a-320d-a1f0-0e697322be1b.roa (raw, json) Hash identifier: iVUbCil1vHAK4qL1VgMPnMTWJKoOwv+esMlCXn7uejk= Subject key identifier: D8:95:6E:4D:BF:2F:5A:C9:92:D4:93:93:EB:37:43:22:B7:5E:47:27 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584B4D11C84A14F947C8E1F39180 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5e18674d-225a-320d-a1f0-0e697322be1b.roa Signing time: Wed 24 Sep 2025 13:00:41 +0000 ROA not before: Wed 24 Sep 2025 13:00:41 +0000 ROA not after: Tue 23 Dec 2025 14:00:41 +0000 asID: 27560 IP address blocks: 207.54.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4d:11:c8:4a:14:f9:47:c8:e1:f3:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Sep 24 13:00:41 2025 GMT Not After : Dec 23 14:00:41 2025 GMT Subject: CN=e89807f0-3ad6-465a-9789-397a7d6ff68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:3f:e5:e0:69:38:58:8a:64:3f:97:fc:32: 17:35:e5:fc:c5:74:8c:c5:4d:a1:8e:5e:03:c5:26: 79:a2:55:5e:53:da:7f:87:4d:47:1c:16:a5:b8:a2: c8:f7:f1:e0:c4:d6:66:2f:84:86:14:b6:c9:40:a3: f4:84:38:06:ff:29:54:55:bc:ff:bf:60:0b:fb:94: f4:2d:9b:2a:5b:00:b9:0e:e3:71:83:dc:9f:f6:1e: 82:03:97:c8:82:24:61:4c:ca:08:c6:af:98:2d:96: 8f:c0:45:f4:39:56:2e:5c:4d:1e:49:ef:75:96:4d: 57:c1:44:5a:82:09:06:b5:01:84:3e:04:4f:d4:f8: 84:5d:eb:ba:93:b4:b0:72:81:f3:99:de:b3:7d:f0: 3b:14:5e:d8:19:3b:d4:23:d3:ff:ac:fe:b5:f9:2e: f6:23:5c:22:ef:69:be:81:6c:64:53:ad:9c:94:bd: c2:c6:b0:c2:45:54:43:3b:03:16:3b:c4:ec:fd:26: 29:6a:dd:d8:54:1d:91:65:0b:08:fb:52:3b:e0:27: 79:05:c6:40:0f:06:6a:b5:a6:b2:ca:19:d5:2f:7b: f2:84:5e:7f:06:e2:2f:ec:a8:42:45:d4:0d:4e:44: 44:05:3a:a4:04:14:ae:e1:a0:ff:d3:1b:b3:df:d3: e9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:95:6E:4D:BF:2F:5A:C9:92:D4:93:93:EB:37:43:22:B7:5E:47:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/5e18674d-225a-320d-a1f0-0e697322be1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 207.54.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:54:67:6b:a7:37:71:e0:b2:f1:62:7e:f6:bf:67:38:84:85: 99:40:47:7e:b1:e1:1b:0c:0a:74:41:0b:ba:37:04:95:de:24: bd:b5:77:f4:40:73:b6:ab:1f:f5:1d:6f:73:d7:1b:fb:25:a1: fe:37:32:63:ac:89:7d:2b:0c:88:35:de:81:77:09:e8:4e:d1: e3:bb:61:30:aa:ca:f5:78:eb:d0:0f:5b:f2:05:5a:7e:bb:fa: 35:3c:57:e9:80:e3:a3:13:cd:96:03:20:54:f6:e2:da:43:58: 9c:c5:c6:71:07:25:50:af:4a:f5:c4:2d:7b:54:d6:24:bb:e1: ed:fc:36:7d:fb:6b:07:af:c1:fd:d6:79:71:2b:7d:df:c9:fd: 70:ea:53:82:6a:23:c8:ec:28:ce:a5:b0:09:6d:c1:2c:80:0b: 9f:e3:e3:7b:8d:14:83:9d:8f:cb:6f:05:a5:f1:aa:af:bb:91: 82:ac:97:83:6e:9e:ab:7a:0d:c8:df:ca:d0:33:6c:04:74:ef: 7f:85:bc:56:ca:f4:59:a9:94:09:b8:23:29:fc:4d:89:3a:b6: 49:41:1d:a8:d3:29:04:f3:2c:c8:52:d1:e6:c2:65:e1:9a:62: 19:63:c8:08:8c:cf:24:11:d7:f2:53:bd:20:6e:5b:cc:c9:96: 53:e9:a1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtNEchKFPlHyOHzkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI1MDkyNDEzMDA0MVoXDTI1MTIyMzE0MDA0MVowLzEtMCsGA1UEAxMk ZTg5ODA3ZjAtM2FkNi00NjVhLTk3ODktMzk3YTdkNmZmNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWc/5eBpOFiKZD+X/DIXNeX8xXSMxU2hjl4D xSZ5olVeU9p/h01HHBaluKLI9/HgxNZmL4SGFLbJQKP0hDgG/ylUVbz/v2AL+5T0 LZsqWwC5DuNxg9yf9h6CA5fIgiRhTMoIxq+YLZaPwEX0OVYuXE0eSe91lk1XwURa ggkGtQGEPgRP1PiEXeu6k7SwcoHzmd6zffA7FF7YGTvUI9P/rP61+S72I1wi72m+ gWxkU62clL3CxrDCRVRDOwMWO8Ts/SYpat3YVB2RZQsI+1I74Cd5BcZADwZqtaay yhnVL3vyhF5/BuIv7KhCRdQNTkREBTqkBBSu4aD/0xuz39PppwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiVbk2/L1rJktSTk+s3QyK3XkcnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNWUxODY3NGQtMjI1YS0z MjBkLWExZjAtMGU2OTczMjJiZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBUZ2unN3HgsvFifva/ZziEhZlAR36x4RsMCnRBC7o3BJXeJL21d/RA c7arH/Udb3PXG/slof43MmOsiX0rDIg13oF3CehO0eO7YTCqyvV469APW/IFWn67 +jU8V+mA46MTzZYDIFT24tpDWJzFxnEHJVCvSvXELXtU1iS74e38Nn37awevwf3W eXErfd/J/XDqU4JqI8jsKM6lsAltwSyAC5/j43uNFIOdj8tvBaXxqq+7kYKsl4Nu nqt6DcjfytAzbAR073+FvFbK9FmplAm4Iyn8TYk6tklBHajTKQTzLMhS0ebCZeGa YhljyAiMzyQR1/JTvSBuW8zJllPpoco= -----END CERTIFICATE-----Generated at Mon Oct 20 21:58:28 2025 by rpki-client