$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa File: 17257513-0a31-325d-b71f-a854a1b5e0a5.roa (raw, json) Hash identifier: NI/CR8BHWJUeAYd5IZlxV9toYQsfnMjak3ZUWU0nYWM= Subject key identifier: 4F:0B:F9:52:36:AA:6D:12:28:C5:39:B4:66:1A:43:97:BE:FC:6E:86 Certificate issuer: /CN=2c480684-ece9-4dd6-8ec6-0437d826102d Certificate serial: 010D0C9F4328584B7C876418ADFDE7A3A6FBB080 Authority key identifier: DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 46616 IP address blocks: 208.114.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:64:18:ad:fd:e7:a3:a6:fb:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c480684-ece9-4dd6-8ec6-0437d826102d Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=91479ea5-9eb0-4241-909a-68cfe24e46f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:ba:fd:00:6a:8e:8a:6e:29:9f:64:f6:85: 51:a9:e0:de:fd:8d:b0:a4:fe:85:e4:83:1f:6a:b6: 09:e8:78:da:c9:f5:17:3a:ac:67:c0:aa:d1:f4:30: fa:7f:fd:48:c5:4d:a3:e8:ef:21:d5:74:5c:24:d3: ad:90:5c:30:71:80:22:f8:2e:f0:ec:b9:5c:90:16: 6d:aa:8e:3a:05:c7:cf:0c:f2:11:c4:eb:ea:1d:83: ea:44:44:2d:06:c6:25:e4:64:11:2a:1a:63:01:19: 43:75:25:3b:f5:2e:6e:ff:d7:31:c6:85:b7:f6:dd: e9:6f:9f:5b:89:e5:10:ef:82:8b:5e:8c:89:23:80: 7d:7c:85:f4:0f:a4:33:59:80:0d:81:37:ce:3b:e5: e6:09:71:e4:1c:91:36:b9:75:ac:ab:4f:31:de:2c: 93:b6:dc:82:46:a6:2c:e0:fb:1e:9f:67:aa:82:c8: 71:15:62:1f:73:6a:f2:6c:08:7a:71:4c:ae:7c:15: 4a:ce:ab:7a:a8:8a:88:a6:01:86:ee:1d:b1:6f:de: 35:82:eb:fd:c9:1e:86:56:8a:db:22:19:9a:1d:89: 3e:b4:2c:08:d7:85:c0:14:5f:69:18:46:fe:dc:a4: b9:07:f6:42:9b:32:c5:c9:1a:ab:89:b0:e7:67:6e: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0B:F9:52:36:AA:6D:12:28:C5:39:B4:66:1A:43:97:BE:FC:6E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/17257513-0a31-325d-b71f-a854a1b5e0a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d/2c480684-ece9-4dd6-8ec6-0437d826102d.crl X509v3 Authority Key Identifier: keyid:DB:6F:31:8B:7D:79:70:F6:0C:C2:07:20:D2:13:6F:F4:FC:36:55:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2c480684-ece9-4dd6-8ec6-0437d826102d.cer sbgp-ipAddrBlock: critical IPv4: 208.114.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8a:25:8b:ba:2c:49:39:b8:b9:38:3b:a6:25:c5:93:57:d3: 19:50:f1:c6:d5:ee:6e:a2:50:b6:8d:b8:5c:a3:33:67:f8:5e: e8:b2:43:71:5b:49:d7:1c:c8:b4:d3:bf:8c:37:fe:9e:77:97: 93:69:0f:5e:1e:71:ab:d3:19:2a:5d:f2:80:cb:82:b8:dc:0a: 50:68:31:f5:32:ea:7d:38:2f:78:ef:92:87:9c:0e:33:11:ae: a3:9d:84:ac:06:44:d4:16:5f:4f:9d:40:a6:24:9d:27:28:43: 46:03:67:f9:f1:dc:4a:a5:2c:75:28:56:3d:94:62:8a:d4:23: c7:26:68:a5:01:1e:8a:88:b0:31:d2:3e:12:1e:8c:78:40:c4: 8f:6e:67:89:74:7f:71:63:b6:f3:21:d1:8e:15:26:50:fe:c9: 9f:65:d3:63:3c:66:8a:45:db:d8:19:82:af:a0:67:f8:73:9d: 8f:dc:f0:c7:19:30:21:b9:48:f6:ea:a1:5d:f8:46:9c:96:ea: 62:78:0d:4d:c8:2a:15:31:e6:3e:d5:da:31:1b:bd:bf:d0:42: 84:e3:97:8c:48:36:a0:6e:a8:15:b7:ff:aa:84:09:25:9a:fd: 36:be:ff:16:69:08:82:da:51:a6:64:6f:98:ac:3a:b7:ff:92: 40:97:3b:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h2QYrf3no6b7sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmM0ODA2ODQtZWNlOS00ZGQ2LThlYzYtMDQzN2Q4MjYx MDJkMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk OTE0NzllYTUtOWViMC00MjQxLTkwOWEtNjhjZmUyNGU0NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgu6/QBqjopuKZ9k9oVRqeDe/Y2wpP6F5IMf arYJ6HjayfUXOqxnwKrR9DD6f/1IxU2j6O8h1XRcJNOtkFwwcYAi+C7w7LlckBZt qo46BcfPDPIRxOvqHYPqREQtBsYl5GQRKhpjARlDdSU79S5u/9cxxoW39t3pb59b ieUQ74KLXoyJI4B9fIX0D6QzWYANgTfOO+XmCXHkHJE2uXWsq08x3iyTttyCRqYs 4Psen2eqgshxFWIfc2rybAh6cUyufBVKzqt6qIqIpgGG7h2xb941guv9yR6GVorb IhmaHYk+tCwI14XAFF9pGEb+3KS5B/ZCmzLFyRqribDnZ27CFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8L+VI2qm0SKMU5tGYaQ5e+/G6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4 MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3ZDgyNjEwMmQvMTcyNTc1MTMtMGEzMS0z MjVkLWI3MWYtYTg1NGExYjVlMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmM0ODA2ODQtZWNlOS00ZGQ2LThl YzYtMDQzN2Q4MjYxMDJkLzJjNDgwNjg0LWVjZTktNGRkNi04ZWM2LTA0MzdkODI2 MTAyZC5jcmwwHwYDVR0jBBgwFoAU228xi315cPYMwgcg0hNv9Pw2VXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYzQ4MDY4NC1lY2U5LTRkZDYtOGVjNi0wNDM3 ZDgyNjEwMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HI2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaKJYu6LEk5uLk4O6YlxZNX0xlQ8cbV7m6iULaNuFyjM2f4XuiyQ3Fb SdccyLTTv4w3/p53l5NpD14ecavTGSpd8oDLgrjcClBoMfUy6n04L3jvkoecDjMR rqOdhKwGRNQWX0+dQKYknScoQ0YDZ/nx3EqlLHUoVj2UYorUI8cmaKUBHoqIsDHS PhIejHhAxI9uZ4l0f3FjtvMh0Y4VJlD+yZ9l02M8ZopF29gZgq+gZ/hznY/c8McZ MCG5SPbqoV34RpyW6mJ4DU3IKhUx5j7V2jEbvb/QQoTjl4xINqBuqBW3/6qECSWa /Ta+/xZpCILaUaZkb5isOrf/kkCXO5Q= -----END CERTIFICATE-----Generated at Tue Oct 21 00:00:37 2025 by rpki-client