$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1348434c-463e-3ac1-8c3a-7e7078ad9333.roa File: 1348434c-463e-3ac1-8c3a-7e7078ad9333.roa (raw, json) Hash identifier: dUIlIpUT8r/zDRCq930topgsKBTKRz04E3UbpVaduM4= Subject key identifier: 81:7A:90:41:91:0E:5F:65:CD:AF:39:95:71:D2:0F:39:15:FD:96:B1 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584B6BC744BE8FEB62AB7F44A3C0 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1348434c-463e-3ac1-8c3a-7e7078ad9333.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 14618 IP address blocks: 209.54.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:44:be:8f:eb:62:ab:7f:44:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=5b1ee8ed-5e2f-4d80-8c13-eabb87c70cb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:e9:4a:21:2a:d7:7e:c6:00:48:75:bb:9b: 90:62:56:19:7f:6e:84:89:13:b2:8e:c6:79:29:b5: 34:89:ec:ea:19:85:e6:22:05:fe:78:bc:b4:e2:71: 5f:c5:46:a6:68:eb:f0:e1:ba:eb:39:66:41:fe:63: cf:ff:47:c0:20:9b:e3:44:0e:a8:89:70:32:07:60: 84:41:d1:4f:e7:cd:23:52:de:62:f8:0c:b2:45:eb: e2:32:ff:7b:57:d3:a3:48:ad:03:9c:ca:cd:50:ac: 61:84:13:e2:cf:c1:46:86:64:5e:9f:c1:e4:6e:65: 26:fc:a7:cf:25:1a:60:b6:99:6e:8c:de:61:6b:ca: d4:b0:37:25:40:de:4b:e0:9e:35:04:2d:09:a4:c2: 71:52:3c:47:04:42:7b:9c:25:0c:b8:61:73:c9:d6: d3:28:fd:58:bc:32:64:40:02:26:67:bf:ac:bb:75: 5a:73:f5:43:39:ba:7c:d9:00:68:59:17:59:98:49: 20:31:08:50:e9:a4:bb:16:c8:51:21:06:c9:1a:d6: 31:eb:a4:ce:8f:24:0a:9c:bf:f6:f5:51:81:1b:8b: 86:78:52:9c:6e:a7:49:0c:a3:d4:f7:b8:1f:db:e8: b5:a0:b2:71:bf:a0:91:19:87:58:87:e4:08:dc:af: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:7A:90:41:91:0E:5F:65:CD:AF:39:95:71:D2:0F:39:15:FD:96:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1348434c-463e-3ac1-8c3a-7e7078ad9333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 209.54.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:bc:4a:25:33:58:3b:cd:2e:58:62:94:bd:bf:a9:4d:42:6f: e6:fb:8b:08:37:c5:48:0e:d6:15:f0:ac:e7:12:e8:33:69:c3: e9:f1:76:a9:ee:3a:60:c7:87:5f:86:20:8a:e2:a0:9a:90:4e: 88:16:73:4d:25:22:f6:0b:b6:98:a8:c2:9d:89:63:9c:b5:29: 63:e8:b6:77:77:31:5e:8e:98:39:24:6b:4e:a5:33:a1:d1:df: 3c:c0:2a:8e:06:e9:8f:c4:d9:fd:ec:28:27:4f:8b:23:d2:c6: 1b:9d:24:03:8d:cf:87:5b:fc:61:7b:9a:78:4e:9e:bc:da:0d: c4:62:f5:35:b6:97:45:68:77:4e:70:0d:49:83:f9:5b:30:9b: d2:2c:f9:92:40:19:6c:df:5a:43:4c:f8:b8:9b:ea:e6:bd:2c: 94:5f:dc:4e:15:b4:31:16:4c:3c:ad:cc:82:6a:2d:ee:d4:40: 91:e1:db:06:d9:57:ab:13:48:a6:e1:1b:01:c3:77:01:41:c3: 8b:e0:f6:86:75:bf:fc:dc:50:9a:20:a7:fa:36:97:a2:06:39: 64:54:16:69:1c:f5:93:94:cb:eb:d0:a1:dd:c0:28:70:d7:38: 56:fc:41:f8:89:a6:1d:8e:f7:36:ef:41:46:31:94:da:be:87: 64:ac:93:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0S+j+tiq39Eo8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk NWIxZWU4ZWQtNWUyZi00ZDgwLThjMTMtZWFiYjg3YzcwY2I2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNfpSiEq137GAEh1u5uQYlYZf26EiROyjsZ5 KbU0iezqGYXmIgX+eLy04nFfxUamaOvw4brrOWZB/mPP/0fAIJvjRA6oiXAyB2CE QdFP580jUt5i+AyyReviMv97V9OjSK0DnMrNUKxhhBPiz8FGhmRen8HkbmUm/KfP JRpgtplujN5ha8rUsDclQN5L4J41BC0JpMJxUjxHBEJ7nCUMuGFzydbTKP1YvDJk QAImZ7+su3Vac/VDObp82QBoWRdZmEkgMQhQ6aS7FshRIQbJGtYx66TOjyQKnL/2 9VGBG4uGeFKcbqdJDKPU97gf2+i1oLJxv6CRGYdYh+QI3K8p8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIF6kEGRDl9lza85lXHSDzkV/ZaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMTM0ODQzNGMtNDYzZS0z YWMxLThjM2EtN2U3MDc4YWQ5MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO8SiUzWDvNLlhilL2/qU1Cb+b7iwg3xUgO1hXwrOcS6DNpw+nxdqnu OmDHh1+GIIrioJqQTogWc00lIvYLtpiowp2JY5y1KWPotnd3MV6OmDkka06lM6HR 3zzAKo4G6Y/E2f3sKCdPiyPSxhudJAONz4db/GF7mnhOnrzaDcRi9TW2l0Vod05w DUmD+Vswm9Is+ZJAGWzfWkNM+Lib6ua9LJRf3E4VtDEWTDytzIJqLe7UQJHh2wbZ V6sTSKbhGwHDdwFBw4vg9oZ1v/zcUJogp/o2l6IGOWRUFmkc9ZOUy+vQod3AKHDX OFb8QfiJph2O9zbvQUYxlNq+h2Ssk1Q= -----END CERTIFICATE-----Generated at Wed Oct 8 19:45:26 2025 by rpki-client