$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa File: a89150dd-4153-345d-91e8-d43ba9e5edde.roa (raw, json) Hash identifier: vzTrKCzWLJEpXYAvtuKY+bvFoOf5mQykY8WahPXuz5Q= Subject key identifier: 95:AA:0E:6A:F5:C3:01:C3:72:CB:69:9C:6C:FC:2F:31:B4:25:B8:F8 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584D0912615CEEF8E29396B12F80 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 3549 IP address blocks: 208.54.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:61:5c:ee:f8:e2:93:96:b1:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=3757b7fd-2a34-4461-93b0-0773fd47b9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:61:15:41:76:c4:74:29:98:4b:c9:70:5e:44: 90:96:3c:f8:68:e8:53:47:dc:b4:da:7b:59:fc:7d: 23:8e:34:e7:ee:fc:b3:fe:88:06:19:ac:c3:5c:99: e4:14:49:d9:cf:43:03:52:b0:a7:33:b6:b1:56:ae: 8a:c1:08:a3:8a:2a:dc:54:30:52:a3:00:60:53:7b: 0c:71:18:98:7f:28:4b:0e:5b:f8:4c:61:47:28:ba: 8b:e5:76:bd:8a:05:2b:3b:98:02:ba:bc:35:85:9c: bc:a8:6a:e5:9c:0c:6d:40:b0:25:f1:40:39:e3:13: 92:0f:74:c7:57:dd:bd:0d:6f:b9:28:6a:e3:af:48: c1:51:3b:97:17:ed:9a:b6:fd:79:3f:e1:e4:53:ca: dd:ba:1c:bd:80:82:43:6f:26:a3:96:33:ef:df:c2: 55:2c:83:30:1a:42:92:a6:48:4e:92:9d:6a:b8:df: 48:97:42:92:f0:79:44:ac:42:1e:55:2f:c3:9b:8b: 8c:23:f2:46:1a:3d:cb:cd:95:c4:12:35:a8:8d:5a: f2:b5:19:53:11:04:17:73:64:e6:e5:31:3e:00:ab: 6b:57:12:31:73:47:e0:1e:97:45:98:68:40:69:0c: 4e:f5:c1:60:b9:89:ec:a9:b0:c8:6d:b4:1a:c3:ab: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AA:0E:6A:F5:C3:01:C3:72:CB:69:9C:6C:FC:2F:31:B4:25:B8:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/a89150dd-4153-345d-91e8-d43ba9e5edde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:b5:25:4d:f3:f4:59:f2:1b:4a:22:70:0b:38:13:1c:d8:11: 0c:fb:f6:48:22:2b:81:1e:50:39:cd:8d:69:75:1a:06:ac:a4: 85:51:58:9e:a0:fc:4b:b6:d4:5f:30:21:f9:a4:9a:64:de:d7: 12:bb:ce:f1:0d:69:df:1e:92:74:d7:7b:36:bd:98:2f:c6:89: b3:01:7b:16:3d:de:db:4b:4f:f5:4c:b7:74:bd:64:93:2a:22: d9:cb:13:21:f7:19:55:4a:f0:64:ee:93:21:36:be:a6:dd:1a: bc:14:78:c1:22:95:6d:43:08:67:62:7d:94:99:d0:00:bb:79: 34:fb:88:04:c7:ff:54:c2:5c:85:a8:6f:99:a1:91:74:80:b2: 61:12:43:f9:91:68:77:a2:9c:7f:9d:1d:4a:3c:79:fb:45:67: f6:a7:11:b0:b0:89:c4:58:e7:3b:de:86:b3:07:37:6c:3b:3b: a9:23:05:72:8e:ac:44:bb:2c:58:34:9b:0e:2a:a6:43:f8:3b: fa:0d:e4:b7:fe:96:d1:f1:c6:65:70:90:ff:28:d0:7e:9f:66: 6e:e2:99:f6:db:b0:d2:85:b8:96:f1:42:ff:d6:60:ba:19:de: d5:2a:95:53:ff:4a:cc:5a:07:92:28:34:19:29:20:22:7a:02: cc:7a:39:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmFc7vjik5axL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk Mzc1N2I3ZmQtMmEzNC00NDYxLTkzYjAtMDc3M2ZkNDdiOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWEVQXbEdCmYS8lwXkSQljz4aOhTR9y02ntZ /H0jjjTn7vyz/ogGGazDXJnkFEnZz0MDUrCnM7axVq6KwQijiircVDBSowBgU3sM cRiYfyhLDlv4TGFHKLqL5Xa9igUrO5gCurw1hZy8qGrlnAxtQLAl8UA54xOSD3TH V929DW+5KGrjr0jBUTuXF+2atv15P+HkU8rduhy9gIJDbyajljPv38JVLIMwGkKS pkhOkp1quN9Il0KS8HlErEIeVS/Dm4uMI/JGGj3LzZXEEjWojVrytRlTEQQXc2Tm 5TE+AKtrVxIxc0fgHpdFmGhAaQxO9cFguYnsqbDIbbQaw6v4cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWqDmr1wwHDcstpnGz8LzG0Jbj4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvYTg5MTUwZGQtNDE1My0z NDVkLTkxZTgtZDQzYmE5ZTVlZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMG1JU3z9FnyG0oicAs4ExzYEQz79kgiK4EeUDnNjWl1GgaspIVRWJ6g /Eu21F8wIfmkmmTe1xK7zvENad8eknTXeza9mC/GibMBexY93ttLT/VMt3S9ZJMq ItnLEyH3GVVK8GTukyE2vqbdGrwUeMEilW1DCGdifZSZ0AC7eTT7iATH/1TCXIWo b5mhkXSAsmESQ/mRaHeinH+dHUo8eftFZ/anEbCwicRY5zvehrMHN2w7O6kjBXKO rES7LFg0mw4qpkP4O/oN5Lf+ltHxxmVwkP8o0H6fZm7imfbbsNKFuJbxQv/WYLoZ 3tUqlVP/SsxaB5IoNBkpICJ6Asx6Oa8= -----END CERTIFICATE-----Generated at Mon Mar 23 08:04:53 2026 by rpki-client