$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa File: 5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa (raw, json) Hash identifier: p/U+H5xiz2+8lliM8lKjJrqARbxzaV9SNys6AnCFnJE= Subject key identifier: C1:3E:06:4A:28:2C:43:3C:B5:1D:40:61:F8:F7:06:8F:09:41:6D:E0 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584B7DECB10F7545527E59461080 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 396952 IP address blocks: 208.87.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b1:0f:75:45:52:7e:59:46:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=4d8956b1-e83d-4af4-9db0-603cbf41758b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:41:1d:e9:71:39:da:93:6d:d9:bc:55:bc:95: 78:b7:1e:13:c7:82:e0:d6:36:d3:b7:56:8d:98:25: 6c:ef:c5:26:57:69:cc:94:2d:8c:17:43:e1:fb:43: 6e:0a:67:9f:13:68:ec:68:89:35:d3:06:15:88:ec: 10:be:ac:df:d3:ac:a9:27:3e:3c:1e:dd:d3:88:8c: 7a:0a:eb:aa:a4:45:e4:97:a3:70:87:c2:b2:fd:cb: bf:0d:e7:bb:23:8a:02:31:02:fe:0b:3f:12:90:d5: 1c:c7:0c:80:00:1d:bc:37:f4:83:57:0a:cc:a5:06: 88:33:0d:82:1e:12:f0:c8:5d:81:97:9f:26:33:7b: f9:56:30:ee:eb:4a:06:e5:1e:f4:a1:d3:44:78:43: df:33:cb:e6:ea:89:57:a6:ce:aa:78:69:d8:1a:d6: 63:2e:d9:39:1a:4d:88:50:75:e6:62:0d:cf:a9:91: f6:50:54:d6:92:9b:cc:64:7d:28:01:32:ef:8f:d1: f0:10:02:ed:3f:9d:43:aa:8a:d9:e3:0e:50:7b:78: 75:d4:45:26:8e:f0:c2:0c:21:fc:38:52:7f:93:7f: be:9d:1d:87:b5:7e:32:8b:38:16:e1:66:de:f2:67: 33:1a:ab:ec:f8:8c:ec:2f:cf:6e:c4:e6:49:77:d5: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3E:06:4A:28:2C:43:3C:B5:1D:40:61:F8:F7:06:8F:09:41:6D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/5ac22895-93b0-3a89-8396-5d9f7bc4a0fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 208.87.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fc:97:79:6e:b7:84:08:e6:f6:fd:11:20:b6:e8:e7:08:46: 1f:b3:d1:9a:83:6c:3f:c7:19:ee:a6:4d:7b:e1:e5:65:b4:44: 05:24:0c:6f:49:4c:ed:2d:6e:9c:10:48:00:12:d9:55:67:cf: f4:84:04:39:27:ef:69:ac:08:ce:eb:09:3c:a6:89:01:bb:30: 4f:66:c8:81:15:70:1b:b9:bb:d5:07:65:03:07:a0:d3:15:5c: 57:63:b0:9e:6a:ee:f6:a7:74:28:09:7c:cd:91:f4:73:03:a0: 90:35:09:69:24:66:51:7c:bf:1d:e6:ae:fd:6e:b9:a5:25:19: d3:26:2d:89:ed:74:fd:ef:ad:d2:b3:35:5e:72:6f:97:21:ca: 36:d4:6b:03:8b:b5:1b:32:d5:2b:f0:78:95:a1:0c:d8:b2:dc: a4:3f:69:32:55:80:94:39:c7:c5:2a:b8:82:fa:48:3e:0f:6b: 57:5f:8b:59:8c:29:b5:fc:50:47:3f:f1:30:1e:12:15:47:fc: c1:b1:c5:3b:56:b6:85:8f:43:95:54:ff:aa:5d:f1:c7:28:71: 82:04:de:b2:11:69:5e:14:71:79:55:60:86:4c:9b:db:cc:48: 75:04:c3:ea:f1:2e:c1:b0:ab:1c:6b:6b:46:a2:e7:f6:c4:a1: 81:89:f0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LEPdUVSfllGEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NGQ4OTU2YjEtZTgzZC00YWY0LTlkYjAtNjAzY2JmNDE3NThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEEd6XE52pNt2bxVvJV4tx4Tx4Lg1jbTt1aN mCVs78UmV2nMlC2MF0Ph+0NuCmefE2jsaIk10wYViOwQvqzf06ypJz48Ht3TiIx6 CuuqpEXkl6Nwh8Ky/cu/Dee7I4oCMQL+Cz8SkNUcxwyAAB28N/SDVwrMpQaIMw2C HhLwyF2Bl58mM3v5VjDu60oG5R70odNEeEPfM8vm6olXps6qeGnYGtZjLtk5Gk2I UHXmYg3PqZH2UFTWkpvMZH0oATLvj9HwEALtP51DqorZ4w5Qe3h11EUmjvDCDCH8 OFJ/k3++nR2HtX4yizgW4Wbe8mczGqvs+IzsL89uxOZJd9VvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME+BkooLEM8tR1AYfj3Bo8JQW3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvNWFjMjI4OTUtOTNiMC0z YTg5LTgzOTYtNWQ5ZjdiYzRhMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FejMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD8l3lut4QI5vb9ESC26OcIRh+z0ZqDbD/HGe6mTXvh5WW0RAUkDG9J TO0tbpwQSAAS2VVnz/SEBDkn72msCM7rCTymiQG7ME9myIEVcBu5u9UHZQMHoNMV XFdjsJ5q7vandCgJfM2R9HMDoJA1CWkkZlF8vx3mrv1uuaUlGdMmLYntdP3vrdKz NV5yb5chyjbUawOLtRsy1SvweJWhDNiy3KQ/aTJVgJQ5x8UquIL6SD4Pa1dfi1mM KbX8UEc/8TAeEhVH/MGxxTtWtoWPQ5VU/6pd8ccocYIE3rIRaV4UcXlVYIZMm9vM SHUEw+rxLsGwqxxra0ai5/bEoYGJ8Kc= -----END CERTIFICATE-----Generated at Fri Oct 17 13:04:28 2025 by rpki-client