$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8808243b-e157-3244-aedd-40c5f2daae58.roa File: 8808243b-e157-3244-aedd-40c5f2daae58.roa (raw, json) Hash identifier: XRD60FA7o5uUrFUpIykgHTgqdBMkpbGOstFlK64EqV4= Subject key identifier: 2D:66:EB:BD:61:A3:79:8E:02:20:C3:99:A8:E0:12:2A:ED:1F:4A:8C Certificate issuer: /CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Certificate serial: 010D0C9F4328584B3821974CC3088EFB4E829200 Authority key identifier: 25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8808243b-e157-3244-aedd-40c5f2daae58.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 19381 IP address blocks: 192.88.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:97:4c:c3:08:8e:fb:4e:82:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a220d5-4ac8-4e34-bec0-5a555376e674 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=f0d96dee-a91d-4a86-8a55-be0dec12d7ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:1a:a5:2e:d1:8e:5e:fb:ea:19:51:30:c9: 6d:4b:71:d6:61:33:af:87:aa:c1:4d:ee:fc:95:7d: 0f:29:7d:c1:c1:42:f1:af:63:8e:89:1e:c3:f3:91: 0b:14:e4:2a:ad:f8:b4:52:21:2e:46:36:65:a5:f6: 4a:6d:16:d2:fa:6a:a7:28:a1:3b:cf:24:8e:13:c2: 1e:3b:16:70:5d:ea:cf:39:64:5e:bc:4a:9f:69:cb: c6:4e:de:61:9f:f4:fb:67:d3:ea:f3:f9:40:77:40: c2:27:9e:3a:65:1e:66:5a:b5:d9:25:a5:71:11:84: 03:6d:6b:67:ce:bd:00:5c:bf:92:2c:c3:c7:f2:35: d8:58:14:36:bf:c3:a4:8f:e4:ba:09:65:6e:8a:0f: ee:95:f0:13:84:3b:6b:41:b5:2f:31:66:0d:8a:4b: cb:54:20:1b:84:04:5b:d1:71:23:bc:94:dd:cb:ff: c3:c3:ad:0e:31:cb:41:06:45:1b:27:04:d4:09:fc: b5:f6:ae:53:c9:c7:11:57:d4:0d:de:86:8e:75:76: c1:16:62:a3:d3:ce:38:5c:9a:54:1c:60:8f:09:8e: fb:e0:d7:8d:1d:ff:4b:7e:74:e3:18:37:2a:ad:28: e6:4a:61:e0:c5:02:10:9a:7c:d8:f6:c8:6e:f7:33: b9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:66:EB:BD:61:A3:79:8E:02:20:C3:99:A8:E0:12:2A:ED:1F:4A:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/8808243b-e157-3244-aedd-40c5f2daae58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674/54a220d5-4ac8-4e34-bec0-5a555376e674.crl X509v3 Authority Key Identifier: keyid:25:F2:C6:AC:82:D3:6D:FD:8A:21:67:4D:19:83:03:66:A1:0F:97:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/54a220d5-4ac8-4e34-bec0-5a555376e674.cer sbgp-ipAddrBlock: critical IPv4: 192.88.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:13:f7:cb:18:4a:92:ab:6b:4c:df:b0:a0:1e:88:18:a9:f8: 68:e6:e1:79:fd:1d:b5:9e:c6:32:eb:a6:ab:39:a7:a3:7d:e4: c3:54:5a:33:f2:97:e7:48:b6:6f:3c:9c:d0:79:3b:56:94:8e: 19:2d:22:0e:db:32:13:d8:b2:67:59:8c:97:70:33:4a:39:b7: d5:f7:06:15:fe:1b:d2:34:f6:6d:79:7d:a3:70:be:fb:71:67: e1:48:07:08:0e:93:83:48:38:21:f6:40:bf:52:be:33:b0:c6: 74:3d:7f:c0:2c:47:0b:75:eb:c5:1d:f6:60:3f:ab:5d:95:28: 3b:30:85:20:c1:0a:b0:ca:70:23:43:31:c9:d9:f7:d0:4b:9f: 61:88:ec:d2:e8:73:ff:46:0e:aa:f4:47:b5:f1:6b:c8:30:34: f7:b3:bf:a5:97:05:8e:a9:8e:74:ac:13:d3:3d:cd:d0:1b:91: 40:fe:36:bc:8c:52:17:e6:a5:71:f5:8f:c8:2e:cb:c9:02:9a: 93:38:80:09:53:75:cd:68:32:b9:5a:7e:1f:c6:f7:7b:16:4b: 6d:38:5a:06:c6:a4:dc:7f:58:0b:b8:41:49:2d:ea:37:a0:69: 29:85:2b:50:6e:86:ee:01:2a:32:0f:72:2d:7e:4b:d9:ff:26: b4:f6:38:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZdMwwiO+06CkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTRhMjIwZDUtNGFjOC00ZTM0LWJlYzAtNWE1NTUzNzZl Njc0MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk ZjBkOTZkZWUtYTkxZC00YTg2LThhNTUtYmUwZGVjMTJkN2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/QapS7Rjl776hlRMMltS3HWYTOvh6rBTe78 lX0PKX3BwULxr2OOiR7D85ELFOQqrfi0UiEuRjZlpfZKbRbS+mqnKKE7zySOE8Ie OxZwXerPOWRevEqfacvGTt5hn/T7Z9Pq8/lAd0DCJ546ZR5mWrXZJaVxEYQDbWtn zr0AXL+SLMPH8jXYWBQ2v8Okj+S6CWVuig/ulfAThDtrQbUvMWYNikvLVCAbhARb 0XEjvJTdy//Dw60OMctBBkUbJwTUCfy19q5TyccRV9QN3oaOdXbBFmKj0844XJpU HGCPCY774NeNHf9LfnTjGDcqrSjmSmHgxQIQmnzY9shu9zO5RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1m671ho3mOAiDDmajgEirtH0qMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEy MjBkNS00YWM4LTRlMzQtYmVjMC01YTU1NTM3NmU2NzQvODgwODI0M2ItZTE1Ny0z MjQ0LWFlZGQtNDBjNWYyZGFhZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTRhMjIwZDUtNGFjOC00ZTM0LWJl YzAtNWE1NTUzNzZlNjc0LzU0YTIyMGQ1LTRhYzgtNGUzNC1iZWMwLTVhNTU1Mzc2 ZTY3NC5jcmwwHwYDVR0jBBgwFoAUJfLGrILTbf2KIWdNGYMDZqEPl3QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi81NGEyMjBkNS00YWM4LTRlMzQtYmVjMC01YTU1 NTM3NmU2NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFhtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIT98sYSpKra0zfsKAeiBip+Gjm4Xn9HbWexjLrpqs5p6N95MNUWjPy l+dItm88nNB5O1aUjhktIg7bMhPYsmdZjJdwM0o5t9X3BhX+G9I09m15faNwvvtx Z+FIBwgOk4NIOCH2QL9SvjOwxnQ9f8AsRwt168Ud9mA/q12VKDswhSDBCrDKcCND McnZ99BLn2GI7NLoc/9GDqr0R7Xxa8gwNPezv6WXBY6pjnSsE9M9zdAbkUD+NryM UhfmpXH1j8guy8kCmpM4gAlTdc1oMrlafh/G93sWS204WgbGpNx/WAu4QUkt6jeg aSmFK1Buhu4BKjIPci1+S9n/JrT2OOk= -----END CERTIFICATE-----Generated at Wed Nov 5 12:21:46 2025 by rpki-client