$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa File: 04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa (raw, json) Hash identifier: Q0cJKzHRN2PoaLTUn9nKpmQmcrDaGBX7OglSZR2MRbI= Subject key identifier: 1D:43:F2:E3:C2:42:48:EF:1A:54:DB:CE:D5:A2:21:BA:A0:18:62:62 Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584B6BC745E945DA70B8B2E47680 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa Signing time: Sun 05 Oct 2025 13:00:40 +0000 ROA not before: Sun 05 Oct 2025 13:00:40 +0000 ROA not after: Sat 03 Jan 2026 14:00:40 +0000 asID: 16509 IP address blocks: 209.54.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6b:c7:45:e9:45:da:70:b8:b2:e4:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Oct 5 13:00:40 2025 GMT Not After : Jan 3 14:00:40 2026 GMT Subject: CN=a7daaba7-ef98-4de3-a2c7-76cb37886925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f6:3e:89:3d:72:28:34:e2:9a:9e:f4:fa:82: 96:d0:3d:b4:51:fa:13:a3:8f:e6:f8:7c:14:ae:68: 71:e1:2c:89:44:78:f2:c6:ba:e3:d0:49:eb:7b:99: a6:42:0d:81:84:9b:84:19:0a:37:7a:11:70:2f:48: a3:e6:08:fc:bf:73:2c:0f:26:fa:a3:e6:3f:6d:46: 9f:3e:c4:08:80:cf:c7:67:eb:20:a9:00:f5:3e:9e: 50:4e:04:32:ec:f1:03:23:b9:13:58:25:49:9a:ad: f0:b8:7d:74:ca:ee:53:b9:43:fd:0f:c3:ae:f6:80: 20:b3:f2:24:df:81:ab:8b:79:99:f4:21:22:dd:1a: ff:68:34:43:d1:56:93:1e:1a:e9:a2:f7:6b:93:e9: 3e:3c:64:da:ca:2d:ac:96:b3:76:d4:53:d4:38:a4: 86:06:99:fd:31:7e:7e:34:fd:4c:6c:8b:7b:2d:42: a1:f7:7e:5b:98:fa:e1:7a:a1:6e:71:a6:68:fb:d5: c0:4c:5b:16:4d:92:1a:2f:d8:8d:8b:e0:d0:3c:ab: 76:18:8f:d6:96:d8:ad:bd:9c:65:ca:6e:6a:49:73: 65:26:f2:a0:46:10:4a:22:96:e7:7a:00:0f:aa:88: 93:d6:62:b4:d4:a3:89:fd:a8:3d:e3:fa:2d:38:27: b4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:43:F2:E3:C2:42:48:EF:1A:54:DB:CE:D5:A2:21:BA:A0:18:62:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/04fdc374-f321-3ae7-aa89-9dc3d41faf06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 209.54.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:a0:bb:42:72:3d:64:14:5f:54:98:ec:f2:40:24:f4:e1:93: 9c:1a:c6:7c:56:bf:73:c4:c5:4d:db:96:16:62:f7:e6:6c:46: 7c:04:3a:cd:90:ec:c5:c9:fb:68:39:4d:a4:fb:ba:12:72:64: cf:ba:ce:5e:4c:63:64:b5:d9:a1:ab:85:66:31:ae:13:88:01: ea:96:37:d9:69:08:ba:c4:e7:27:7b:7d:9d:52:0b:e1:1c:33: a2:7a:ff:13:28:fd:64:73:af:7e:43:66:af:b0:ad:19:4b:da: 59:86:b8:b2:1e:74:da:fa:47:39:32:82:77:ba:9a:64:95:0f: a6:cf:fb:a9:53:ee:89:b4:2b:c2:30:0e:00:ff:ba:26:77:26: 89:0e:d6:b9:9f:54:b2:0b:84:6a:27:c1:70:8a:67:bf:86:27: 00:89:32:69:cc:0c:11:86:1b:fd:36:9f:91:cc:42:65:62:55: 9e:d4:be:40:9b:ea:ee:70:ef:b5:1e:17:b9:19:06:66:84:ca: 32:8f:ba:fb:40:6e:40:5a:67:e6:79:38:0c:9b:f9:01:4a:3e: 2d:2a:6b:19:76:d5:5a:93:f4:37:6a:e7:72:77:ee:ae:8a:c1: 73:12:ea:49:3c:96:26:e2:14:70:c8:2b:17:ef:04:94:8f:12: 59:56:b4:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtrx0XpRdpwuLLkdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI1MTAwNTEzMDA0MFoXDTI2MDEwMzE0MDA0MFowLzEtMCsGA1UEAxMk YTdkYWFiYTctZWY5OC00ZGUzLWEyYzctNzZjYjM3ODg2OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfY+iT1yKDTimp70+oKW0D20UfoTo4/m+HwU rmhx4SyJRHjyxrrj0Enre5mmQg2BhJuEGQo3ehFwL0ij5gj8v3MsDyb6o+Y/bUaf PsQIgM/HZ+sgqQD1Pp5QTgQy7PEDI7kTWCVJmq3wuH10yu5TuUP9D8Ou9oAgs/Ik 34Gri3mZ9CEi3Rr/aDRD0VaTHhrpovdrk+k+PGTayi2slrN21FPUOKSGBpn9MX5+ NP1MbIt7LUKh935bmPrheqFucaZo+9XATFsWTZIaL9iNi+DQPKt2GI/WltitvZxl ym5qSXNlJvKgRhBKIpbnegAPqoiT1mK01KOJ/ag94/otOCe0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1D8uPCQkjvGlTbztWiIbqgGGJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMDRmZGMzNzQtZjMyMS0z YWU3LWFhODktOWRjM2Q0MWZhZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0TZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWgu0JyPWQUX1SY7PJAJPThk5waxnxWv3PExU3blhZi9+ZsRnwEOs2Q 7MXJ+2g5TaT7uhJyZM+6zl5MY2S12aGrhWYxrhOIAeqWN9lpCLrE5yd7fZ1SC+Ec M6J6/xMo/WRzr35DZq+wrRlL2lmGuLIedNr6Rzkygne6mmSVD6bP+6lT7om0K8Iw DgD/uiZ3JokO1rmfVLILhGonwXCKZ7+GJwCJMmnMDBGGG/02n5HMQmViVZ7UvkCb 6u5w77UeF7kZBmaEyjKPuvtAbkBaZ+Z5OAyb+QFKPi0qaxl21VqT9Ddq53J37q6K wXMS6kk8libiFHDIKxfvBJSPEllWtOs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:56:44 2025 by rpki-client