$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bf9da31-4608-3c64-ae6f-0770467becb2.roa File: 0bf9da31-4608-3c64-ae6f-0770467becb2.roa (raw, json) Hash identifier: n2RiBfBgmSi780o6w4HW1DpF5pajBgvAXrtU5typ3Lc= Subject key identifier: A2:D9:E3:DC:76:EB:17:78:DA:CC:85:5E:F6:04:BF:46:9A:7A:2C:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D825AAA6C8F4CE17F9C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bf9da31-4608-3c64-ae6f-0770467becb2.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36618 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d8:25:aa:a6:c8:f4:ce:17:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=68122bd1-6656-4135-9b2d-fac20151a660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:18:5c:fa:70:c3:e7:60:f8:4a:26:76:12:e2: 7a:a3:4d:99:06:8c:37:ab:cd:e0:2c:72:37:9a:18: ad:4e:61:88:32:c9:37:4c:0c:59:89:9d:0f:55:79: 8f:7e:ff:e3:22:e8:fa:2e:de:81:26:3c:22:2c:c7: 4b:6f:35:6f:08:72:2d:59:c6:83:45:74:2a:f8:14: 41:b7:47:dd:4b:aa:8f:a9:a0:d8:83:96:66:25:87: 16:b3:22:d7:39:06:a6:b9:21:a3:11:ea:c2:d5:d1: e5:5d:94:30:7f:26:5b:1d:e6:21:5b:f4:82:9b:a6: a5:ba:36:1c:ff:a1:e7:12:ad:c2:f5:51:84:d9:ab: bc:1d:48:b3:b4:34:07:69:88:9f:72:7d:97:85:bb: 77:80:f8:67:3a:40:39:7e:d6:f4:c6:4e:78:4f:e2: 9a:57:3c:c4:e1:fb:46:06:bf:42:50:91:68:58:e0: 22:22:45:4a:4a:a0:cc:40:63:01:78:6f:b6:99:02: d9:40:98:30:b6:79:c8:31:57:ad:a4:69:a4:43:ed: d6:e6:64:c8:79:fa:c4:5a:8f:1b:9d:00:3c:e6:bd: 5d:2f:68:78:ae:d1:52:04:de:92:07:0e:c4:d7:2d: 07:47:cf:b8:7b:e8:d8:f4:af:8c:62:c9:7e:f5:df: 31:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D9:E3:DC:76:EB:17:78:DA:CC:85:5E:F6:04:BF:46:9A:7A:2C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0bf9da31-4608-3c64-ae6f-0770467becb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:34:db:98:a2:90:62:ab:57:05:22:8d:33:5f:03:9e:72:d2: b9:2a:d7:76:8e:68:5c:9e:8e:c8:7d:6c:49:24:2c:ed:6d:e6: eb:7b:38:9d:90:2e:59:80:4b:05:df:a0:2e:ce:0f:6b:8e:d7: 2b:21:e9:e5:aa:63:f0:8e:cc:36:2e:bf:61:28:4a:88:68:5e: 66:3c:4c:fb:58:41:62:00:10:88:3b:ea:64:2f:11:c1:86:24: 9f:1f:b0:55:e3:c9:ee:09:1c:ca:8b:8c:10:3e:30:25:b2:b4: c9:dd:8d:18:33:be:f4:a3:cd:ea:73:39:7f:6c:f2:2a:9f:4e: ad:40:97:f5:fc:e0:ef:3e:d3:d1:3c:aa:ba:85:32:cb:1b:a3: 52:55:9f:fb:9b:2d:38:49:60:dc:4f:39:e3:81:9b:23:4d:08: a1:59:77:68:93:03:20:c7:0a:83:77:81:ce:4b:3b:1d:b4:2f: 88:fd:f2:a3:6d:00:bb:fc:8f:b3:de:23:c0:cb:0e:5a:b7:23: 19:ee:db:b5:d7:29:27:a5:ad:07:5c:20:ed:c9:61:d8:c8:4c: 01:99:0f:4e:fc:05:49:c8:41:35:33:35:86:a7:df:3a:40:c0: 79:c5:14:0e:3a:85:7c:20:b1:d3:f0:39:09:21:b9:fc:7a:78: 74:05:8f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgdglqqbI9M4X+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NjgxMjJiZDEtNjY1Ni00MTM1LTliMmQtZmFjMjAxNTFhNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRhc+nDD52D4SiZ2EuJ6o02ZBow3q83gLHI3 mhitTmGIMsk3TAxZiZ0PVXmPfv/jIuj6Lt6BJjwiLMdLbzVvCHItWcaDRXQq+BRB t0fdS6qPqaDYg5ZmJYcWsyLXOQamuSGjEerC1dHlXZQwfyZbHeYhW/SCm6alujYc /6HnEq3C9VGE2au8HUiztDQHaYifcn2Xhbt3gPhnOkA5ftb0xk54T+KaVzzE4ftG Br9CUJFoWOAiIkVKSqDMQGMBeG+2mQLZQJgwtnnIMVetpGmkQ+3W5mTIefrEWo8b nQA85r1dL2h4rtFSBN6SBw7E1y0HR8+4e+jY9K+MYsl+9d8x5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLZ49x26xd42syFXvYEv0aaeiw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGJmOWRhMzEtNDYwOC0z YzY0LWFlNmYtMDc3MDQ2N2JlY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE025iikGKrVwUijTNfA55y0rkq13aOaFyejsh9bEkkLO1t5ut7OJ2Q LlmASwXfoC7OD2uO1ysh6eWqY/COzDYuv2EoSohoXmY8TPtYQWIAEIg76mQvEcGG JJ8fsFXjye4JHMqLjBA+MCWytMndjRgzvvSjzepzOX9s8iqfTq1Al/X84O8+09E8 qrqFMssbo1JVn/ubLThJYNxPOeOBmyNNCKFZd2iTAyDHCoN3gc5LOx20L4j98qNt ALv8j7PeI8DLDlq3Ixnu27XXKSelrQdcIO3JYdjITAGZD078BUnIQTUzNYan3zpA wHnFFA46hXwgsdPwOQkhufx6eHQFj+s= -----END CERTIFICATE-----Generated at Mon Oct 20 10:01:47 2025 by rpki-client