$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa File: 1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa (raw, json) Hash identifier: qx8rgEGxZvuafpqONEBTsVEJhDEg9qeuqeUL2UVZl3w= Subject key identifier: 86:05:C7:97:B5:98:C3:2F:CA:2E:29:02:74:7A:E2:75:EF:C2:3B:0C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52745348A8E6E0767F94C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396646 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:74:53:48:a8:e6:e0:76:7f:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3bef0cce-cdec-4110-ae01-ab430d099a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3a:84:c7:1d:1b:cb:31:fe:38:84:09:c1:ba: 1f:49:5e:62:61:d2:18:7a:bb:e5:be:4a:77:9b:e0: 8a:12:5e:0f:a6:66:cc:73:6b:36:5c:8a:ad:93:8e: 6a:a4:8a:56:c0:93:cc:75:3b:17:69:d9:39:ce:48: 8e:c1:6b:86:1d:2d:4d:05:53:a5:5d:ed:32:26:64: f0:3e:6f:4a:8c:1b:91:88:9d:c8:79:dc:b7:25:c2: f8:f4:33:83:82:ea:aa:d7:29:2f:32:6b:e4:46:29: ca:73:8f:df:0b:c8:a8:d7:7c:70:fd:83:b9:05:1d: b4:25:06:95:eb:bd:6a:4a:da:cc:0e:77:95:e2:8e: c8:c8:4a:c0:46:dd:71:21:b1:31:38:8d:17:4a:4e: b1:7c:a5:88:e2:1c:3f:ad:97:e2:31:e8:0d:ca:95: 8a:41:02:1d:d0:a9:8b:e3:7a:cd:0e:73:10:f0:25: 1c:5f:8e:10:62:93:63:e7:c9:94:0f:f8:e8:64:a3: 09:c3:2f:f2:7b:f2:5f:18:45:9a:b5:6d:9d:88:a5: 6a:f2:77:a8:60:f7:cc:66:9e:83:d6:8a:98:a2:ca: 94:77:06:e3:ec:1e:e9:de:7a:7d:5d:83:c1:75:f6: e3:86:c9:f3:c6:0b:c3:b0:ec:93:1e:33:12:f6:03: eb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:05:C7:97:B5:98:C3:2F:CA:2E:29:02:74:7A:E2:75:EF:C2:3B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1157fba7-9bec-36ee-a0af-25d05b6ffe8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:49:02:98:1a:2c:8d:ff:54:fa:20:14:e2:1b:63:80:66:b5: ff:94:4f:16:0f:42:24:81:a0:42:d2:88:3e:b5:a0:96:60:13: d6:2e:34:b8:4d:f0:1a:3f:82:99:ff:a6:7e:b9:96:b4:c5:cb: d6:0e:2e:24:71:ad:f2:8b:bb:4d:54:b4:07:54:92:37:a8:3d: a6:ae:29:95:c1:d8:df:16:6d:47:92:05:d2:5f:3c:30:cd:93: 6c:a3:de:fd:50:24:ab:af:40:bb:89:62:73:1e:ca:a0:d3:1b: 95:13:8b:88:84:ca:84:66:cc:22:be:7d:14:1d:7d:38:8f:b7: 3b:c3:94:62:49:c1:1f:5c:1d:69:ca:f5:94:7e:d9:aa:8e:ea: b9:69:14:78:3e:97:32:05:1e:7a:fe:1e:9a:98:60:da:a5:e0: 4b:3d:66:69:ac:32:cf:4a:c0:d3:53:61:60:3f:9a:8b:11:1e: b9:c6:9a:4f:97:00:9f:6c:17:7c:23:13:d5:d3:d7:a8:72:eb: 1c:03:e2:fa:5e:49:05:64:76:cd:58:8e:62:46:0f:e2:2b:fd: fe:dc:92:74:8c:59:1c:a3:b7:7d:e7:aa:4a:d1:17:2b:c6:0f: 0b:76:e3:65:49:da:27:ec:60:7a:2c:c9:c7:d4:42:ad:23:a3: 71:77:20:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnRTSKjm4HZ/lMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk M2JlZjBjY2UtY2RlYy00MTEwLWFlMDEtYWI0MzBkMDk5YTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDqExx0byzH+OIQJwbofSV5iYdIYervlvkp3 m+CKEl4PpmbMc2s2XIqtk45qpIpWwJPMdTsXadk5zkiOwWuGHS1NBVOlXe0yJmTw Pm9KjBuRiJ3Iedy3JcL49DODguqq1ykvMmvkRinKc4/fC8io13xw/YO5BR20JQaV 671qStrMDneV4o7IyErARt1xIbExOI0XSk6xfKWI4hw/rZfiMegNypWKQQId0KmL 43rNDnMQ8CUcX44QYpNj58mUD/joZKMJwy/ye/JfGEWatW2diKVq8neoYPfMZp6D 1oqYosqUdwbj7B7p3np9XYPBdfbjhsnzxgvDsOyTHjMS9gPrnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYFx5e1mMMvyi4pAnR64nXvwjsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTE1N2ZiYTctOWJlYy0z NmVlLWEwYWYtMjVkMDViNmZmZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNJApgaLI3/VPogFOIbY4Bmtf+UTxYPQiSBoELSiD61oJZgE9YuNLhN 8Bo/gpn/pn65lrTFy9YOLiRxrfKLu01UtAdUkjeoPaauKZXB2N8WbUeSBdJfPDDN k2yj3v1QJKuvQLuJYnMeyqDTG5UTi4iEyoRmzCK+fRQdfTiPtzvDlGJJwR9cHWnK 9ZR+2aqO6rlpFHg+lzIFHnr+HpqYYNql4Es9ZmmsMs9KwNNTYWA/mosRHrnGmk+X AJ9sF3wjE9XT16hy6xwD4vpeSQVkds1YjmJGD+Ir/f7cknSMWRyjt33nqkrRFyvG Dwt242VJ2ifsYHosycfUQq0jo3F3IEo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:36:30 2025 by rpki-client