$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1555dd04-23a5-3b25-be27-95ffe363007e.roa File: 1555dd04-23a5-3b25-be27-95ffe363007e.roa (raw, json) Hash identifier: 6nwyu7gAXAM2vXr0Wh+OGG1k3MmCHdb4HrPQoA3u0nw= Subject key identifier: E0:E9:B2:BB:E9:7F:13:08:64:11:8C:53:4B:E1:30:31:6B:69:16:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52780909BCB3EC4C9C3D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1555dd04-23a5-3b25-be27-95ffe363007e.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396576 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:78:09:09:bc:b3:ec:4c:9c:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=e8f27572-f0ac-4bb5-a9da-55575e961293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:aa:20:15:d9:88:c2:2e:58:40:81:4f:9e:69: 02:a1:14:75:fd:66:f7:2b:cb:0d:a3:9e:e4:27:0a: 8a:2f:d4:f0:96:ec:90:02:ab:80:77:bc:a8:96:b7: e5:3a:03:e6:8b:57:7b:f4:cd:a9:45:c7:62:ba:50: 04:07:21:dd:fb:5e:a8:40:c4:d7:b5:f3:8e:9e:92: 04:68:84:b2:36:8c:bd:81:1e:18:c9:4f:ba:e9:fa: c0:e4:25:0c:99:37:3b:0d:42:f5:91:6a:a1:b9:dc: 12:10:2f:5b:31:91:b0:4b:8f:32:a0:8b:2a:05:ba: f0:c4:2a:76:3d:81:fb:33:bf:9f:25:97:90:cc:6d: 56:29:6a:63:fd:e4:90:e4:46:4d:38:2d:37:fa:d5: 44:38:7f:f8:b7:75:4c:6a:46:39:29:60:cc:4b:65: 43:01:32:ba:7a:51:4c:96:af:cf:74:09:7b:22:36: ee:a4:be:cc:da:a3:98:2a:d7:cd:1e:04:0f:b0:6b: a1:5c:dc:98:89:0a:7f:87:f9:35:d2:00:95:7a:f1: a2:c8:ea:74:a1:e7:95:2d:29:dc:cf:86:f4:3b:f2: 69:3d:4d:a7:43:ae:66:21:50:ce:a1:2b:b3:f6:0a: a0:06:6e:5a:f0:44:35:9b:59:c2:1f:40:e7:a9:f2: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:E9:B2:BB:E9:7F:13:08:64:11:8C:53:4B:E1:30:31:6B:69:16:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1555dd04-23a5-3b25-be27-95ffe363007e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5f:16:e7:7f:99:7a:24:dd:af:ac:36:f0:f3:42:7a:42:ee: 61:f3:9a:78:3e:d9:8d:20:91:a7:18:60:4a:57:bc:f6:35:26: 9a:7b:d9:e3:ee:79:c6:c6:5e:01:48:55:b5:7a:af:a1:c7:62: 88:49:18:7c:8b:1d:c1:97:4d:68:9f:1a:dc:33:85:61:fd:6e: 93:27:45:4f:eb:dc:c7:ec:0a:fb:c9:31:d7:0d:5f:b1:5f:68: 63:8a:22:16:2b:51:21:8f:85:b5:8d:68:d2:3b:6d:8d:f4:ad: 82:4e:e6:41:3e:b1:46:7b:54:53:a1:35:1d:9b:c6:8e:30:9f: d9:db:d1:ac:44:4f:96:69:96:8a:31:36:b8:06:5b:b4:15:bd: 26:8d:28:b0:cf:ab:99:f3:0a:7b:b0:a7:eb:72:a4:b0:31:41: 7d:c0:cd:2b:b0:c2:85:ff:dd:44:8b:1d:a2:d0:6f:23:4d:0e: 06:70:31:5d:e0:f3:a7:dc:54:95:37:54:cf:cc:be:62:b5:75: 45:f8:e8:16:2c:62:69:17:f5:46:18:30:f3:6f:cd:87:e1:db: 29:d6:96:5d:a7:ba:1a:59:4e:ae:1c:7e:4f:17:d2:66:18:9f: 79:54:77:aa:8b:47:99:62:93:05:6d:c5:c3:64:c6:1b:de:5f: 25:98:36:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UngJCbyz7EycPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZThmMjc1NzItZjBhYy00YmI1LWE5ZGEtNTU1NzVlOTYxMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqogFdmIwi5YQIFPnmkCoRR1/Wb3K8sNo57k JwqKL9TwluyQAquAd7yolrflOgPmi1d79M2pRcdiulAEByHd+16oQMTXtfOOnpIE aISyNoy9gR4YyU+66frA5CUMmTc7DUL1kWqhudwSEC9bMZGwS48yoIsqBbrwxCp2 PYH7M7+fJZeQzG1WKWpj/eSQ5EZNOC03+tVEOH/4t3VMakY5KWDMS2VDATK6elFM lq/PdAl7IjbupL7M2qOYKtfNHgQPsGuhXNyYiQp/h/k10gCVevGiyOp0oeeVLSnc z4b0O/JpPU2nQ65mIVDOoSuz9gqgBm5a8EQ1m1nCH0DnqfLawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODpsrvpfxMIZBGMU0vhMDFraRYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTU1NWRkMDQtMjNhNS0z YjI1LWJlMjctOTVmZmUzNjMwMDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlfFud/mXok3a+sNvDzQnpC7mHzmng+2Y0gkacYYEpXvPY1Jpp72ePu ecbGXgFIVbV6r6HHYohJGHyLHcGXTWifGtwzhWH9bpMnRU/r3MfsCvvJMdcNX7Ff aGOKIhYrUSGPhbWNaNI7bY30rYJO5kE+sUZ7VFOhNR2bxo4wn9nb0axET5Zploox NrgGW7QVvSaNKLDPq5nzCnuwp+typLAxQX3AzSuwwoX/3USLHaLQbyNNDgZwMV3g 86fcVJU3VM/MvmK1dUX46BYsYmkX9UYYMPNvzYfh2ynWll2nuhpZTq4cfk8X0mYY n3lUd6qLR5likwVtxcNkxhveXyWYNuM= -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:00 2025 by rpki-client