$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28687e09-6d65-3672-8889-6a6a08cfd7c5.roa File: 28687e09-6d65-3672-8889-6a6a08cfd7c5.roa (raw, json) Hash identifier: 5cifLpD5Q9a5ugxzC/dLXRnGQT5WJ1a4W+3g4tU1/zU= Subject key identifier: 36:3D:2D:D8:DF:11:99:80:BF:8B:E4:E3:A3:F6:E3:2B:C8:0C:01:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526A2A4E0FD1F89FF2D600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28687e09-6d65-3672-8889-6a6a08cfd7c5.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396669 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6a:2a:4e:0f:d1:f8:9f:f2:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3929b830-c5dd-4045-9bb1-85cb93445d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:e1:76:fe:d2:31:fb:83:f4:de:8e:96:ca: 1c:a9:8a:30:4d:8e:b6:08:3b:f5:ab:46:28:3e:9e: 72:a9:c8:34:ae:49:31:a2:97:56:48:82:a0:96:2e: 21:86:f7:88:b0:39:54:28:68:eb:be:d7:34:a7:ea: 63:e9:21:7b:d3:40:27:60:77:4f:2c:83:37:fe:85: 1f:f4:dd:62:3e:35:8c:21:c5:30:5f:ff:f9:85:77: 7d:8e:3e:25:2c:97:54:25:f0:14:d9:e9:22:75:27: 53:46:7a:b9:65:7b:66:a3:d7:53:77:8a:a6:66:6a: 79:ed:ed:81:68:7a:f0:26:71:d1:18:e4:05:5d:63: 32:37:2f:d2:3b:cc:95:ad:c3:94:59:cf:c5:62:b9: 18:87:cb:89:e1:94:99:61:2e:fc:0b:03:0b:e6:6b: 9a:28:bb:11:89:4a:89:df:3d:44:74:94:a9:61:7c: 3a:cf:64:c9:71:49:f9:39:76:6c:9c:d1:d6:59:60: 2d:6f:a4:88:62:39:0d:53:55:9f:01:52:71:99:e9: d9:27:3e:52:26:24:96:db:69:5c:93:f9:e8:e6:8a: e8:f6:6e:e0:a0:bf:d1:3c:57:c6:6b:14:dc:e7:22: a7:17:34:81:57:d5:9b:d9:92:83:31:35:1a:b5:46: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3D:2D:D8:DF:11:99:80:BF:8B:E4:E3:A3:F6:E3:2B:C8:0C:01:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28687e09-6d65-3672-8889-6a6a08cfd7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:dc:ed:f4:10:b0:9c:25:8d:22:21:30:35:9f:1c:b4:af:5c: a8:56:f9:a7:71:25:40:9d:5f:b4:bb:73:7f:f5:2b:d8:ce:cb: 44:7f:56:01:22:aa:6f:85:3e:d9:ee:f3:50:4f:d4:55:07:b7: bc:36:9a:17:c6:06:03:01:7f:4b:93:94:17:fc:3c:5c:e9:fa: cc:52:77:02:f8:05:43:7a:96:49:c5:87:f2:84:fd:88:e7:42: dc:a5:da:24:17:7f:16:84:83:d6:09:f8:57:54:f2:b0:79:f3: c7:ee:b2:ec:40:cc:3b:d5:4d:1a:c7:39:f9:d5:cc:46:df:64: b4:46:76:bb:90:ed:bc:77:3c:c4:aa:c5:fd:f3:cd:49:f8:0d: fb:71:15:e8:c7:db:2e:43:25:56:ef:c4:e7:e0:bb:1a:cb:69: 2a:4a:bc:ab:7e:42:c8:03:bb:1b:94:83:fa:c8:c0:68:d9:5c: 99:1e:ab:fe:5b:cc:c1:bf:89:95:56:16:e1:b7:91:94:6a:39: 46:1b:e7:28:89:ed:57:31:91:2f:c0:7c:68:c0:9e:f8:f9:64: a0:d7:46:c3:af:4b:54:55:d2:47:f0:6e:3d:a4:a8:22:56:a6: 87:e3:7c:46:60:f6:39:4e:8a:9e:d1:20:8e:67:50:cb:c0:b5: 47:0c:30:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmoqTg/R+J/y1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MzkyOWI4MzAtYzVkZC00MDQ1LTliYjEtODVjYjkzNDQ1ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9nhdv7SMfuD9N6OlsocqYowTY62CDv1q0Yo Pp5yqcg0rkkxopdWSIKgli4hhveIsDlUKGjrvtc0p+pj6SF700AnYHdPLIM3/oUf 9N1iPjWMIcUwX//5hXd9jj4lLJdUJfAU2ekidSdTRnq5ZXtmo9dTd4qmZmp57e2B aHrwJnHRGOQFXWMyNy/SO8yVrcOUWc/FYrkYh8uJ4ZSZYS78CwML5muaKLsRiUqJ 3z1EdJSpYXw6z2TJcUn5OXZsnNHWWWAtb6SIYjkNU1WfAVJxmenZJz5SJiSW22lc k/no5oro9m7goL/RPFfGaxTc5yKnFzSBV9Wb2ZKDMTUatUYYewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY9LdjfEZmAv4vk46P24yvIDAHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjg2ODdlMDktNmQ2NS0z NjcyLTg4ODktNmE2YTA4Y2ZkN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALbc7fQQsJwljSIhMDWfHLSvXKhW+adxJUCdX7S7c3/1K9jOy0R/VgEi qm+FPtnu81BP1FUHt7w2mhfGBgMBf0uTlBf8PFzp+sxSdwL4BUN6lknFh/KE/Yjn Qtyl2iQXfxaEg9YJ+FdU8rB588fusuxAzDvVTRrHOfnVzEbfZLRGdruQ7bx3PMSq xf3zzUn4DftxFejH2y5DJVbvxOfguxrLaSpKvKt+QsgDuxuUg/rIwGjZXJkeq/5b zMG/iZVWFuG3kZRqOUYb5yiJ7VcxkS/AfGjAnvj5ZKDXRsOvS1RV0kfwbj2kqCJW pofjfEZg9jlOip7RII5nUMvAtUcMMPg= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:12 2025 by rpki-client