$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b20c36f-dab8-3f32-99d5-16def877f43f.roa File: 2b20c36f-dab8-3f32-99d5-16def877f43f.roa (raw, json) Hash identifier: 3NL7flw1Ine9C0WXgx9UboCC8EAoUiK5iVSjc0mH6pw= Subject key identifier: 8A:79:86:6A:62:3F:E1:17:52:CF:D3:95:F7:D0:11:FC:52:61:CF:80 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526A1C2DB7097E7E8D21C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b20c36f-dab8-3f32-99d5-16def877f43f.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396766 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6a:1c:2d:b7:09:7e:7e:8d:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=41fe09f3-f1f2-48b3-8e14-b9ac17156caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:29:5c:62:65:4e:fc:e9:1f:15:87:2d:17:03: a8:57:a3:1e:53:b2:fd:28:c6:56:d3:32:24:0e:11: f7:3d:52:b8:36:9a:57:6c:af:3c:05:d4:99:12:51: 9e:48:dd:33:7d:57:47:61:0c:d3:10:25:cc:37:2f: 8a:44:1a:a0:eb:32:3c:71:01:d7:a1:d8:79:f9:a9: d3:86:45:a8:48:ff:34:5a:e5:83:c6:c2:f7:88:3a: ff:11:44:ff:c1:9b:f4:b4:71:68:ad:e1:45:ba:dc: 4d:ad:a6:c7:48:34:a2:90:28:54:6e:a5:b2:ef:2b: 64:cf:57:6b:a0:b7:d4:d1:93:7a:5f:93:77:a0:d7: 1b:12:2d:9e:5e:f1:65:f6:48:34:ee:a8:78:7d:8c: aa:9a:ae:61:3f:6d:bc:8c:b8:2e:4c:32:ba:99:a4: cd:06:6a:32:47:3f:f9:84:a5:05:e6:b5:b6:f2:5b: 84:9c:10:85:4e:7e:b7:79:aa:04:a3:8d:4d:23:30: 03:4d:dc:df:33:57:0e:52:ec:77:4f:e4:01:54:55: 64:91:18:05:6d:d8:37:f1:0b:3b:9c:64:a0:52:1a: 1b:fc:44:09:bd:8e:88:d9:cc:26:38:d8:20:6e:ab: 51:6a:e7:13:62:2d:4f:1f:90:5c:c2:94:94:ff:46: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:79:86:6A:62:3F:E1:17:52:CF:D3:95:F7:D0:11:FC:52:61:CF:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2b20c36f-dab8-3f32-99d5-16def877f43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:43:00:10:38:71:a5:f8:ff:7c:49:e1:e6:4d:2f:68:71:c9: 51:47:e1:c1:3e:b6:44:77:9e:1f:91:bb:06:13:4b:e6:6a:df: 69:f8:2e:8d:eb:96:7c:9c:09:51:63:76:3e:58:6f:ac:03:cb: 80:93:8c:ca:4c:3a:c0:93:5c:e8:7b:c9:43:fe:ac:09:97:d3: 65:45:2f:00:04:64:48:d4:30:90:b1:36:af:1c:a2:4a:98:c0: 80:5a:11:ea:e1:47:cf:36:31:9b:a5:0a:36:97:d6:ca:8c:fc: 29:5d:8c:1c:cf:8e:14:c8:48:2e:91:1f:8e:db:b3:e1:f7:fb: 2c:85:85:18:2f:04:38:6b:fe:96:c6:be:f2:63:07:e0:13:12: f2:9d:3b:10:03:df:6d:c6:5e:34:0a:3d:76:71:6f:c1:07:f8: 78:3a:9e:67:38:f0:31:9a:d9:79:94:0a:1b:a8:6a:92:eb:50: d7:c9:3d:c3:c5:82:78:c5:8f:87:6f:18:a3:4c:80:e9:2d:e4: fe:3d:ce:7d:1e:92:03:9c:c6:49:43:d6:97:4f:66:30:45:66: 25:b2:00:f8:5c:ff:ef:37:ae:41:94:43:6a:89:8f:4c:50:04: 2f:db:6b:91:92:fa:44:64:a2:0c:ff:7d:eb:dd:4c:b3:57:59: c0:cf:7b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmocLbcJfn6NIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NDFmZTA5ZjMtZjFmMi00OGIzLThlMTQtYjlhYzE3MTU2Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoClcYmVO/OkfFYctFwOoV6MeU7L9KMZW0zIk DhH3PVK4NppXbK88BdSZElGeSN0zfVdHYQzTECXMNy+KRBqg6zI8cQHXodh5+anT hkWoSP80WuWDxsL3iDr/EUT/wZv0tHForeFFutxNrabHSDSikChUbqWy7ytkz1dr oLfU0ZN6X5N3oNcbEi2eXvFl9kg07qh4fYyqmq5hP228jLguTDK6maTNBmoyRz/5 hKUF5rW28luEnBCFTn63eaoEo41NIzADTdzfM1cOUux3T+QBVFVkkRgFbdg38Qs7 nGSgUhob/EQJvY6I2cwmONggbqtRaucTYi1PH5BcwpSU/0YR7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIp5hmpiP+EXUs/TlffQEfxSYc+AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmIyMGMzNmYtZGFiOC0z ZjMyLTk5ZDUtMTZkZWY4NzdmNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlDABA4caX4/3xJ4eZNL2hxyVFH4cE+tkR3nh+RuwYTS+Zq32n4Lo3r lnycCVFjdj5Yb6wDy4CTjMpMOsCTXOh7yUP+rAmX02VFLwAEZEjUMJCxNq8cokqY wIBaEerhR882MZulCjaX1sqM/CldjBzPjhTISC6RH47bs+H3+yyFhRgvBDhr/pbG vvJjB+ATEvKdOxAD323GXjQKPXZxb8EH+Hg6nmc48DGa2XmUChuoapLrUNfJPcPF gnjFj4dvGKNMgOkt5P49zn0ekgOcxklD1pdPZjBFZiWyAPhc/+83rkGUQ2qJj0xQ BC/ba5GS+kRkogz/fevdTLNXWcDPe3M= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:28 2025 by rpki-client