$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37a6ee68-d63d-3ff7-8f58-93e5253d2976.roa File: 37a6ee68-d63d-3ff7-8f58-93e5253d2976.roa (raw, json) Hash identifier: 4QKZQEoDwHDJq2e6QzHu6lI1drQQqz4WNPQGHlZzSaI= Subject key identifier: 92:84:39:32:E0:3C:D6:2A:4A:5B:16:11:82:B3:20:8D:1F:DD:46:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5268B18A099BC4C14E0480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37a6ee68-d63d-3ff7-8f58-93e5253d2976.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397210 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:68:b1:8a:09:9b:c4:c1:4e:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=531c4323-8edc-46c6-ba94-2eef7adac360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d8:7c:cd:d7:7c:cd:ac:8a:38:76:0b:70:af: 64:3f:cc:e7:f8:a7:61:1d:67:5a:e2:a9:98:a2:6b: 3f:42:f8:df:80:b8:4e:ff:e2:c2:95:6d:c9:49:fd: 8e:a7:4a:4f:04:d3:e8:20:ba:1d:bb:d3:d4:cf:18: f5:5b:7d:9a:b1:a3:50:2a:84:1a:88:85:91:85:83: 91:a0:0d:a6:43:c8:8a:90:55:cc:be:0c:85:30:6d: 25:04:ba:da:35:56:52:fb:d5:ed:25:f9:aa:1e:24: dd:ed:43:6d:18:7a:74:6d:00:4d:cd:6f:ce:29:12: f7:9d:c7:5b:6b:0c:1a:ba:f9:3e:f3:46:fd:95:63: 53:2a:0e:ef:a9:67:a3:8e:d5:27:78:1e:51:97:55: 2e:d2:2d:e0:d1:31:58:f4:a4:66:d3:8b:c5:21:e2: c4:9d:3d:f4:97:01:4e:27:63:15:9a:36:0f:56:08: ed:2d:62:e8:bb:01:44:36:0e:c6:b9:75:b6:34:de: d1:89:b7:bc:b9:13:94:11:cc:93:9f:45:a7:a8:3d: 3f:57:95:2c:dd:94:b9:4e:ed:58:d8:32:e8:5f:27: 7e:fd:fc:45:5a:0b:83:56:1e:d1:b1:d0:be:bf:19: ab:63:f4:9b:cb:32:75:8a:e6:81:67:22:92:70:07: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:84:39:32:E0:3C:D6:2A:4A:5B:16:11:82:B3:20:8D:1F:DD:46:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37a6ee68-d63d-3ff7-8f58-93e5253d2976.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3d:7e:3d:54:d0:34:4b:6f:96:14:d7:27:6b:13:00:7b:a2: 80:04:29:67:5a:3c:35:88:22:1d:33:65:b0:61:bd:c3:00:e7: 8b:8a:33:dc:f8:70:4e:61:d9:1f:fb:c5:04:35:d9:2c:a7:65: 44:58:7f:3a:65:5c:0c:a5:4b:d0:ee:73:60:43:f9:7e:e4:85: 9e:ee:d0:de:ad:99:f0:a6:c7:d9:a4:77:44:ed:88:8b:70:1e: b7:93:a4:0e:c5:8d:99:67:f1:dc:10:d4:10:38:e3:28:a4:26: 11:a3:8d:d0:fc:08:ad:ce:38:af:a8:5a:ad:63:ef:69:d0:27: 69:5f:cf:8e:58:ee:6a:23:9b:0d:58:5e:77:3c:c8:6b:a5:42: 55:e1:b0:7e:35:4f:6d:fa:9f:c3:2f:2f:91:ec:e1:bb:23:64: 2c:fa:1e:1f:bc:e4:8b:4e:9c:8f:a0:b9:18:e0:88:06:e3:6b: 86:7e:eb:9c:bb:68:c4:53:8d:06:a8:25:99:27:08:5f:7d:22: 93:b2:77:72:d3:e3:d5:7e:8e:09:b9:4d:01:03:14:52:96:36: 14:14:b1:b7:91:c1:47:33:87:9e:71:53:aa:88:9e:32:a7:59: d1:ec:67:d4:1c:d2:67:99:ef:49:1e:7c:b8:83:22:d7:ed:f7: af:89:20:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmixigmbxMFOBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTMxYzQzMjMtOGVkYy00NmM2LWJhOTQtMmVlZjdhZGFjMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgth8zdd8zayKOHYLcK9kP8zn+KdhHWda4qmY oms/QvjfgLhO/+LClW3JSf2Op0pPBNPoILodu9PUzxj1W32asaNQKoQaiIWRhYOR oA2mQ8iKkFXMvgyFMG0lBLraNVZS+9XtJfmqHiTd7UNtGHp0bQBNzW/OKRL3ncdb awwauvk+80b9lWNTKg7vqWejjtUneB5Rl1Uu0i3g0TFY9KRm04vFIeLEnT30lwFO J2MVmjYPVgjtLWLouwFENg7GuXW2NN7Ribe8uROUEcyTn0WnqD0/V5Us3ZS5Tu1Y 2DLoXyd+/fxFWguDVh7RsdC+vxmrY/SbyzJ1iuaBZyKScAdcZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKEOTLgPNYqSlsWEYKzII0f3Ub0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzdhNmVlNjgtZDYzZC0z ZmY3LThmNTgtOTNlNTI1M2QyOTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc9fj1U0DRLb5YU1ydrEwB7ooAEKWdaPDWIIh0zZbBhvcMA54uKM9z4 cE5h2R/7xQQ12SynZURYfzplXAylS9Duc2BD+X7khZ7u0N6tmfCmx9mkd0TtiItw HreTpA7FjZln8dwQ1BA44yikJhGjjdD8CK3OOK+oWq1j72nQJ2lfz45Y7mojmw1Y Xnc8yGulQlXhsH41T236n8MvL5Hs4bsjZCz6Hh+85ItOnI+guRjgiAbja4Z+65y7 aMRTjQaoJZknCF99IpOyd3LT49V+jgm5TQEDFFKWNhQUsbeRwUczh55xU6qInjKn WdHsZ9Qc0meZ70kefLiDItft96+JIJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:58:12 2025 by rpki-client