$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5449ea-dd3d-38aa-9842-629c73b641eb.roa File: 3a5449ea-dd3d-38aa-9842-629c73b641eb.roa (raw, json) Hash identifier: aSXnKtwbsLK7qoJ4y+H19HvTvEfRbuX8UxneSiXeqmE= Subject key identifier: 85:F4:03:AD:D4:AF:4C:C4:B2:0C:27:7F:8E:05:90:CC:F5:D4:08:5E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5275F39D9C2F1D51825340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5449ea-dd3d-38aa-9842-629c73b641eb.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396664 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:75:f3:9d:9c:2f:1d:51:82:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=f544f819-f93d-497e-bceb-7d5eefab5e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:63:79:1b:11:c7:ae:25:52:cb:cd:0b:59:0f: 16:36:cd:e8:12:87:d1:9f:ce:fb:39:d7:dc:cf:3c: 68:3e:47:ff:e9:ef:53:88:42:77:9b:24:71:d7:ae: d0:16:09:05:07:3d:f5:49:02:cb:41:c0:19:13:4d: 72:77:69:6e:55:9b:66:ed:41:94:7b:af:a0:f8:9e: 02:07:ae:6f:b7:f6:90:88:db:f6:09:9d:a4:f2:05: 0e:58:5e:64:be:bd:63:ea:a4:8f:76:b2:59:2a:e2: 2f:b8:10:68:a0:f6:9b:80:85:a4:f3:5f:45:e9:5b: f2:7d:e3:a2:7b:c3:fb:5d:e7:a6:98:a6:c7:dd:7a: 98:fd:95:cf:26:d0:e4:fc:90:31:1d:46:64:d0:d9: e8:62:43:7e:50:38:57:1b:0a:fd:f5:e8:00:40:d7: 17:f3:c4:63:89:00:ee:4d:1c:69:b0:46:d5:69:29: 46:46:21:a1:d7:21:e0:25:4b:ad:44:44:13:90:bd: 8a:cf:69:25:b0:63:7f:fe:50:72:03:96:88:c0:cd: 94:54:00:67:86:3f:8e:f6:0b:68:ff:23:28:e4:7a: b4:ed:91:38:82:76:29:71:6a:8e:12:29:cc:63:ad: 89:e7:f6:bf:7e:46:cf:54:27:bb:9d:d4:c8:ee:93: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F4:03:AD:D4:AF:4C:C4:B2:0C:27:7F:8E:05:90:CC:F5:D4:08:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a5449ea-dd3d-38aa-9842-629c73b641eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b4:97:c3:6b:fb:be:8d:d3:eb:80:4a:93:42:c6:75:27:15: 72:3f:da:d9:03:4c:f7:13:eb:fa:41:4d:0f:8b:7f:a6:44:1c: 47:4e:ce:a2:9d:8b:1c:26:6a:7d:25:f9:e2:da:23:3a:8a:52: cc:ca:1f:6c:61:19:bb:3d:0b:a1:ad:91:81:20:a4:b8:7e:1c: 82:89:ab:22:06:2e:7a:0a:43:55:4c:74:19:eb:86:1d:d5:b0: 79:b4:c5:69:db:67:83:7e:76:53:ab:8c:91:a8:09:cf:7e:8a: 79:05:20:01:bc:c5:b7:50:07:13:9c:cc:d7:e5:b5:49:01:f1: c4:64:d5:74:77:ac:7f:4a:c0:8d:40:74:1d:2a:49:33:06:d1: 83:d4:48:fe:2b:e3:35:de:2d:8f:97:77:b9:f2:b1:95:c7:24: cf:a9:07:68:e5:4a:0e:84:45:37:65:aa:70:d4:30:8e:8a:ef: 4b:07:ca:0a:09:70:1f:de:6c:9d:e6:04:b1:34:36:35:a1:e1: 47:0a:fe:b4:80:79:14:a0:6a:c2:92:37:53:da:a7:49:20:f7: 82:6f:cf:dc:83:00:7e:ea:9f:55:cc:4c:5e:1d:dc:d2:e6:91: 56:73:57:4c:c4:08:53:75:ff:93:38:e7:58:89:54:ac:d1:01: ee:a2:6d:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnXznZwvHVGCU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZjU0NGY4MTktZjkzZC00OTdlLWJjZWItN2Q1ZWVmYWI1ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWN5GxHHriVSy80LWQ8WNs3oEofRn877Odfc zzxoPkf/6e9TiEJ3myRx167QFgkFBz31SQLLQcAZE01yd2luVZtm7UGUe6+g+J4C B65vt/aQiNv2CZ2k8gUOWF5kvr1j6qSPdrJZKuIvuBBooPabgIWk819F6VvyfeOi e8P7XeemmKbH3XqY/ZXPJtDk/JAxHUZk0NnoYkN+UDhXGwr99egAQNcX88RjiQDu TRxpsEbVaSlGRiGh1yHgJUutREQTkL2Kz2klsGN//lByA5aIwM2UVABnhj+O9gto /yMo5Hq07ZE4gnYpcWqOEinMY62J5/a/fkbPVCe7ndTI7pNOdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIX0A63Ur0zEsgwnf44FkMz11AheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2E1NDQ5ZWEtZGQzZC0z OGFhLTk4NDItNjI5YzczYjY0MWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALG0l8Nr+76N0+uASpNCxnUnFXI/2tkDTPcT6/pBTQ+Lf6ZEHEdOzqKd ixwman0l+eLaIzqKUszKH2xhGbs9C6GtkYEgpLh+HIKJqyIGLnoKQ1VMdBnrhh3V sHm0xWnbZ4N+dlOrjJGoCc9+inkFIAG8xbdQBxOczNfltUkB8cRk1XR3rH9KwI1A dB0qSTMG0YPUSP4r4zXeLY+Xd7nysZXHJM+pB2jlSg6ERTdlqnDUMI6K70sHygoJ cB/ebJ3mBLE0NjWh4UcK/rSAeRSgasKSN1Pap0kg94Jvz9yDAH7qn1XMTF4d3NLm kVZzV0zECFN1/5M451iJVKzRAe6ibbE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:08 2025 by rpki-client