$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3eeada00-de69-31c7-970a-f942f4a599aa.roa File: 3eeada00-de69-31c7-970a-f942f4a599aa.roa (raw, json) Hash identifier: 8M+C0QPaoxooRmHCD8NIOOQiw0QI8L1UXkRkPQ/2WjU= Subject key identifier: 31:55:EB:7B:33:5E:C8:77:C8:A2:88:E1:1C:35:EB:9C:79:24:3A:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5268E3EB3C936FA0B2A220 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3eeada00-de69-31c7-970a-f942f4a599aa.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396613 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:68:e3:eb:3c:93:6f:a0:b2:a2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=ce8bef52-964f-4a75-8913-c2790b4ce8be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:3f:ef:04:36:fa:36:32:9c:f1:5e:17:d6: c1:cf:62:d5:52:08:0a:2a:9f:aa:97:68:16:3d:92: 78:48:80:d3:2b:01:32:a4:78:e5:49:ee:5e:fc:cf: de:7c:6d:2f:e2:c6:8b:76:f7:85:04:22:8f:46:e4: 56:d2:7a:91:65:c5:88:80:c5:06:d7:88:03:e0:2b: 99:b6:f9:f1:26:d6:eb:33:8a:0a:ac:0a:fc:a2:c1: bb:2d:b2:a4:58:bd:2c:a1:36:60:24:de:94:a4:f7: 15:1c:11:74:03:80:04:72:51:a6:f6:a7:24:04:a4: 14:ad:ba:b9:eb:bd:e6:67:f1:03:74:ec:89:25:03: 2b:e9:5a:09:7c:05:3d:df:52:96:21:d7:82:91:e2: 5f:2e:19:34:64:99:47:87:07:40:1d:bc:5d:5e:06: 2e:8f:c5:c9:44:fa:b3:93:ec:a8:41:2e:b1:c4:7c: 36:ae:63:33:1b:68:8b:10:32:4b:69:e9:b9:6c:f2: 32:16:9b:7a:eb:2a:75:66:ce:e1:2a:ec:90:a9:14: 4d:7b:a4:90:37:37:04:90:d1:61:45:29:8d:f2:d8: dd:8b:5c:1b:60:06:5a:cf:24:0d:f4:09:d7:c6:29: 58:6f:da:e1:33:f2:0b:a5:a8:91:08:64:c2:76:91: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:55:EB:7B:33:5E:C8:77:C8:A2:88:E1:1C:35:EB:9C:79:24:3A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3eeada00-de69-31c7-970a-f942f4a599aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:9a:bb:81:36:6e:59:9c:39:5b:77:24:d7:ff:da:e2:1b:8a: 8e:1c:38:03:42:b6:57:b5:43:0c:77:9a:33:c8:15:cb:cc:eb: cc:36:c8:60:9c:1e:f3:1b:a3:13:2c:3b:b0:bc:74:d3:19:b8: 71:d1:19:98:f2:18:5c:b6:66:a8:0d:2a:95:f7:81:dd:b2:37: ce:de:57:cb:0d:2b:9d:ce:82:ba:30:51:a9:04:cc:76:6a:1a: 6f:14:e5:0e:f2:c8:b7:f0:14:a9:c6:a6:16:ce:4c:15:01:d7: 39:c8:30:12:87:0d:55:e3:e2:0c:06:53:0d:f6:04:18:16:dd: 7e:81:d9:c9:44:45:c6:ca:cd:c9:df:8a:dd:de:10:0e:90:8a: cb:fc:27:90:a4:88:7c:7e:30:23:73:1b:eb:71:93:5e:d5:5e: 1a:c8:92:9d:fc:77:bc:0f:3a:6a:1b:a2:6d:f4:1c:5b:72:9f: aa:c1:ec:b5:7b:a0:72:57:da:ce:2f:3c:84:2a:50:51:14:34: 78:38:10:d4:ba:6c:05:f3:53:e1:71:88:eb:06:47:db:08:a5: 13:cc:0f:73:65:40:61:dc:7c:12:ef:4a:c1:d4:97:7f:a9:cc: 33:0f:56:5a:fb:9d:76:a2:4b:3d:c1:47:aa:59:7c:68:93:c2: 3b:b2:da:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Umjj6zyTb6CyoiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Y2U4YmVmNTItOTY0Zi00YTc1LTg5MTMtYzI3OTBiNGNlOGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHY/7wQ2+jYynPFeF9bBz2LVUggKKp+ql2gW PZJ4SIDTKwEypHjlSe5e/M/efG0v4saLdveFBCKPRuRW0nqRZcWIgMUG14gD4CuZ tvnxJtbrM4oKrAr8osG7LbKkWL0soTZgJN6UpPcVHBF0A4AEclGm9qckBKQUrbq5 673mZ/EDdOyJJQMr6VoJfAU931KWIdeCkeJfLhk0ZJlHhwdAHbxdXgYuj8XJRPqz k+yoQS6xxHw2rmMzG2iLEDJLaem5bPIyFpt66yp1Zs7hKuyQqRRNe6SQNzcEkNFh RSmN8tjdi1wbYAZazyQN9AnXxilYb9rhM/ILpaiRCGTCdpE8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFV63szXsh3yKKI4Rw165x5JDpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2VlYWRhMDAtZGU2OS0z MWM3LTk3MGEtZjk0MmY0YTU5OWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeau4E2blmcOVt3JNf/2uIbio4cOANCtle1Qwx3mjPIFcvM68w2yGCc HvMboxMsO7C8dNMZuHHRGZjyGFy2ZqgNKpX3gd2yN87eV8sNK53OgrowUakEzHZq Gm8U5Q7yyLfwFKnGphbOTBUB1znIMBKHDVXj4gwGUw32BBgW3X6B2clERcbKzcnf it3eEA6Qisv8J5CkiHx+MCNzG+txk17VXhrIkp38d7wPOmobom30HFtyn6rB7LV7 oHJX2s4vPIQqUFEUNHg4ENS6bAXzU+FxiOsGR9sIpRPMD3NlQGHcfBLvSsHUl3+p zDMPVlr7nXaiSz3BR6pZfGiTwjuy2u0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:36:28 2025 by rpki-client