$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/498f24b4-892d-3f9f-8d29-8547d05c883e.roa File: 498f24b4-892d-3f9f-8d29-8547d05c883e.roa (raw, json) Hash identifier: ja5l0fWXzlatDs2HKFtGH6OKmX7LeH1vUUbcti2bqJ0= Subject key identifier: D2:88:AC:66:BE:5C:7F:C2:81:30:20:4E:DC:84:7F:82:4D:02:A2:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081DCD6F7926BF541897580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/498f24b4-892d-3f9f-8d29-8547d05c883e.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 397210 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:dc:d6:f7:92:6b:f5:41:89:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=997ecd1c-f516-44a6-a6a2-043225f47129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:1d:0f:c1:a3:33:af:6d:66:09:63:a7:8f: 99:f3:fd:d4:d3:08:f0:59:a9:eb:01:52:82:a4:ce: ac:0e:cb:3c:5b:42:ac:63:65:76:72:ec:15:2e:9a: 96:25:19:25:7c:99:62:62:e4:da:10:07:2c:58:32: 89:48:d5:0b:f3:4b:2d:90:d0:65:99:05:56:8a:8d: 64:20:64:92:7b:ac:24:e7:44:c8:8a:c7:61:97:93: 65:5f:b5:95:69:89:77:de:7c:2f:4a:22:35:86:cc: b9:3a:68:b6:88:a1:ad:1a:e5:f9:9b:1d:28:86:76: 5c:33:b2:65:11:97:e8:53:b9:7c:1d:92:ec:75:46: 4e:e6:37:dc:d5:8a:a8:5f:9a:c9:e0:8a:13:99:95: ac:31:0a:25:65:00:9a:fd:f2:9a:43:79:f1:c3:b2: 42:d9:d9:85:7e:9a:b1:bc:3c:56:12:a4:9c:ef:28: d5:33:f0:41:86:57:64:b7:ee:89:e9:c2:f5:bb:88: e7:43:af:2f:af:99:f0:85:00:9d:ac:60:1a:5f:97: 9d:ee:a8:80:ed:44:eb:1f:12:44:28:5c:74:a8:e3: d3:df:f8:2f:07:37:1d:0c:04:d4:9f:c6:1f:90:30: 65:39:26:14:10:a0:0d:50:76:ed:93:2e:35:fd:76: a8:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:88:AC:66:BE:5C:7F:C2:81:30:20:4E:DC:84:7F:82:4D:02:A2:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/498f24b4-892d-3f9f-8d29-8547d05c883e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:21:a8:5d:09:c8:11:38:c9:ca:aa:f2:7c:0c:39:61:b5:0d: 23:64:eb:58:31:00:70:e6:bb:71:b9:35:22:6d:38:a4:e4:a9: 4c:2d:1a:a3:bc:b6:28:c6:df:15:8e:09:7a:ef:bc:2d:f1:7d: 99:34:68:e0:f3:a8:f6:af:89:71:e8:70:c9:95:1e:d8:cd:47: 7a:cd:e3:e2:74:dd:55:b5:cd:83:96:ab:4e:2f:12:51:96:18: a4:40:c4:5b:af:a7:b0:c6:67:5c:6f:77:5d:81:0a:fe:48:07: 65:dd:85:25:c2:42:50:75:27:cd:4b:c4:da:29:65:64:d3:57: da:ee:a1:93:7f:01:53:95:06:4b:4c:fb:22:45:70:24:ac:99: ce:2d:1f:9b:93:95:22:48:04:99:80:c1:eb:93:ee:5c:b9:c9: 6f:38:b2:cd:c0:07:ac:2a:0d:b4:98:31:be:ee:fe:b5:27:66: e8:2a:cb:08:d2:c4:cd:ea:01:c5:e8:ca:8b:15:03:62:ea:6f: 83:31:78:97:01:ec:82:c1:5a:08:cf:e5:58:20:15:93:8e:2d: d5:6f:2a:be:e8:c6:15:ab:51:cd:c1:00:cc:df:f9:6a:85:d1: ac:12:2b:36:57:1f:af:26:60:8a:21:a3:80:4e:0d:52:73:48: 59:ad:40:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgdzW95Jr9UGJdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OTk3ZWNkMWMtZjUxNi00NGE2LWE2YTItMDQzMjI1ZjQ3MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRkdD8GjM69tZgljp4+Z8/3U0wjwWanrAVKC pM6sDss8W0KsY2V2cuwVLpqWJRklfJliYuTaEAcsWDKJSNUL80stkNBlmQVWio1k IGSSe6wk50TIisdhl5NlX7WVaYl33nwvSiI1hsy5Omi2iKGtGuX5mx0ohnZcM7Jl EZfoU7l8HZLsdUZO5jfc1YqoX5rJ4IoTmZWsMQolZQCa/fKaQ3nxw7JC2dmFfpqx vDxWEqSc7yjVM/BBhldkt+6J6cL1u4jnQ68vr5nwhQCdrGAaX5ed7qiA7UTrHxJE KFx0qOPT3/gvBzcdDATUn8YfkDBlOSYUEKANUHbtky41/XaoVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKIrGa+XH/CgTAgTtyEf4JNAqJXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDk4ZjI0YjQtODkyZC0z ZjlmLThkMjktODU0N2QwNWM4ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQhqF0JyBE4ycqq8nwMOWG1DSNk61gxAHDmu3G5NSJtOKTkqUwtGqO8 tijG3xWOCXrvvC3xfZk0aODzqPaviXHocMmVHtjNR3rN4+J03VW1zYOWq04vElGW GKRAxFuvp7DGZ1xvd12BCv5IB2XdhSXCQlB1J81LxNopZWTTV9ruoZN/AVOVBktM +yJFcCSsmc4tH5uTlSJIBJmAweuT7ly5yW84ss3AB6wqDbSYMb7u/rUnZugqywjS xM3qAcXoyosVA2Lqb4MxeJcB7ILBWgjP5VggFZOOLdVvKr7oxhWrUc3BAMzf+WqF 0awSKzZXH68mYIoho4BODVJzSFmtQI0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:57:16 2025 by rpki-client