$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ae60f34-35b5-341c-b710-df235b936b80.roa File: 4ae60f34-35b5-341c-b710-df235b936b80.roa (raw, json) Hash identifier: 1Z0AJKhBRDLPnbfp2flDrufYm8R+FzUqg4x1Zpz9pmc= Subject key identifier: CE:B9:18:7C:59:E1:E4:C7:12:8F:2A:87:7C:CE:8C:5F:F7:1A:29:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526C4B160C243A2816B1C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ae60f34-35b5-341c-b710-df235b936b80.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396712 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6c:4b:16:0c:24:3a:28:16:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=7db89c5e-0353-49d7-b837-caa6c83cb11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ba:6d:a8:84:20:2a:cc:c8:e9:ba:5b:ff:3c: fd:95:08:4b:93:9c:d6:ba:78:70:ce:6e:e8:0f:1a: d4:38:99:66:46:19:5d:ee:bc:26:f9:da:1f:08:1d: 9f:23:ef:b6:58:1e:5a:84:92:30:2a:f1:0e:65:2a: cb:f5:26:4b:5d:a8:a0:90:0e:39:74:14:ad:a6:9c: 88:cc:1c:24:5a:9c:af:8e:33:a5:29:f1:cc:b2:69: 44:72:ec:b4:74:77:93:f1:ca:10:af:1f:e2:76:91: 87:00:2f:bc:c1:58:0e:52:2d:f3:11:7d:b4:30:30: b9:57:03:a5:e7:92:81:70:c2:f0:0f:9d:96:dd:9a: 26:a5:5f:70:e4:74:3d:f9:dd:c6:88:29:dc:4b:4e: 30:11:f2:e5:2e:fd:fc:9a:7d:67:7b:31:b4:d4:ed: 1e:82:b1:8c:91:38:36:2b:cb:f8:56:17:d0:72:df: f6:6e:35:18:ce:ac:b2:f4:f1:f6:49:54:29:4d:ae: fe:69:22:95:47:3f:54:4a:db:6d:b0:ea:73:7d:b3: e0:4e:06:8e:35:df:6d:3c:a5:b1:cf:c9:c6:90:48: a9:28:0d:7d:d8:8d:07:f9:e2:52:c0:0c:6b:55:63: 13:19:25:94:50:a7:4a:d2:97:7d:ab:4f:43:aa:1e: 1a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:18:7C:59:E1:E4:C7:12:8F:2A:87:7C:CE:8C:5F:F7:1A:29:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4ae60f34-35b5-341c-b710-df235b936b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:7f:32:8d:77:18:ad:de:a9:ec:e7:28:72:b3:2d:89:c6:59: 7a:46:15:8b:92:0b:d4:b8:d1:4d:e0:b0:ac:89:9f:e0:5c:74: 34:47:36:fa:6b:b6:ba:17:9f:d9:0d:4e:70:5b:bd:33:cc:81: f6:99:94:2b:ea:0e:bc:e4:eb:47:9b:30:83:1a:30:fd:02:70: 79:f5:69:fe:78:28:d3:96:80:a2:36:c8:92:14:ad:b3:79:dc: e3:9c:be:f5:7f:fb:8c:84:df:82:0e:24:c2:fa:81:db:db:7c: 36:fe:92:12:7d:10:2c:be:3b:de:39:f5:f3:64:ad:f5:03:d9: 4f:98:ea:24:71:0d:46:e0:00:20:33:49:a7:38:5b:6d:4c:7f: e0:25:c4:7b:cd:c3:ac:ff:0f:1e:3f:1d:56:8e:7d:21:1f:6a: 03:b3:0c:b3:8f:b4:00:8b:32:26:53:b8:7b:7c:3f:2f:50:4f: b0:8c:3a:78:b4:73:fd:6b:c6:0e:a6:30:50:68:70:3c:a9:ce: e7:94:8c:0b:41:bc:ed:07:a4:a4:5f:fb:50:9c:6a:73:fa:01: d7:d1:5e:b6:17:80:e3:70:ad:cf:1f:8f:8f:fd:7a:06:e7:57: cb:98:a2:48:38:02:3a:96:34:b2:16:e9:50:a0:fd:be:8a:ee: 19:a4:55:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmxLFgwkOigWscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk N2RiODljNWUtMDM1My00OWQ3LWI4MzctY2FhNmM4M2NiMTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLptqIQgKszI6bpb/zz9lQhLk5zWunhwzm7o DxrUOJlmRhld7rwm+dofCB2fI++2WB5ahJIwKvEOZSrL9SZLXaigkA45dBStppyI zBwkWpyvjjOlKfHMsmlEcuy0dHeT8coQrx/idpGHAC+8wVgOUi3zEX20MDC5VwOl 55KBcMLwD52W3ZompV9w5HQ9+d3GiCncS04wEfLlLv38mn1nezG01O0egrGMkTg2 K8v4VhfQct/2bjUYzqyy9PH2SVQpTa7+aSKVRz9UStttsOpzfbPgTgaONd9tPKWx z8nGkEipKA192I0H+eJSwAxrVWMTGSWUUKdK0pd9q09Dqh4aMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM65GHxZ4eTHEo8qh3zOjF/3GimhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGFlNjBmMzQtMzViNS0z NDFjLWI3MTAtZGYyMzViOTM2YjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKN/Mo13GK3eqeznKHKzLYnGWXpGFYuSC9S40U3gsKyJn+BcdDRHNvpr troXn9kNTnBbvTPMgfaZlCvqDrzk60ebMIMaMP0CcHn1af54KNOWgKI2yJIUrbN5 3OOcvvV/+4yE34IOJML6gdvbfDb+khJ9ECy+O9459fNkrfUD2U+Y6iRxDUbgACAz Sac4W21Mf+AlxHvNw6z/Dx4/HVaOfSEfagOzDLOPtACLMiZTuHt8Py9QT7CMOni0 c/1rxg6mMFBocDypzueUjAtBvO0HpKRf+1CcanP6AdfRXrYXgONwrc8fj4/9egbn V8uYokg4AjqWNLIW6VCg/b6K7hmkVWo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:59:22 2025 by rpki-client