$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa File: 520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa (raw, json) Hash identifier: jVi23zK1Z4XGfs08BOC33Q6mj8kMEBs94MxvzO58q1M= Subject key identifier: EC:FA:4A:80:58:1F:09:C8:4F:D8:FC:C3:B9:1C:E6:06:04:DF:FC:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081DD329744628EF7857500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 40647 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:dd:32:97:44:62:8e:f7:85:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=a32e0def-643b-463a-9772-f2955cd99e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:56:ab:1e:20:2d:2f:6e:11:f0:6d:e3:db:a7: 6e:53:0c:62:f5:23:a2:0e:a5:47:4c:3e:40:73:1b: d1:2c:4c:1c:0b:15:79:b7:5a:28:62:17:3f:1f:3a: ce:f7:69:98:72:d1:cb:b5:d1:df:6d:c5:0d:94:50: ed:86:fb:a9:2f:1c:5d:e3:45:b3:3e:27:e0:82:70: 40:73:4c:9e:6b:9f:2f:a7:6f:af:f5:15:fd:a8:c7: 7f:26:f9:c8:64:a0:7b:ad:64:9a:57:ae:2e:33:4b: 5f:1d:06:d1:5c:b1:58:8e:58:3a:aa:03:3d:28:8b: fd:02:0d:6e:a7:42:42:75:fa:7d:46:c3:dc:2e:c4: cc:89:e3:8c:b5:4c:f1:66:1f:ab:a8:75:4b:53:77: ed:59:06:77:0f:e2:dd:32:0c:b4:0e:b2:fd:fe:18: 9f:b9:9b:75:10:6c:00:df:a5:e6:6c:5f:4f:22:c9: ba:ec:76:f5:49:e1:4d:e1:d5:9a:be:65:eb:c5:e5: 2d:ba:ac:34:f4:46:99:9c:6a:6f:f8:25:e2:c4:1e: 98:47:b7:32:a1:8f:38:65:ef:3e:34:26:22:3b:43: fb:89:ae:a0:3e:3b:a1:b7:65:9d:3c:d8:a4:cc:ac: b3:1a:76:00:8c:a7:a5:7c:80:41:86:cc:31:13:55: d6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FA:4A:80:58:1F:09:C8:4F:D8:FC:C3:B9:1C:E6:06:04:DF:FC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/520471d3-70f1-33ad-a68e-fb5c7a6dc22c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:40:a1:62:76:e7:7a:41:fa:80:d7:d8:46:0e:58:bc:6d:c5: d2:4e:39:c0:17:21:59:b9:dc:16:98:19:06:0c:cb:a8:f3:58: fd:fd:18:05:9f:c1:8f:3c:4c:9c:9f:ab:41:78:ae:96:52:97: 20:ba:6a:19:06:94:87:fc:eb:1f:c7:50:3b:15:68:68:7e:eb: cb:3a:36:cd:a3:7d:4a:6f:6a:25:6c:ec:c8:00:f1:56:a1:7d: f6:f7:0a:74:a3:92:f8:ed:32:fa:25:18:12:03:ce:55:6c:da: ea:f1:fd:fc:73:8c:2d:19:69:7f:f7:3c:92:a7:d5:56:21:0f: db:64:3e:07:f4:67:39:bd:43:7d:72:2a:20:76:bd:9b:4f:9f: c1:8a:50:d1:88:3d:ea:e8:78:d5:6d:bf:47:28:6d:36:cb:22: 02:98:0f:f5:af:93:71:2e:64:22:c4:e4:c1:08:80:04:bd:b7: a2:97:17:e9:61:4d:8f:40:b1:11:93:4e:3c:af:7f:49:af:8e: 52:4e:f8:05:d6:73:02:01:17:05:f2:c1:63:82:71:55:24:41: 25:84:a2:7a:00:28:e5:30:ef:ff:79:9d:15:79:37:70:99:cd: 95:d7:89:f4:54:54:d0:a3:29:5c:58:43:0a:d7:5f:18:60:79: 5f:a2:3e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgd0yl0RijveFdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YTMyZTBkZWYtNjQzYi00NjNhLTk3NzItZjI5NTVjZDk5ZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFarHiAtL24R8G3j26duUwxi9SOiDqVHTD5A cxvRLEwcCxV5t1ooYhc/HzrO92mYctHLtdHfbcUNlFDthvupLxxd40WzPifggnBA c0yea58vp2+v9RX9qMd/JvnIZKB7rWSaV64uM0tfHQbRXLFYjlg6qgM9KIv9Ag1u p0JCdfp9RsPcLsTMieOMtUzxZh+rqHVLU3ftWQZ3D+LdMgy0DrL9/hifuZt1EGwA 36XmbF9PIsm67Hb1SeFN4dWavmXrxeUtuqw09EaZnGpv+CXixB6YR7cyoY84Ze8+ NCYiO0P7ia6gPjuht2WdPNikzKyzGnYAjKelfIBBhswxE1XWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz6SoBYHwnIT9j8w7kc5gYE3/wZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTIwNDcxZDMtNzBmMS0z M2FkLWE2OGUtZmI1YzdhNmRjMjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENAoWJ253pB+oDX2EYOWLxtxdJOOcAXIVm53BaYGQYMy6jzWP39GAWf wY88TJyfq0F4rpZSlyC6ahkGlIf86x/HUDsVaGh+68s6Ns2jfUpvaiVs7MgA8Vah ffb3CnSjkvjtMvolGBIDzlVs2urx/fxzjC0ZaX/3PJKn1VYhD9tkPgf0Zzm9Q31y KiB2vZtPn8GKUNGIPeroeNVtv0cobTbLIgKYD/Wvk3EuZCLE5MEIgAS9t6KXF+lh TY9AsRGTTjyvf0mvjlJO+AXWcwIBFwXywWOCcVUkQSWEonoAKOUw7/95nRV5N3CZ zZXXifRUVNCjKVxYQwrXXxhgeV+iPvU= -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:43 2025 by rpki-client