$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6237d692-5a6a-303f-ae2e-34ac32f2a7c7.roa File: 6237d692-5a6a-303f-ae2e-34ac32f2a7c7.roa (raw, json) Hash identifier: shKTBhbMc16iO2+m/ltnMqufdnXB8jJVqQ6t77I+YlI= Subject key identifier: FB:57:51:66:AD:CD:AA:3A:80:84:73:2F:81:FA:4E:B7:D6:96:DE:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D9600FBAA5FF1F238BF8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6237d692-5a6a-303f-ae2e-34ac32f2a7c7.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36620 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d9:60:0f:ba:a5:ff:1f:23:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=897c09cc-7de9-425f-bd7d-daccac6fa18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:64:bf:51:05:2b:24:ec:5e:85:44:d9:34:8a: 0a:83:c2:92:fb:75:52:9d:7e:0a:ed:30:b2:19:78: 28:c0:73:3a:29:e3:a7:1b:e4:17:7e:bb:4e:c0:81: 0c:ea:42:f6:9e:9f:a6:80:38:b2:2d:8f:e1:e2:fb: 15:27:d4:5b:e9:82:7c:39:b6:0f:aa:ce:71:39:f7: 4e:39:70:01:12:c0:aa:49:3d:2d:ad:bf:ad:d5:b7: cb:be:c3:fe:50:63:f2:2d:f0:8a:16:1a:29:5e:24: 3e:17:77:bb:d1:2d:87:22:80:a9:e6:b0:f9:e1:ad: 33:31:b7:be:b1:9b:4b:98:da:94:e7:35:20:a7:89: f9:bb:37:96:2f:88:01:7b:25:a7:2f:ed:39:b6:3e: d5:eb:65:fd:43:de:33:31:42:bc:d0:c4:17:9e:d2: f2:33:99:4b:31:50:b4:b3:0b:2e:1d:ab:70:43:7f: 19:69:eb:87:2b:fe:6f:eb:95:22:2e:a5:98:2e:f6: e1:59:97:80:3f:3d:25:6b:38:7d:e3:76:71:7f:13: 11:68:3f:22:f8:6d:65:60:90:ee:bc:c4:13:f3:02: 91:72:0d:a4:40:87:7a:30:c5:6a:f0:78:a3:e5:d2: ad:dd:43:6c:55:a1:69:b5:56:c0:f6:dc:c7:39:9f: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:57:51:66:AD:CD:AA:3A:80:84:73:2F:81:FA:4E:B7:D6:96:DE:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6237d692-5a6a-303f-ae2e-34ac32f2a7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ec:6f:e6:9f:2a:9d:6a:f9:a6:d3:0e:5b:d4:21:95:bf:9c: 48:ef:19:23:5f:fc:1c:5e:ba:6e:31:47:19:78:43:27:8a:40: 32:23:50:5f:b2:11:4b:39:58:75:01:fd:ad:93:27:07:7b:c2: b0:4c:1e:af:8b:56:62:ac:da:ae:95:30:a6:6d:f9:f5:05:26: 59:f9:ec:4a:27:42:37:46:fd:3c:fc:86:df:d3:65:08:77:01: bc:35:ee:93:50:8b:91:eb:32:83:31:41:fc:9f:67:3f:88:e7: 32:49:55:ae:c8:3b:b8:6e:51:86:3c:3f:2d:7b:11:f9:c2:af: 8e:08:16:9f:a9:5e:e6:ef:92:0b:df:40:59:58:8a:3d:13:70: 24:b5:97:64:ee:bb:47:ea:45:98:c9:ff:82:2b:cb:e5:2b:97: 0a:68:0e:95:a0:54:0c:e7:2d:ab:1d:ee:d3:14:20:1a:47:36: 27:64:cf:7e:fe:3e:d4:3b:d8:3b:0b:db:3e:7e:19:21:bf:7a: 15:ed:cb:30:55:c2:df:2f:d5:83:32:c3:51:ec:1e:5e:6a:e1: d6:77:6b:e3:05:3f:12:3d:52:4e:2a:27:aa:f2:28:e1:3f:9f: af:64:88:16:fc:d9:45:ad:00:92:0e:5f:02:6c:d5:34:27:4f: cb:4a:68:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgdlgD7ql/x8ji/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ODk3YzA5Y2MtN2RlOS00MjVmLWJkN2QtZGFjY2FjNmZhMThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumS/UQUrJOxehUTZNIoKg8KS+3VSnX4K7TCy GXgowHM6KeOnG+QXfrtOwIEM6kL2np+mgDiyLY/h4vsVJ9Rb6YJ8ObYPqs5xOfdO OXABEsCqST0trb+t1bfLvsP+UGPyLfCKFhopXiQ+F3e70S2HIoCp5rD54a0zMbe+ sZtLmNqU5zUgp4n5uzeWL4gBeyWnL+05tj7V62X9Q94zMUK80MQXntLyM5lLMVC0 swsuHatwQ38ZaeuHK/5v65UiLqWYLvbhWZeAPz0lazh943ZxfxMRaD8i+G1lYJDu vMQT8wKRcg2kQId6MMVq8Hij5dKt3UNsVaFptVbA9tzHOZ+16QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPtXUWatzao6gIRzL4H6TrfWlt6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjIzN2Q2OTItNWE2YS0z MDNmLWFlMmUtMzRhYzMyZjJhN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXsb+afKp1q+abTDlvUIZW/nEjvGSNf/Bxeum4xRxl4QyeKQDIjUF+y EUs5WHUB/a2TJwd7wrBMHq+LVmKs2q6VMKZt+fUFJln57EonQjdG/Tz8ht/TZQh3 Abw17pNQi5HrMoMxQfyfZz+I5zJJVa7IO7huUYY8Py17EfnCr44IFp+pXubvkgvf QFlYij0TcCS1l2Tuu0fqRZjJ/4Iry+UrlwpoDpWgVAznLasd7tMUIBpHNidkz37+ PtQ72DsL2z5+GSG/ehXtyzBVwt8v1YMyw1HsHl5q4dZ3a+MFPxI9Uk4qJ6ryKOE/ n69kiBb82UWtAJIOXwJs1TQnT8tKaJw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:21:55 2025 by rpki-client