$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6504c090-7409-3044-bb7c-d7d9561e45e8.roa File: 6504c090-7409-3044-bb7c-d7d9561e45e8.roa (raw, json) Hash identifier: 0xCPk8xtXjgqZUw5uZvPL7Kz6GAj50l9Pwp9WWDwGyg= Subject key identifier: 3F:F0:DA:5F:78:D6:A8:E4:52:04:B4:55:2D:84:16:0D:24:12:02:5D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B92DD936EF7B131CE3FEF5560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6504c090-7409-3044-bb7c-d7d9561e45e8.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 397200 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:93:6e:f7:b1:31:ce:3f:ef:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=eb59e898-a7c4-47c6-9802-ffe05f6f1117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:69:e7:c7:8a:e6:a3:f6:22:d9:54:da:a3: ce:4a:36:60:8e:7b:82:1c:fd:ce:a2:7f:98:99:f1: db:ca:e3:16:cf:76:7d:0d:f6:8c:6b:10:78:83:3d: 20:4b:d4:70:c2:a7:e0:a5:0f:80:21:51:51:99:85: 54:62:93:91:79:cc:c2:fc:ef:19:39:bd:e2:19:ec: ff:4e:34:05:61:3e:23:8f:0b:0c:9f:50:8c:ce:41: 9d:0d:3e:73:3c:54:df:ef:38:18:80:7a:a7:92:30: 0f:51:f5:5a:a5:5a:76:7d:4d:0a:79:13:60:c3:6d: 56:91:98:cd:b1:4a:fc:ee:07:27:c6:34:f3:1a:6c: f5:ac:41:76:28:e0:84:10:06:1d:4d:3e:9a:d5:ce: 0d:9a:c4:e9:42:4d:65:9f:48:06:0b:aa:95:97:b5: 73:c0:53:80:ac:91:96:a3:bd:b3:c6:2d:e2:a3:8b: 5c:63:cd:57:4b:91:22:bf:07:fb:23:40:c9:ac:af: 57:40:84:eb:3c:6e:2f:ed:bb:e4:c6:6c:f4:e3:5e: f8:68:74:47:41:b7:49:91:f7:07:40:99:0b:83:02: 98:f9:08:92:27:b0:fd:f1:26:32:c6:04:fd:e9:91: d0:cf:d3:8a:56:70:7f:7b:ff:b9:2f:2d:b9:0a:94: 31:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F0:DA:5F:78:D6:A8:E4:52:04:B4:55:2D:84:16:0D:24:12:02:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6504c090-7409-3044-bb7c-d7d9561e45e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:57:5b:eb:38:b9:a6:a4:89:14:a9:c5:01:51:37:77:d0:04: 14:06:65:ef:4b:5f:ca:c5:ff:93:c4:fd:cc:4c:73:bc:19:d2: 2a:76:19:f7:07:25:57:89:0e:4a:b3:1e:2d:47:21:f8:7f:18: b3:3c:a4:6b:94:4d:b6:1c:b7:de:4e:ef:2d:5e:c6:9e:95:cd: 27:0c:99:41:49:56:c3:69:2a:1c:f2:d5:ac:58:e3:83:0c:96: f9:9a:4f:c0:82:15:3f:94:75:d0:93:6d:20:69:27:13:e3:c5: 8b:3c:69:c4:3b:95:9e:10:35:3e:6f:71:a2:9c:c8:47:22:18: af:ab:1d:71:61:93:f1:d2:40:c1:f1:31:bb:82:ed:06:8f:08: 89:2c:9f:4c:2b:97:08:fc:7e:61:01:04:9c:6a:b3:ae:d3:35: f6:f9:e4:66:f8:90:ee:74:89:b1:1e:bd:5e:fc:d1:4d:43:96: 1c:75:c0:65:5f:e0:19:e7:2c:41:18:78:61:68:56:f8:3e:40: 11:9d:3f:7d:f4:2c:db:16:3c:38:75:d9:e9:8c:a2:f0:e6:7c: 6f:94:e2:ea:52:22:bf:dd:5b:12:e0:1f:b8:a2:9c:4e:03:54: 24:5b:aa:61:d7:6d:7b:0f:84:31:c2:4a:63:71:91:6d:49:99: 78:ce:7d:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZNu97Exzj/vVWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZWI1OWU4OTgtYTdjNC00N2M2LTk4MDItZmZlMDVmNmYxMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5Fp58eK5qP2ItlU2qPOSjZgjnuCHP3Oon+Y mfHbyuMWz3Z9DfaMaxB4gz0gS9RwwqfgpQ+AIVFRmYVUYpOReczC/O8ZOb3iGez/ TjQFYT4jjwsMn1CMzkGdDT5zPFTf7zgYgHqnkjAPUfVapVp2fU0KeRNgw21WkZjN sUr87gcnxjTzGmz1rEF2KOCEEAYdTT6a1c4NmsTpQk1ln0gGC6qVl7VzwFOArJGW o72zxi3io4tcY81XS5Eivwf7I0DJrK9XQITrPG4v7bvkxmz04174aHRHQbdJkfcH QJkLgwKY+QiSJ7D98SYyxgT96ZHQz9OKVnB/e/+5Ly25CpQx7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/w2l941qjkUgS0VS2EFg0kEgJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjUwNGMwOTAtNzQwOS0z MDQ0LWJiN2MtZDdkOTU2MWU0NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhXW+s4uaakiRSpxQFRN3fQBBQGZe9LX8rF/5PE/cxMc7wZ0ip2GfcH JVeJDkqzHi1HIfh/GLM8pGuUTbYct95O7y1exp6VzScMmUFJVsNpKhzy1axY44MM lvmaT8CCFT+UddCTbSBpJxPjxYs8acQ7lZ4QNT5vcaKcyEciGK+rHXFhk/HSQMHx MbuC7QaPCIksn0wrlwj8fmEBBJxqs67TNfb55Gb4kO50ibEevV780U1Dlhx1wGVf 4BnnLEEYeGFoVvg+QBGdP330LNsWPDh12emMovDmfG+U4upSIr/dWxLgH7iinE4D VCRbqmHXbXsPhDHCSmNxkW1JmXjOfaQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:58 2025 by rpki-client