$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa File: 657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa (raw, json) Hash identifier: n3Dki1P5rhxHlsOOy4wcJYFOqfn4lRX8eps21+M2+AI= Subject key identifier: 78:D1:F0:A1:93:1D:19:49:2D:A6:A8:B8:3F:32:BB:98:ED:CA:50:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52709F1EC05C782E16BF58 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396696 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:70:9f:1e:c0:5c:78:2e:16:bf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=783ae833-df2e-45f3-bfd5-601fb3e122a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:60:30:ce:c9:6b:8c:a2:96:d7:58:28:c9: 12:d8:d8:5b:9c:05:ae:48:1d:16:c3:09:bc:06:e8: 50:ce:2c:e3:b8:31:14:2f:22:3a:eb:09:ec:16:d9: fb:cb:50:de:6c:55:ab:77:16:ed:97:19:18:63:08: 98:eb:20:b0:ae:8f:69:61:79:f1:b8:1d:e9:82:9d: e1:d6:1c:e2:97:0f:9f:65:4d:91:a6:1a:5d:66:f8: bc:a1:1a:f7:ec:f4:37:9f:63:7b:fe:86:3b:5e:cc: 52:b9:02:a7:e0:b2:8f:b8:c0:36:9d:c8:2b:75:25: f7:79:03:94:c1:80:39:bb:1e:71:08:33:00:1f:d2: fc:43:1c:ab:4a:1c:98:53:99:0e:da:d2:98:76:a5: cf:de:16:75:7c:69:45:d4:ee:12:6f:98:54:c2:59: aa:e0:b7:bc:f0:b8:93:d5:db:f5:d0:e6:18:c9:19: 31:a2:b0:9f:bb:11:00:81:e9:06:a6:fb:78:a2:d9: c1:b2:4f:81:0d:cc:45:8c:7d:39:da:6f:39:41:c5: 49:58:ae:c1:0d:d4:01:89:43:2d:24:1b:ca:04:20: da:c8:98:3d:a0:8c:85:0b:bb:31:30:7f:e8:23:27: a5:6e:48:e1:66:1b:94:51:d3:6e:02:79:53:1c:47: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D1:F0:A1:93:1D:19:49:2D:A6:A8:B8:3F:32:BB:98:ED:CA:50:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/657e7ed7-63bc-3d89-bea6-d6024fd36e7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:30:d1:a0:87:ab:de:ce:f4:7d:53:cc:91:ad:e5:ab:02:e1: a6:6d:33:f9:ea:8c:56:22:04:fa:cf:3a:8b:85:e2:9c:dc:74: f9:10:7d:e5:85:6b:7e:ce:19:e2:5d:0a:c8:c8:1b:4a:fa:59: 16:05:42:aa:45:b9:09:a9:b3:21:1d:a3:19:29:52:b0:82:79: 91:a5:ad:81:e1:bf:8a:be:34:f2:44:41:2a:b4:c1:34:21:eb: b9:9a:ca:e5:78:f3:96:2a:48:11:f8:4b:2b:c0:99:cd:6d:3c: 03:2e:d5:33:3c:ab:67:03:1a:da:80:69:dc:69:79:f3:fe:b9: d3:41:37:39:2d:e4:e2:90:a5:30:04:99:fd:c8:9f:ae:26:44: b9:31:30:1e:e9:e5:5e:0b:11:1e:8a:d0:73:5e:0e:7e:1b:2f: d1:26:b0:05:18:4b:bd:3b:1e:5d:8b:21:45:3e:cb:25:9a:96: bd:53:d3:5f:75:51:76:bd:41:43:a7:47:35:f0:99:30:31:1e: b6:78:31:c9:a6:f9:af:4b:d4:9b:fd:7b:06:f2:08:8e:f4:35: 4b:ec:72:41:d3:e1:34:52:56:7d:8b:94:33:2f:47:17:d2:c3: 82:7d:07:23:79:35:ba:cb:e4:32:86:dc:65:58:71:5e:66:fd: 96:63:23:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnCfHsBceC4Wv1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NzgzYWU4MzMtZGYyZS00NWYzLWJmZDUtNjAxZmIzZTEyMmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTBgMM7Ja4yiltdYKMkS2NhbnAWuSB0Wwwm8 BuhQzizjuDEULyI66wnsFtn7y1DebFWrdxbtlxkYYwiY6yCwro9pYXnxuB3pgp3h 1hzilw+fZU2RphpdZvi8oRr37PQ3n2N7/oY7XsxSuQKn4LKPuMA2ncgrdSX3eQOU wYA5ux5xCDMAH9L8QxyrShyYU5kO2tKYdqXP3hZ1fGlF1O4Sb5hUwlmq4Le88LiT 1dv10OYYyRkxorCfuxEAgekGpvt4otnBsk+BDcxFjH052m85QcVJWK7BDdQBiUMt JBvKBCDayJg9oIyFC7sxMH/oIyelbkjhZhuUUdNuAnlTHEeZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjR8KGTHRlJLaaouD8yu5jtylAGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjU3ZTdlZDctNjNiYy0z ZDg5LWJlYTYtZDYwMjRmZDM2ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQw0aCHq97O9H1TzJGt5asC4aZtM/nqjFYiBPrPOouF4pzcdPkQfeWF a37OGeJdCsjIG0r6WRYFQqpFuQmpsyEdoxkpUrCCeZGlrYHhv4q+NPJEQSq0wTQh 67mayuV485YqSBH4SyvAmc1tPAMu1TM8q2cDGtqAadxpefP+udNBNzkt5OKQpTAE mf3In64mRLkxMB7p5V4LER6K0HNeDn4bL9EmsAUYS707Hl2LIUU+yyWalr1T0191 UXa9QUOnRzXwmTAxHrZ4Mcmm+a9L1Jv9ewbyCI70NUvsckHT4TRSVn2LlDMvRxfS w4J9ByN5NbrL5DKG3GVYcV5m/ZZjIy0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:05 2025 by rpki-client