$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70b9adfe-747d-3825-a012-615a4a1da084.roa File: 70b9adfe-747d-3825-a012-615a4a1da084.roa (raw, json) Hash identifier: amjzBnYSLcZs+J9dfpUQoxEy7SaXZ7j4TkggHKxChOU= Subject key identifier: E6:0D:88:96:16:E6:C7:28:C2:62:0B:2E:4B:D1:00:8A:74:BA:1B:BE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D78EFA6B93F420976C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70b9adfe-747d-3825-a012-615a4a1da084.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36617 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d7:8e:fa:6b:93:f4:20:97:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=bf1966a2-8af9-4a3c-81a1-5113d4aa8121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ee:f1:f6:bb:03:03:e0:b5:3a:88:65:d0:03: 6c:4c:70:d4:b3:95:dc:20:0d:08:ea:b0:48:a6:d4: d3:d5:b3:e9:11:c9:41:2a:7d:df:30:11:19:d8:8a: ad:8a:72:ff:c0:ab:c7:e3:bb:2e:bb:a0:96:81:88: 74:a4:1a:30:c1:a8:2f:11:4f:ab:a4:cc:33:d7:e6: 47:91:61:2f:52:7a:e6:45:84:29:cd:a0:f7:20:c7: 17:e1:e9:84:db:b5:65:d5:b4:ad:44:f3:ba:8f:8b: d8:ea:1d:cf:78:74:81:50:de:a1:35:f0:d1:b6:b0: 85:41:fc:78:4a:52:6c:eb:45:b7:70:e4:5d:bd:96: d9:3b:c9:a0:05:22:9a:46:2a:6a:cd:b6:39:8b:e5: 60:13:08:8b:01:4b:ec:b5:40:95:01:5d:6e:32:34: ef:d7:da:2a:95:51:ca:96:a2:71:4d:35:1b:7a:d5: 2d:f3:4d:c1:0f:0a:9d:37:fb:f6:99:26:06:04:06: 9d:8e:a5:d8:f7:9b:98:d6:42:ab:b6:8a:9b:8d:4c: 32:f8:aa:02:66:be:02:74:50:52:ec:99:8a:92:6c: e8:45:89:70:bb:cc:4c:34:f0:b1:28:33:4c:71:0f: 05:d5:df:c8:bb:79:21:57:a4:89:f8:c1:91:8b:53: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:0D:88:96:16:E6:C7:28:C2:62:0B:2E:4B:D1:00:8A:74:BA:1B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70b9adfe-747d-3825-a012-615a4a1da084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3a:47:f1:9c:49:16:cc:21:c2:47:39:06:1d:9b:8b:83:87: d5:15:e1:f9:fe:17:26:ff:19:ae:b1:d8:a3:af:7f:9a:79:79: 7a:ef:31:80:7c:40:66:0c:99:c1:f2:80:61:3e:53:22:9b:1e: fc:c7:c9:a0:e1:14:e0:69:33:36:75:a2:88:8b:d8:84:31:44: 86:c3:ec:65:23:16:dc:d1:80:28:8f:6b:94:a3:ae:da:63:2f: bc:ef:9a:e2:cc:f6:1f:81:64:5e:1c:93:f9:79:17:cb:a5:7d: d0:0a:77:de:00:6c:ef:8f:e4:02:9c:bb:e1:a1:16:08:ad:40: f0:3b:5b:ca:22:c5:87:d1:fc:bf:81:d0:6d:cf:dd:55:d4:6f: b3:ac:30:5c:30:49:83:a0:ac:b1:d9:50:25:ff:b6:e5:23:c3: ea:7a:b9:22:18:54:76:75:00:3c:89:b9:ba:71:bf:26:3f:49: 33:a3:d5:ed:46:b6:66:a4:2a:c6:bc:c2:22:64:d7:71:6d:9b: 6a:30:cf:d0:e0:d2:f8:5a:d3:3e:9c:41:20:b4:dd:c7:bf:89: 74:59:d2:58:eb:58:6a:87:d1:39:ac:a6:7a:41:01:03:29:39: be:e5:52:51:90:c7:5c:74:18:f1:0f:ee:5b:cc:0b:43:7b:7b: 2b:c5:52:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgdeO+muT9CCXbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YmYxOTY2YTItOGFmOS00YTNjLTgxYTEtNTExM2Q0YWE4MTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe7x9rsDA+C1Oohl0ANsTHDUs5XcIA0I6rBI ptTT1bPpEclBKn3fMBEZ2IqtinL/wKvH47suu6CWgYh0pBowwagvEU+rpMwz1+ZH kWEvUnrmRYQpzaD3IMcX4emE27Vl1bStRPO6j4vY6h3PeHSBUN6hNfDRtrCFQfx4 SlJs60W3cORdvZbZO8mgBSKaRipqzbY5i+VgEwiLAUvstUCVAV1uMjTv19oqlVHK lqJxTTUbetUt803BDwqdN/v2mSYGBAadjqXY95uY1kKrtoqbjUwy+KoCZr4CdFBS 7JmKkmzoRYlwu8xMNPCxKDNMcQ8F1d/Iu3khV6SJ+MGRi1OnlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYNiJYW5scowmILLkvRAIp0uhu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBiOWFkZmUtNzQ3ZC0z ODI1LWEwMTItNjE1YTRhMWRhMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg6R/GcSRbMIcJHOQYdm4uDh9UV4fn+Fyb/Ga6x2KOvf5p5eXrvMYB8 QGYMmcHygGE+UyKbHvzHyaDhFOBpMzZ1ooiL2IQxRIbD7GUjFtzRgCiPa5Sjrtpj L7zvmuLM9h+BZF4ck/l5F8ulfdAKd94AbO+P5AKcu+GhFgitQPA7W8oixYfR/L+B 0G3P3VXUb7OsMFwwSYOgrLHZUCX/tuUjw+p6uSIYVHZ1ADyJubpxvyY/STOj1e1G tmakKsa8wiJk13Ftm2owz9Dg0vha0z6cQSC03ce/iXRZ0ljrWGqH0TmspnpBAQMp Ob7lUlGQx1x0GPEP7lvMC0N7eyvFUlk= -----END CERTIFICATE-----Generated at Mon Oct 20 04:01:37 2025 by rpki-client