$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa File: 86cab172-b370-32a4-b90f-6ab2db138b9b.roa (raw, json) Hash identifier: eHeiS4NdEfuN0liZy9lv+n49AxJcp5UUyqrAl6hADEQ= Subject key identifier: 1C:ED:C6:45:59:DF:A9:0D:8C:CF:D5:82:A6:08:89:CF:1A:B0:7B:0C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526995BC0830333A8E8380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396611 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:69:95:bc:08:30:33:3a:8e:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d18efa8f-2703-4492-a93d-bedfbf10dfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:06:6c:99:ac:30:f3:7e:c2:f6:77:21:de:dd: 6c:26:b4:e2:ff:c2:7d:54:08:d6:36:90:5d:ce:d9: f6:4b:72:c1:64:dc:2c:66:09:b3:46:64:67:b7:f1: 11:8d:29:ac:7c:10:e1:6b:04:0f:c5:fc:6b:ec:13: 4d:12:47:43:01:29:fe:d2:19:f0:d2:a7:88:4d:5b: 1e:cf:40:4a:33:9e:b7:7a:7d:97:48:11:4d:55:7f: ac:12:c7:c2:e5:61:2b:e8:4b:db:59:78:05:2e:bf: 87:54:2e:d4:2c:a9:61:1e:64:e0:6c:d6:91:5c:ab: 6f:b7:9f:02:a8:f2:65:f4:3c:54:02:96:85:f6:ce: 5d:27:e4:1c:e7:b1:56:dc:19:42:6a:08:06:d0:cb: a2:8a:6e:d3:ae:9c:30:51:e8:27:f3:44:68:27:85: 0d:2c:96:6b:14:77:2b:4c:ae:8f:09:30:48:83:b6: ef:58:89:9a:36:95:77:0d:19:0b:a5:6e:f5:c2:35: b1:2f:d0:06:2e:f3:92:28:3b:8e:57:82:98:1f:66: cb:f5:a9:ae:7d:d5:b5:d3:a6:24:95:41:4f:22:39: 13:ff:a9:8b:0a:dd:70:09:dd:ce:33:ac:fb:71:4b: 56:88:3f:94:05:3f:80:e5:3f:d2:5b:95:cd:fb:22: d9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:ED:C6:45:59:DF:A9:0D:8C:CF:D5:82:A6:08:89:CF:1A:B0:7B:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86cab172-b370-32a4-b90f-6ab2db138b9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:48:f2:70:17:35:28:81:02:3c:ff:c8:8f:e3:03:ae:49:2c: 90:06:33:98:31:cd:08:87:f1:ce:63:f4:44:a1:27:23:cc:99: c6:c3:d9:13:40:f9:34:eb:14:51:22:d6:19:53:f1:c7:5d:5a: cf:0f:4a:bf:bd:ac:ea:96:81:77:40:92:5a:9c:2e:9b:7f:43: 44:ab:60:63:8b:53:81:e5:ed:39:9b:bc:bf:bd:aa:97:1d:15: 46:d4:81:7f:90:a1:72:57:8e:da:2a:38:6a:08:07:31:be:f1: c0:c0:9b:2e:54:22:6c:52:ee:d7:35:1b:e1:4b:60:8f:b1:91: 9a:a6:4d:99:0a:83:d6:c1:bc:2c:f3:c2:da:e3:26:8d:23:80: de:4a:48:74:36:ea:87:77:16:85:de:58:1f:7b:04:e1:da:91: 79:70:20:a0:64:25:e8:b2:e2:0e:fb:6c:61:a0:64:fd:bf:57: 53:95:80:85:af:a7:b4:3d:0d:a0:b0:23:ac:1d:b7:6c:a5:81: 0c:d7:9e:f8:30:84:75:40:1f:7f:74:1d:d1:48:ac:7d:58:38: 40:98:6e:78:00:5d:7e:cc:2e:3c:67:27:7b:45:d8:f6:c8:8f: ae:00:25:dd:cd:d0:80:3d:90:53:f1:5d:28:a9:fe:a0:be:aa: 1a:c5:ba:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmmVvAgwMzqOg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDE4ZWZhOGYtMjcwMy00NDkyLWE5M2QtYmVkZmJmMTBkZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAZsmaww837C9nch3t1sJrTi/8J9VAjWNpBd ztn2S3LBZNwsZgmzRmRnt/ERjSmsfBDhawQPxfxr7BNNEkdDASn+0hnw0qeITVse z0BKM563en2XSBFNVX+sEsfC5WEr6EvbWXgFLr+HVC7ULKlhHmTgbNaRXKtvt58C qPJl9DxUApaF9s5dJ+Qc57FW3BlCaggG0Muiim7TrpwwUegn80RoJ4UNLJZrFHcr TK6PCTBIg7bvWImaNpV3DRkLpW71wjWxL9AGLvOSKDuOV4KYH2bL9amufdW106Yk lUFPIjkT/6mLCt1wCd3OM6z7cUtWiD+UBT+A5T/SW5XN+yLZUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBztxkVZ36kNjM/VgqYIic8asHsMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZjYWIxNzItYjM3MC0z MmE0LWI5MGYtNmFiMmRiMTM4YjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZI8nAXNSiBAjz/yI/jA65JLJAGM5gxzQiH8c5j9EShJyPMmcbD2RNA +TTrFFEi1hlT8cddWs8PSr+9rOqWgXdAklqcLpt/Q0SrYGOLU4Hl7TmbvL+9qpcd FUbUgX+QoXJXjtoqOGoIBzG+8cDAmy5UImxS7tc1G+FLYI+xkZqmTZkKg9bBvCzz wtrjJo0jgN5KSHQ26od3FoXeWB97BOHakXlwIKBkJeiy4g77bGGgZP2/V1OVgIWv p7Q9DaCwI6wdt2ylgQzXnvgwhHVAH390HdFIrH1YOECYbngAXX7MLjxnJ3tF2PbI j64AJd3N0IA9kFPxXSip/qC+qhrFusM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:14:25 2025 by rpki-client