$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8789756a-1ffa-3b88-a61b-5e2fa1153942.roa File: 8789756a-1ffa-3b88-a61b-5e2fa1153942.roa (raw, json) Hash identifier: Kf+a2bqQ5q123cY2sjw2RcBA7FDL7MGizOVjFW74oZc= Subject key identifier: 50:36:0C:E6:7F:78:6E:7C:5D:B6:89:38:54:1F:59:C7:0B:87:D2:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A6201D03FE31E6BA2440FC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8789756a-1ffa-3b88-a61b-5e2fa1153942.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 397204 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:01:d0:3f:e3:1e:6b:a2:44:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=6185ff3f-000b-4c85-b309-5a38ba5c7f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:33:a0:31:30:4c:13:ca:89:ad:d8:9c:8a:e4: 91:cc:09:d5:ee:74:e4:af:18:15:4f:52:58:2c:06: e0:ee:99:f9:90:21:ef:01:4c:e8:82:cf:fa:88:ec: 24:a2:c9:da:47:72:b6:2d:a0:2b:5f:a1:0f:85:bf: c7:be:b8:61:ad:42:39:cc:29:11:92:2c:bd:57:14: 2e:de:73:ea:c4:31:4a:30:db:f8:8c:4b:0e:c9:9f: 83:05:5f:1b:24:2a:1d:31:55:6b:20:a4:3d:ef:25: 4f:80:14:a8:c9:04:94:c7:67:39:b2:7b:f1:11:ba: 00:1d:79:c1:2e:66:f1:de:fd:40:4d:26:dd:6b:e6: b8:2b:07:f8:a6:40:95:e8:9a:e6:e3:98:97:6a:cd: ae:39:92:44:be:c6:5d:dc:80:5d:ad:e6:bf:82:9f: bc:3c:d0:5c:11:e0:0a:7e:ed:1d:92:57:81:de:84: c9:77:24:d2:c9:fa:5b:30:53:1b:d6:67:92:6e:72: e1:40:96:4f:af:ef:63:04:11:38:74:ef:9c:00:fd: 56:74:fa:af:e8:77:01:d3:6b:78:93:4c:3e:15:62: 98:16:c7:53:bb:9e:08:63:81:e8:43:e3:7c:57:dd: 75:f1:7e:cf:a3:60:85:53:39:46:b2:bd:a2:9f:5f: f6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:36:0C:E6:7F:78:6E:7C:5D:B6:89:38:54:1F:59:C7:0B:87:D2:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8789756a-1ffa-3b88-a61b-5e2fa1153942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:5e:01:f6:ea:c8:71:58:6c:01:51:88:9c:73:4c:96:c2:59: 9b:b9:c7:ad:4c:91:83:b7:89:f3:4a:3f:50:c0:01:b1:23:0e: e7:8b:55:37:55:21:06:90:95:4d:6b:4d:3c:eb:9a:08:00:bb: 5f:b2:3e:0e:6a:e4:2c:7e:dd:55:68:a3:1e:85:14:39:ca:61: 6f:69:5e:c6:3e:76:13:8e:ef:fe:61:fc:d6:c8:5b:47:dc:6e: 8f:da:d1:57:e0:c2:fd:3f:b1:88:c4:a2:2a:cf:1b:59:11:46: 51:77:99:fd:df:8b:eb:fb:ab:02:e0:b3:f0:b0:ce:36:4c:fc: 42:d8:b9:58:27:3f:a6:7e:e0:22:49:0a:ec:48:bf:74:51:20: b5:26:0b:e2:b6:aa:f2:c9:3f:29:a5:85:0a:41:c2:ad:ef:3d: e4:4b:0d:27:cc:82:c1:da:8c:16:22:af:26:33:81:29:22:35: 75:dc:e7:b4:72:cf:9a:c0:2c:99:87:20:7c:72:2e:22:cf:2a: 22:94:2a:83:b3:5f:64:7a:61:fa:8b:4a:3a:c4:da:f8:09:a0: 12:7f:cb:97:f6:b0:8a:26:c3:aa:4d:88:1f:ca:54:51:1e:b9: f5:71:03:35:f6:f1:ce:b0:5b:3c:2d:9a:de:97:ad:6d:52:fa: 00:ac:dc:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYgHQP+Mea6JED8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NjE4NWZmM2YtMDAwYi00Yzg1LWIzMDktNWEzOGJhNWM3ZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDOgMTBME8qJrdiciuSRzAnV7nTkrxgVT1JY LAbg7pn5kCHvAUzogs/6iOwkosnaR3K2LaArX6EPhb/HvrhhrUI5zCkRkiy9VxQu 3nPqxDFKMNv4jEsOyZ+DBV8bJCodMVVrIKQ97yVPgBSoyQSUx2c5snvxEboAHXnB Lmbx3v1ATSbda+a4Kwf4pkCV6Jrm45iXas2uOZJEvsZd3IBdrea/gp+8PNBcEeAK fu0dkleB3oTJdyTSyfpbMFMb1meSbnLhQJZPr+9jBBE4dO+cAP1WdPqv6HcB02t4 k0w+FWKYFsdTu54IY4HoQ+N8V9118X7Po2CFUzlGsr2in1/22wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFA2DOZ/eG58XbaJOFQfWccLh9LCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODc4OTc1NmEtMWZmYS0z Yjg4LWE2MWItNWUyZmExMTUzOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBFXgH26shxWGwBUYicc0yWwlmbucetTJGDt4nzSj9QwAGxIw7ni1U3 VSEGkJVNa00865oIALtfsj4OauQsft1VaKMehRQ5ymFvaV7GPnYTju/+YfzWyFtH 3G6P2tFX4ML9P7GIxKIqzxtZEUZRd5n934vr+6sC4LPwsM42TPxC2LlYJz+mfuAi SQrsSL90USC1JgvitqryyT8ppYUKQcKt7z3kSw0nzILB2owWIq8mM4EpIjV13Oe0 cs+awCyZhyB8ci4izyoilCqDs19kemH6i0o6xNr4CaASf8uX9rCKJsOqTYgfylRR Hrn1cQM19vHOsFs8LZrel61tUvoArNyW -----END CERTIFICATE-----Generated at Mon Oct 20 04:19:50 2025 by rpki-client