$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa File: 8e747f40-345c-3b4c-a512-beeafffd8e3d.roa (raw, json) Hash identifier: 3LxIbpxPDMZakXkUtuDtI6qx8IIdsLCQiX+oKimHHjc= Subject key identifier: 51:3F:4C:3E:11:90:D6:9C:86:5B:76:35:CE:0B:78:7F:F0:B3:36:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526A492862880BBFDA0070 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396687 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6a:49:28:62:88:0b:bf:da:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d1df7aab-cb72-4cd7-bd2a-07495bfc2a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:7f:91:e0:81:07:80:5a:40:60:1d:77:32: ed:90:56:1a:9f:06:b4:5b:e4:e9:8d:5d:53:c8:b3: 56:88:aa:4e:11:a4:47:7b:2a:bb:0b:6c:38:21:b1: 96:9c:c1:52:bc:99:67:4c:5a:09:f1:cc:32:62:05: f4:45:84:3e:c9:98:a4:c8:6d:06:d0:fc:c4:aa:c1: b1:d0:83:19:73:46:5a:a3:71:13:b0:41:2d:d2:f7: 42:2b:ed:e5:43:4d:41:45:c0:ea:7b:a8:b8:87:91: a8:c0:c7:7f:e7:4d:66:81:7f:c0:13:ab:3e:fa:23: 5e:8d:44:92:e7:fe:3d:52:41:7d:dd:da:5a:35:6b: 83:9a:bb:f5:2b:f5:e4:8e:7f:69:53:b2:44:73:05: af:13:cc:3e:18:c9:e8:09:c7:c6:d0:32:82:91:a1: 89:16:a3:5d:20:d2:48:30:d2:6c:b7:62:ca:4d:ff: 89:56:34:93:4f:89:e2:d3:39:3a:59:01:83:be:4e: 64:cd:09:8c:14:a8:bd:ad:91:1b:3d:52:26:b5:44: b6:86:7b:a4:30:20:a5:b2:24:67:3e:e3:ef:2a:e3: 0a:4b:8f:05:b5:06:5c:73:46:63:d5:82:02:ee:fa: 48:13:3a:2f:e0:31:5c:d9:ea:98:7a:ce:5a:a4:87: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3F:4C:3E:11:90:D6:9C:86:5B:76:35:CE:0B:78:7F:F0:B3:36:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e747f40-345c-3b4c-a512-beeafffd8e3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:54:ff:33:88:78:d9:a7:03:4c:fa:f2:5c:37:9d:b3:74:f0: 99:8b:ad:de:88:0a:5e:b4:8b:53:e1:17:e1:5a:a7:ff:19:1c: e3:8c:1f:1d:c0:ca:58:ef:00:ab:00:ff:51:ed:14:7b:5d:c6: 58:2c:8f:14:56:b9:3e:5a:0c:1c:0d:08:9b:49:f8:03:69:6f: 3e:cf:d0:e4:90:dd:20:78:65:78:43:26:67:9b:ce:c3:b0:7c: ce:4c:9a:3d:76:47:46:2f:23:7e:82:5d:aa:bb:80:b9:16:08: a3:b8:9d:9f:81:17:58:8d:00:fc:ab:c9:7a:65:82:7b:49:97: 91:59:d5:f0:61:2a:79:9f:e7:3f:dd:1a:5d:f0:37:ab:32:0d: 60:2a:24:24:57:2c:01:bd:6e:a5:3b:3a:57:69:9f:d0:a8:01: 51:32:68:10:f8:ce:b4:d7:7c:9a:eb:61:fa:28:5e:cd:55:a9: 66:ed:d9:23:71:6c:51:43:f7:74:f4:cc:ad:7d:85:9a:ed:81: d9:fe:e0:33:c2:a0:f6:cb:32:7d:f7:c4:c1:66:ba:a5:81:04: 12:0b:16:61:45:23:9e:39:25:30:24:99:20:aa:e7:3e:b3:51: cb:00:83:80:33:4c:a7:7f:ea:b5:1e:9a:70:b8:9f:51:be:3c: 6a:2a:cc:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmpJKGKIC7/aAHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDFkZjdhYWItY2I3Mi00Y2Q3LWJkMmEtMDc0OTViZmMyYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbN/keCBB4BaQGAddzLtkFYanwa0W+TpjV1T yLNWiKpOEaRHeyq7C2w4IbGWnMFSvJlnTFoJ8cwyYgX0RYQ+yZikyG0G0PzEqsGx 0IMZc0Zao3ETsEEt0vdCK+3lQ01BRcDqe6i4h5GowMd/501mgX/AE6s++iNejUSS 5/49UkF93dpaNWuDmrv1K/Xkjn9pU7JEcwWvE8w+GMnoCcfG0DKCkaGJFqNdINJI MNJst2LKTf+JVjSTT4ni0zk6WQGDvk5kzQmMFKi9rZEbPVImtUS2hnukMCClsiRn PuPvKuMKS48FtQZcc0Zj1YIC7vpIEzov4DFc2eqYes5apIcqKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFE/TD4RkNachlt2Nc4LeH/wszaPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGU3NDdmNDAtMzQ1Yy0z YjRjLWE1MTItYmVlYWZmZmQ4ZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlU/zOIeNmnA0z68lw3nbN08JmLrd6ICl60i1PhF+Fap/8ZHOOMHx3A yljvAKsA/1HtFHtdxlgsjxRWuT5aDBwNCJtJ+ANpbz7P0OSQ3SB4ZXhDJmebzsOw fM5Mmj12R0YvI36CXaq7gLkWCKO4nZ+BF1iNAPyryXplgntJl5FZ1fBhKnmf5z/d Gl3wN6syDWAqJCRXLAG9bqU7Oldpn9CoAVEyaBD4zrTXfJrrYfooXs1VqWbt2SNx bFFD93T0zK19hZrtgdn+4DPCoPbLMn33xMFmuqWBBBILFmFFI545JTAkmSCq5z6z UcsAg4AzTKd/6rUemnC4n1G+PGoqzIc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:23:08 2025 by rpki-client