$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa File: 95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa (raw, json) Hash identifier: Tcp99tdGZjhTO0/a4tYuEQmeMGKdARRCdunxHJIilIs= Subject key identifier: 10:67:F5:73:98:6D:12:31:39:F3:94:74:40:62:50:F7:48:CC:BC:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526FAC4CF73DA4D9775E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 27544 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6f:ac:4c:f7:3d:a4:d9:77:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=386f44c4-d49d-4c38-8a11-cb75f5b4ed5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0f:d2:13:e2:0b:7a:28:23:f7:f2:a5:f2:a3: e8:82:d7:4e:84:c7:2b:32:f8:36:81:39:97:4a:01: b0:82:c9:fe:aa:f6:db:77:83:04:06:85:5e:5e:f9: ee:7f:6b:66:c9:08:f9:e5:2f:4b:b0:0b:aa:28:71: 77:de:82:40:9d:ad:9c:e9:dc:72:57:62:5e:cd:67: ec:08:1d:b4:68:3c:d0:d9:1f:d0:9a:d7:77:88:dd: 61:0d:1c:39:2b:99:ae:b0:4d:9f:97:8e:03:5d:38: b1:63:cb:4c:47:08:9b:61:10:59:ad:22:91:e8:af: 78:34:00:83:b8:2a:12:0b:19:0d:2a:90:ee:83:1d: 58:5f:51:22:64:31:a5:b9:2e:42:0f:02:90:08:c7: b9:d1:1b:36:32:b5:72:66:58:c6:ad:29:a2:c7:3e: 25:6d:24:89:70:a7:78:ef:70:01:a8:10:48:3a:7b: 71:6d:57:d3:04:e8:aa:68:88:df:1c:be:b1:e7:87: bb:7b:08:a2:50:30:5e:3f:eb:9c:31:7f:a3:d1:45: fb:66:e7:b9:40:83:b6:79:76:99:af:d1:3c:00:d9: b6:e2:54:ce:00:b4:6b:61:52:f3:5f:aa:2c:95:b9: 50:b6:ea:f9:f8:65:e7:a1:35:81:ec:19:f1:fd:9c: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:67:F5:73:98:6D:12:31:39:F3:94:74:40:62:50:F7:48:CC:BC:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95674fc2-d10e-3d5f-ba18-3f0332ecfd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:46:b2:25:0e:76:32:b2:6c:92:7d:79:c6:e6:7b:ce:6f:92: 42:ca:52:2b:21:3a:4f:3a:05:cc:26:64:20:a0:27:4f:78:b4: 59:8b:7f:71:54:d8:45:59:ee:bc:37:5b:78:dd:1a:a9:c4:3d: 08:94:73:6b:af:2b:06:90:9f:6c:5b:f5:1c:d4:86:c1:6a:a1: bc:91:bd:54:93:b1:ab:a0:bc:64:38:43:5a:a1:67:d7:2a:57: 5d:a0:af:2c:03:a9:f4:d3:68:8a:59:cc:01:b9:c0:45:49:08: 48:12:f1:59:df:c2:48:f1:89:54:3d:eb:6a:35:e5:7f:86:65: d6:72:6b:22:a0:9c:f1:ff:3c:51:0e:f0:a8:24:92:f5:28:dd: 55:86:7f:ce:c7:84:68:18:a7:70:08:30:7f:ed:de:8c:f5:cf: 67:ee:27:44:10:78:1d:16:ae:8e:ca:4b:bd:71:fa:df:ad:15: 93:66:12:71:43:53:71:03:4a:d0:e8:e2:49:0d:de:b8:0d:dc: ce:06:35:36:a7:2a:30:41:bb:b6:d3:02:2f:b8:ae:65:de:73: ac:6f:83:57:ca:96:0f:11:a0:1b:d8:bc:7a:e6:39:cd:cc:3f: 15:02:8c:ce:e3:1e:e4:e0:a6:cd:7d:81:af:b0:c3:c7:2c:69: e9:46:30:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Um+sTPc9pNl3XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk Mzg2ZjQ0YzQtZDQ5ZC00YzM4LThhMTEtY2I3NWY1YjRlZDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQ/SE+ILeigj9/Kl8qPogtdOhMcrMvg2gTmX SgGwgsn+qvbbd4MEBoVeXvnuf2tmyQj55S9LsAuqKHF33oJAna2c6dxyV2JezWfs CB20aDzQ2R/Qmtd3iN1hDRw5K5musE2fl44DXTixY8tMRwibYRBZrSKR6K94NACD uCoSCxkNKpDugx1YX1EiZDGluS5CDwKQCMe50Rs2MrVyZljGrSmixz4lbSSJcKd4 73ABqBBIOntxbVfTBOiqaIjfHL6x54e7ewiiUDBeP+ucMX+j0UX7Zue5QIO2eXaZ r9E8ANm24lTOALRrYVLzX6oslblQtur5+GXnoTWB7Bnx/ZyoVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBn9XOYbRIxOfOUdEBiUPdIzLx/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU2NzRmYzItZDEwZS0z ZDVmLWJhMTgtM2YwMzMyZWNmZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJGsiUOdjKybJJ9ecbme85vkkLKUishOk86BcwmZCCgJ094tFmLf3FU 2EVZ7rw3W3jdGqnEPQiUc2uvKwaQn2xb9RzUhsFqobyRvVSTsaugvGQ4Q1qhZ9cq V12grywDqfTTaIpZzAG5wEVJCEgS8VnfwkjxiVQ962o15X+GZdZyayKgnPH/PFEO 8KgkkvUo3VWGf87HhGgYp3AIMH/t3oz1z2fuJ0QQeB0Wro7KS71x+t+tFZNmEnFD U3EDStDo4kkN3rgN3M4GNTanKjBBu7bTAi+4rmXec6xvg1fKlg8RoBvYvHrmOc3M PxUCjM7jHuTgps19ga+ww8csaelGMGc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:07 2025 by rpki-client