$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96ce068a-a4ef-35bd-909c-99f3a1201120.roa File: 96ce068a-a4ef-35bd-909c-99f3a1201120.roa (raw, json) Hash identifier: KaCV0zwN2aaaKeWY2X4sQzcKZTEMsP0BlLW5jWHYPac= Subject key identifier: C6:D8:6E:09:32:92:3F:4C:1D:CD:D4:6F:90:70:B7:0C:9F:32:85:5B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5269446B38D7B89C8C0B40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96ce068a-a4ef-35bd-909c-99f3a1201120.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396751 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:69:44:6b:38:d7:b8:9c:8c:0b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6ad81776-9550-41f9-88e0-07bb422f9772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:ba:54:03:1a:41:0f:d7:a2:26:6e:27:ee: 5a:96:31:f7:32:96:03:e7:86:f0:ff:7d:1a:73:01: 10:20:48:f3:a2:86:fe:68:0b:50:65:9b:f7:0d:2f: f1:95:75:f8:85:cd:bf:35:cf:d1:b1:e9:9d:7e:d1: 6d:be:18:26:68:1d:30:0f:1e:65:47:d5:c7:2c:ea: 37:cc:8e:c1:f7:9e:fa:d5:61:56:0c:40:6d:30:70: 6d:a6:3d:fc:3f:93:29:a9:b8:8b:17:76:dc:c9:fa: 28:68:48:82:ef:0b:ef:57:33:58:1f:86:24:e1:e0: 46:f3:03:89:6b:e1:75:c3:c5:6a:be:0a:96:6b:d7: 62:97:34:f8:bc:86:72:2d:e6:3c:65:1f:70:31:9c: 55:39:56:c7:8c:af:22:95:2d:7c:42:db:ac:26:f1: c1:c3:57:b8:d9:03:b3:fb:5f:3f:7f:46:2d:a8:50: d9:79:5f:c6:93:dd:b1:af:fd:3f:d1:7e:2b:9b:0c: 8d:25:d7:04:c0:2f:49:53:8c:f3:df:68:fc:1d:51: 90:9c:12:aa:15:7c:2a:91:bd:4f:40:9f:c9:38:2a: 77:ca:65:19:6c:c7:5d:f3:9b:13:f9:45:76:e6:18: 10:1b:f9:74:71:8f:09:ae:3e:d1:ec:7f:33:00:fb: 55:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D8:6E:09:32:92:3F:4C:1D:CD:D4:6F:90:70:B7:0C:9F:32:85:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/96ce068a-a4ef-35bd-909c-99f3a1201120.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:05:2d:2b:3e:9d:b7:9e:a4:35:1b:ba:5b:0a:85:73:4a:63: 03:02:38:f3:0b:7d:ab:92:6f:d8:e7:28:3c:d9:ae:b9:84:4d: fd:b1:8a:29:b1:71:92:90:b2:fa:ae:6a:dd:ee:fc:9d:21:49: c8:5c:b1:88:81:51:d0:7d:44:f6:90:d9:41:85:01:19:b8:c6: e7:81:0b:71:c3:e5:d7:c6:77:cd:69:4f:1d:d4:3f:3c:79:1c: 49:dc:45:a7:1d:e0:e3:63:97:7a:1c:57:73:99:3f:72:37:97: ff:61:89:d1:eb:2a:e3:40:ca:aa:8c:eb:60:b6:3e:49:ba:f6: 54:18:42:a3:13:a0:de:b1:9f:d1:da:0a:62:6f:cd:aa:42:77: a4:d2:3a:0e:53:c3:19:30:be:b6:81:62:57:8d:8a:a4:4f:6e: 86:91:2c:3c:3a:15:5c:35:7b:73:3b:f9:45:77:f6:24:ec:01: 2a:63:9d:2c:22:7e:22:dc:ea:01:20:3f:00:b8:a8:c3:ac:fb: 8c:72:ec:af:62:fc:0e:fd:ed:11:ad:3b:b6:42:88:cd:77:6b: a2:66:5c:01:35:3b:0f:02:fe:de:6e:c3:94:4c:07:66:c7:5c: 53:88:a5:e9:22:63:12:52:20:8b:f4:96:9d:b5:9f:f0:2c:10: 0e:23:74:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmlEazjXuJyMC0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NmFkODE3NzYtOTU1MC00MWY5LTg4ZTAtMDdiYjQyMmY5NzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wO6VAMaQQ/XoiZuJ+5aljH3MpYD54bw/30a cwEQIEjzoob+aAtQZZv3DS/xlXX4hc2/Nc/RsemdftFtvhgmaB0wDx5lR9XHLOo3 zI7B95761WFWDEBtMHBtpj38P5MpqbiLF3bcyfooaEiC7wvvVzNYH4Yk4eBG8wOJ a+F1w8VqvgqWa9dilzT4vIZyLeY8ZR9wMZxVOVbHjK8ilS18QtusJvHBw1e42QOz +18/f0YtqFDZeV/Gk92xr/0/0X4rmwyNJdcEwC9JU4zz32j8HVGQnBKqFXwqkb1P QJ/JOCp3ymUZbMdd85sT+UV25hgQG/l0cY8Jrj7R7H8zAPtV8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMbYbgkykj9MHc3Ub5BwtwyfMoVbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTZjZTA2OGEtYTRlZi0z NWJkLTkwOWMtOTlmM2ExMjAxMTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0FLSs+nbeepDUbulsKhXNKYwMCOPMLfauSb9jnKDzZrrmETf2xiimx cZKQsvquat3u/J0hSchcsYiBUdB9RPaQ2UGFARm4xueBC3HD5dfGd81pTx3UPzx5 HEncRacd4ONjl3ocV3OZP3I3l/9hidHrKuNAyqqM62C2Pkm69lQYQqMToN6xn9Ha CmJvzapCd6TSOg5TwxkwvraBYleNiqRPboaRLDw6FVw1e3M7+UV39iTsASpjnSwi fiLc6gEgPwC4qMOs+4xy7K9i/A797RGtO7ZCiM13a6JmXAE1Ow8C/t5uw5RMB2bH XFOIpekiYxJSIIv0lp21n/AsEA4jdMo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:40 2025 by rpki-client