$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d168a50-67aa-3da5-aab3-bc5e7d8e6b16.roa File: 9d168a50-67aa-3da5-aab3-bc5e7d8e6b16.roa (raw, json) Hash identifier: 0NY2YXQfmHTCFZD0fy+tOgy+fOD+WLt1ehx3ej+f/Z4= Subject key identifier: AE:79:76:35:CF:4A:0C:29:4D:DC:6B:2F:86:E4:0F:24:41:C4:84:59 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D7BE1EE993D1BE033CC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d168a50-67aa-3da5-aab3-bc5e7d8e6b16.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 20431 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d7:be:1e:e9:93:d1:be:03:3c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=eeeb4ae5-cd46-44e1-ac4d-053df60bee26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:50:aa:23:d5:0e:75:6d:82:32:ee:44:77: cf:98:0f:db:98:7e:f9:f0:db:43:b0:5d:2d:c8:a1: 8c:10:44:76:8c:cd:ce:dd:41:80:c6:4a:cf:4f:06: f6:39:cd:cb:c7:c5:92:05:90:6c:1d:d8:45:87:80: be:f9:6a:e7:93:02:54:43:6d:fe:5e:6c:0d:67:a1: 74:fe:f2:11:b0:ab:f1:81:aa:96:6c:21:b3:41:ee: b5:62:8b:5a:fd:81:d7:da:48:1e:04:9e:69:02:16: ed:ee:e8:88:68:58:d8:44:56:6b:96:e1:d2:6f:41: 54:9f:25:42:6f:05:72:17:d0:60:9f:10:5b:b2:4b: 9b:db:a6:18:37:9b:f5:50:79:e2:b8:ad:a6:d3:a0: 72:80:67:1f:d7:b2:ea:2c:75:56:47:ce:e3:7a:44: db:59:2a:4a:e0:fa:5b:2a:01:8b:89:44:1d:a4:b1: 3e:f0:2b:8f:ad:98:fd:0a:73:a4:f0:cf:37:b1:84: cc:4d:4a:7a:c3:ee:0b:9a:4a:eb:e2:37:26:b9:9f: ca:69:bc:53:71:78:0b:b3:62:8c:f3:98:89:ea:18: 3a:c0:06:19:88:90:e3:25:1e:43:0f:c0:e9:68:b5: 8d:20:53:20:9b:fd:49:c7:0f:80:89:70:71:38:d8: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:76:35:CF:4A:0C:29:4D:DC:6B:2F:86:E4:0F:24:41:C4:84:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d168a50-67aa-3da5-aab3-bc5e7d8e6b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:e9:9e:47:06:d1:36:5c:a0:d7:90:f5:bc:84:80:fe:52:14: 9c:36:f8:07:e6:ef:6d:27:34:be:32:a3:d0:00:af:c4:1b:ce: 3c:b5:a7:e6:50:ab:29:56:24:80:f0:4e:90:46:c3:45:2a:f4: 6a:4f:45:95:6b:76:53:0a:a6:d1:a2:79:7e:6d:e6:b7:7d:ec: 19:9e:09:26:8c:06:08:34:8c:a2:54:97:5c:68:32:bf:7e:21: 12:3f:05:8a:8e:dc:b5:3a:46:0a:ff:71:3c:19:bb:4d:7c:f2: 87:82:b5:34:88:85:56:62:19:69:ac:99:ee:d1:c7:c0:64:86: 47:d4:0c:9a:48:b9:10:3e:c0:89:88:28:b9:08:10:59:09:6c: b4:a2:85:24:9f:0b:8d:63:7c:ca:bf:d7:33:ae:61:42:7f:1f: b0:6c:1f:94:52:73:89:60:9c:4a:a8:27:cb:07:56:e0:0f:e8: 96:59:73:16:b1:0d:e7:c3:2a:98:a4:ad:47:26:00:5b:95:06: 73:d8:1d:9a:37:02:1d:37:2d:90:6b:28:82:e7:9b:b8:c7:1a: 1f:fb:10:86:1b:f0:ed:03:06:55:46:7b:11:e2:cb:df:14:b0: e2:e5:3e:2f:ad:fa:c7:88:59:bc:20:3b:3f:37:c6:d0:9d:90: f9:42:e9:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgde+HumT0b4DPMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZWVlYjRhZTUtY2Q0Ni00NGUxLWFjNGQtMDUzZGY2MGJlZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj5QqiPVDnVtgjLuRHfPmA/bmH758NtDsF0t yKGMEER2jM3O3UGAxkrPTwb2Oc3Lx8WSBZBsHdhFh4C++WrnkwJUQ23+XmwNZ6F0 /vIRsKvxgaqWbCGzQe61Yota/YHX2kgeBJ5pAhbt7uiIaFjYRFZrluHSb0FUnyVC bwVyF9BgnxBbskub26YYN5v1UHniuK2m06BygGcf17LqLHVWR87jekTbWSpK4Ppb KgGLiUQdpLE+8CuPrZj9CnOk8M83sYTMTUp6w+4Lmkrr4jcmuZ/KabxTcXgLs2KM 85iJ6hg6wAYZiJDjJR5DD8DpaLWNIFMgm/1Jxw+AiXBxONgO2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK55djXPSgwpTdxrL4bkDyRBxIRZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWQxNjhhNTAtNjdhYS0z ZGE1LWFhYjMtYmM1ZTdkOGU2YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfpnkcG0TZcoNeQ9byEgP5SFJw2+Afm720nNL4yo9AAr8Qbzjy1p+ZQ qylWJIDwTpBGw0Uq9GpPRZVrdlMKptGieX5t5rd97BmeCSaMBgg0jKJUl1xoMr9+ IRI/BYqO3LU6Rgr/cTwZu0188oeCtTSIhVZiGWmsme7Rx8BkhkfUDJpIuRA+wImI KLkIEFkJbLSihSSfC41jfMq/1zOuYUJ/H7BsH5RSc4lgnEqoJ8sHVuAP6JZZcxax DefDKpikrUcmAFuVBnPYHZo3Ah03LZBrKILnm7jHGh/7EIYb8O0DBlVGexHiy98U sOLlPi+t+seIWbwgOz83xtCdkPlC6bU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:22 2025 by rpki-client