$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e8e00b9-3d27-3f06-8a5d-84f2ecc1c5f2.roa File: 9e8e00b9-3d27-3f06-8a5d-84f2ecc1c5f2.roa (raw, json) Hash identifier: dXg5lDqCMkdOwRypKf6zTCkVr2rkPQLRoBSMS0j3bmU= Subject key identifier: 41:01:D9:18:D2:DB:1E:97:3C:12:16:4E:B9:9A:A7:F6:FE:85:66:EF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B92DD952D1D6A49F5851ACCD0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e8e00b9-3d27-3f06-8a5d-84f2ecc1c5f2.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 396609 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:95:2d:1d:6a:49:f5:85:1a:cc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=78b8fe2b-2678-43cd-9a35-5d77997585ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:21:48:8b:6b:ab:9d:84:5e:f1:42:3e:69:38: 5f:58:50:a0:7c:89:4a:af:21:ea:68:db:02:e1:61: 2e:e3:a6:7b:85:aa:85:26:52:ad:f6:d1:69:55:21: 99:2d:d5:84:cc:70:46:64:4f:0e:b1:a0:ab:3e:65: 3b:c2:fc:87:bc:0e:07:67:05:ac:e0:03:2c:95:4b: 85:de:b1:b9:2a:9f:42:8e:11:ec:c9:6e:15:0e:2c: 51:6c:07:66:ce:a7:90:63:db:5f:1c:a7:77:cb:ca: 31:3e:e3:34:42:c5:f0:f1:11:44:ae:b5:2f:f3:ec: f6:df:c6:2e:f1:9a:85:fe:95:c1:4d:c9:93:7f:29: 7a:9e:ef:ea:70:b1:5b:cb:54:12:dc:32:2e:e3:b9: 2c:db:69:a2:22:ab:cc:76:bd:32:61:f6:35:78:31: ca:9f:a8:e3:43:1f:8f:0d:5e:2c:06:a5:e6:87:53: c0:5f:3e:2e:8d:e4:0d:b8:18:10:a3:26:41:f5:cf: 24:5b:13:86:e3:86:31:9d:80:68:7c:90:ff:69:76: ea:b5:78:e7:a2:54:12:82:30:fe:1c:d6:fb:26:c4: c7:81:bf:3d:4f:95:43:91:f9:9a:75:02:d8:3f:76: 59:f0:02:cd:5c:71:d7:7d:7c:60:38:76:ff:f7:9f: 4c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:01:D9:18:D2:DB:1E:97:3C:12:16:4E:B9:9A:A7:F6:FE:85:66:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e8e00b9-3d27-3f06-8a5d-84f2ecc1c5f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b3:08:6e:e6:f2:58:23:1e:64:15:49:4a:a3:89:9d:f8:51: 25:11:bc:15:c8:55:5b:f2:f3:02:a4:ea:74:d9:b8:31:95:77: 6b:08:1a:07:0c:31:b3:a1:85:55:9e:c5:ca:61:86:9a:ec:89: 5d:98:5a:e9:49:e2:22:8a:32:ba:d4:5b:cf:0c:d6:a1:19:48: 1b:f5:d7:b3:90:6d:a6:51:16:ac:e0:fb:36:f6:e9:12:81:03: 10:1c:27:b4:5d:e1:81:3d:2c:2f:cd:6b:27:25:34:f7:25:62: 58:3a:66:8d:22:a8:45:39:e9:5d:f3:63:53:b3:a3:89:10:73: 09:35:cd:6c:95:55:88:8c:f2:c2:15:d2:e2:d2:e7:69:7a:18: 82:d3:c7:40:7f:b0:06:e4:07:a2:f2:49:cd:97:8c:e9:fa:8b: d7:12:5a:71:40:ce:b5:5f:aa:8d:63:2b:6a:d7:8e:76:8b:3d: 0c:3a:a5:23:d7:c8:37:c2:e9:99:d0:7c:e0:23:91:80:0e:f5: 06:8b:2f:e5:4b:83:56:89:9d:1a:a8:a1:08:24:72:f6:37:ce: 0e:03:0c:a5:91:13:4e:a3:1a:58:44:eb:47:e2:d0:81:22:59: 57:7e:a0:8e:74:98:f5:f4:0e:be:34:ec:15:cd:2f:d4:d6:8b: 81:68:a7:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZUtHWpJ9YUazNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NzhiOGZlMmItMjY3OC00M2NkLTlhMzUtNWQ3Nzk5NzU4NWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyFIi2urnYRe8UI+aThfWFCgfIlKryHqaNsC 4WEu46Z7haqFJlKt9tFpVSGZLdWEzHBGZE8OsaCrPmU7wvyHvA4HZwWs4AMslUuF 3rG5Kp9CjhHsyW4VDixRbAdmzqeQY9tfHKd3y8oxPuM0QsXw8RFErrUv8+z238Yu 8ZqF/pXBTcmTfyl6nu/qcLFby1QS3DIu47ks22miIqvMdr0yYfY1eDHKn6jjQx+P DV4sBqXmh1PAXz4ujeQNuBgQoyZB9c8kWxOG44YxnYBofJD/aXbqtXjnolQSgjD+ HNb7JsTHgb89T5VDkfmadQLYP3ZZ8ALNXHHXfXxgOHb/959MFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEB2RjS2x6XPBIWTrmap/b+hWbvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWU4ZTAwYjktM2QyNy0z ZjA2LThhNWQtODRmMmVjYzFjNWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmzCG7m8lgjHmQVSUqjiZ34USURvBXIVVvy8wKk6nTZuDGVd2sIGgcM MbOhhVWexcphhprsiV2YWulJ4iKKMrrUW88M1qEZSBv117OQbaZRFqzg+zb26RKB AxAcJ7Rd4YE9LC/NayclNPclYlg6Zo0iqEU56V3zY1Ozo4kQcwk1zWyVVYiM8sIV 0uLS52l6GILTx0B/sAbkB6LySc2XjOn6i9cSWnFAzrVfqo1jK2rXjnaLPQw6pSPX yDfC6ZnQfOAjkYAO9QaLL+VLg1aJnRqooQgkcvY3zg4DDKWRE06jGlhE60fi0IEi WVd+oI50mPX0Dr407BXNL9TWi4FopzI= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:05 2025 by rpki-client