$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04a5c4d-ca00-3e45-b02a-602b6f875aa5.roa File: a04a5c4d-ca00-3e45-b02a-602b6f875aa5.roa (raw, json) Hash identifier: A1sjlazxb0JpMwunpNGlpw45WZCNJKcQcPKASX+/WmI= Subject key identifier: AC:EF:9C:EE:11:E8:D5:00:31:E4:1F:80:A4:4E:50:F9:86:22:DC:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5277A3214EB41857C4F900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04a5c4d-ca00-3e45-b02a-602b6f875aa5.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396634 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:77:a3:21:4e:b4:18:57:c4:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=b4c139d2-a064-4667-a7fd-39ee2fe50ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:67:a7:8f:bd:89:3b:0c:5a:1c:73:ab:c1: 58:7b:9c:a9:2d:26:c8:9e:0f:40:bf:06:19:a5:08: 7a:30:35:05:d2:58:de:fe:d1:da:b6:cf:66:f1:87: a3:6c:cc:47:75:e0:9e:63:ec:b4:47:2e:07:a6:e8: b0:e3:c7:27:b4:17:c8:1a:eb:37:7f:40:ef:65:d7: 44:59:d6:58:ce:b5:0e:0f:41:c1:63:74:9d:20:09: 48:ec:f2:b4:b9:b1:ec:90:30:85:0e:68:dc:8b:75: fe:b2:57:ac:eb:00:5e:09:bb:c1:14:92:44:85:f1: fd:b3:d7:22:ff:91:a5:72:f8:f9:5f:41:94:58:f0: d3:78:da:88:03:95:3f:e0:fe:40:90:c1:96:25:98: 52:08:77:cf:8f:3d:be:e1:16:8c:5e:c9:86:f7:cb: c0:7a:4a:00:be:35:7c:98:c3:1f:eb:2d:91:bf:c1: db:95:c8:08:cf:70:4e:f6:69:64:58:0d:89:83:69: 28:4b:c5:cc:c1:f1:3c:68:91:00:37:fa:63:9d:50: c1:c6:e0:1c:f1:d7:d8:d2:4f:61:f4:c2:cc:55:11: 41:99:1b:7d:73:6c:cb:93:7f:1f:9f:b5:5b:09:a5: 50:43:36:ca:e3:34:2f:72:78:3d:19:3d:79:33:9b: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:EF:9C:EE:11:E8:D5:00:31:E4:1F:80:A4:4E:50:F9:86:22:DC:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a04a5c4d-ca00-3e45-b02a-602b6f875aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d3:82:aa:88:66:04:cf:f8:44:26:8a:09:06:75:64:40:2d: 8c:3c:1b:02:2f:1a:9b:de:ed:0e:b2:9e:3b:ac:af:f1:4e:a0: 50:fc:66:b7:78:41:81:58:7a:c8:30:fd:46:de:ee:cf:18:47: ab:ed:fa:f4:82:7c:f0:86:91:ed:0c:70:19:fc:bd:5c:b0:27: ec:8e:e6:6f:23:da:a9:8b:1d:69:84:ea:f4:a5:73:89:33:49: d9:a0:eb:a2:e1:5e:14:09:a3:4d:e2:d5:e4:c2:15:fe:36:1d: ef:60:eb:2d:40:c0:5b:e6:1d:2f:b6:32:90:6a:bb:e3:2c:ea: c1:4c:e5:33:45:8e:7a:3f:fa:2e:16:6f:bd:cd:5d:eb:01:a0: 9b:ea:4d:c4:03:da:96:c9:c9:03:9a:e5:64:65:e8:8c:c0:a9: b8:3b:b4:a0:84:d4:7d:29:a3:b0:c1:f5:d0:74:d0:fb:98:27: 4c:e8:fc:a2:8d:fc:67:6c:c0:62:a3:78:3f:0b:ff:c0:f9:94: 70:cc:89:7d:81:9b:24:36:b0:ad:e3:6b:41:20:ea:13:04:cf: 74:a9:29:e3:2d:90:a2:50:f8:2f:ec:60:41:44:ba:0d:37:41: e0:8d:ae:8e:f5:04:84:78:57:49:31:af:f5:ce:37:af:9a:8a: d4:51:ec:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnejIU60GFfE+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YjRjMTM5ZDItYTA2NC00NjY3LWE3ZmQtMzllZTJmZTUwZGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6xnp4+9iTsMWhxzq8FYe5ypLSbIng9AvwYZ pQh6MDUF0lje/tHats9m8YejbMxHdeCeY+y0Ry4Hpuiw48cntBfIGus3f0DvZddE WdZYzrUOD0HBY3SdIAlI7PK0ubHskDCFDmjci3X+sles6wBeCbvBFJJEhfH9s9ci /5Glcvj5X0GUWPDTeNqIA5U/4P5AkMGWJZhSCHfPjz2+4RaMXsmG98vAekoAvjV8 mMMf6y2Rv8HblcgIz3BO9mlkWA2Jg2koS8XMwfE8aJEAN/pjnVDBxuAc8dfY0k9h 9MLMVRFBmRt9c2zLk38fn7VbCaVQQzbK4zQvcng9GT15M5vUrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKzvnO4R6NUAMeQfgKROUPmGItwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTA0YTVjNGQtY2EwMC0z ZTQ1LWIwMmEtNjAyYjZmODc1YWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLTgqqIZgTP+EQmigkGdWRALYw8GwIvGpve7Q6ynjusr/FOoFD8Zrd4 QYFYesgw/Ube7s8YR6vt+vSCfPCGke0McBn8vVywJ+yO5m8j2qmLHWmE6vSlc4kz Sdmg66LhXhQJo03i1eTCFf42He9g6y1AwFvmHS+2MpBqu+Ms6sFM5TNFjno/+i4W b73NXesBoJvqTcQD2pbJyQOa5WRl6IzAqbg7tKCE1H0po7DB9dB00PuYJ0zo/KKN /GdswGKjeD8L/8D5lHDMiX2BmyQ2sK3ja0Eg6hMEz3SpKeMtkKJQ+C/sYEFEug03 QeCNro71BIR4V0kxr/XON6+aitRR7Og= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:30 2025 by rpki-client