$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa File: a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa (raw, json) Hash identifier: MN9PftEPClYPlv/QDsd6NvrxwmJ6Ct1tYwf7BZMg514= Subject key identifier: 85:37:CE:39:6A:11:04:16:29:CC:78:73:CE:DD:3C:3E:FE:24:C7:29 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526CAB0C0C063C15FC5300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36623 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6c:ab:0c:0c:06:3c:15:fc:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1c206e3c-6f17-45e3-85de-770fe9279832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:71:c2:4b:65:68:a0:70:5a:f0:12:9b:ac:a9: ef:38:32:3f:e0:a9:07:98:70:20:58:69:cd:a8:ed: b4:fd:b4:68:ce:26:34:b0:ed:a1:d0:e5:25:b3:5d: 0a:46:5b:82:c4:cc:41:18:29:a1:ce:d0:4d:08:1b: ae:cb:a9:e9:c4:5a:47:bc:dc:d0:21:b7:a9:c9:09: fb:7e:41:b5:84:eb:41:f2:cf:06:4e:87:e6:2e:31: df:2d:5c:0d:32:8c:47:51:0d:cf:f0:4c:f1:68:19: c9:c5:9d:14:30:24:05:98:c7:a4:56:8b:d7:c6:47: 04:63:cc:7b:89:0e:8d:de:65:fb:7f:2f:07:e0:ef: 2b:08:5a:61:66:d3:e6:09:4d:1e:77:77:48:c8:8e: 04:35:3f:35:54:ac:8a:d7:c0:2d:29:e1:c1:fd:61: 5c:42:04:83:07:54:6d:3e:19:f9:51:cf:f2:ec:f4: 1e:f5:78:65:9e:47:62:69:14:0b:d3:e3:9a:03:89: ed:eb:00:38:91:e1:a6:12:a8:1e:3d:c1:2e:57:72: 52:91:3a:15:d6:67:10:d4:fb:29:ad:73:bf:74:a1: 6a:af:b7:18:77:27:87:38:73:3c:e0:26:95:6f:6a: 74:9e:7c:55:75:eb:93:c4:aa:75:1c:af:1a:00:06: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:37:CE:39:6A:11:04:16:29:CC:78:73:CE:DD:3C:3E:FE:24:C7:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0ca056b-e57e-3d69-912f-a9e818ce8b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e0:e5:b7:80:3d:d3:33:b5:9b:f0:89:7e:4c:e1:92:84:e4: 22:99:e4:f6:ee:fd:d9:51:f8:b4:d5:d5:f8:78:d4:5a:d7:72: 69:ce:e8:0e:d8:8b:41:f5:85:2d:3a:88:c3:6b:03:d6:31:2e: 7d:ef:35:26:12:0e:9a:99:e3:50:17:44:fc:9b:07:4a:e5:cc: f9:a5:91:74:9a:da:a6:b9:ab:41:b0:31:f5:0b:d6:49:e8:1b: d2:01:cc:c1:fb:73:06:46:91:be:8a:45:f2:cb:2c:4e:6e:1e: 21:e2:eb:c9:a5:bf:10:8f:a1:bd:a5:46:84:1d:dd:1d:e0:ee: 14:92:bf:7f:aa:58:b3:c5:57:e3:f7:dd:48:ac:15:f6:7b:f2: df:81:8e:eb:93:21:07:43:1c:aa:ec:39:d1:22:e3:a4:26:0f: be:50:b5:95:8b:b7:99:9f:f6:3b:54:cd:c1:50:2c:9f:39:c3: 66:46:05:63:77:b8:6d:b6:37:c2:0e:1f:a3:46:0a:e5:6c:91: 94:29:65:f0:66:12:ac:86:ef:4a:97:47:28:69:b2:a1:45:07: b7:bb:63:71:b6:59:92:b4:b7:31:8c:e9:4b:a6:9a:15:ff:01: 9d:aa:b9:c1:62:60:90:0d:ca:a7:34:eb:b3:b0:27:e4:d8:f3: 8b:c4:d9:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmyrDAwGPBX8UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWMyMDZlM2MtNmYxNy00NWUzLTg1ZGUtNzcwZmU5Mjc5ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnHCS2VooHBa8BKbrKnvODI/4KkHmHAgWGnN qO20/bRoziY0sO2h0OUls10KRluCxMxBGCmhztBNCBuuy6npxFpHvNzQIbepyQn7 fkG1hOtB8s8GTofmLjHfLVwNMoxHUQ3P8EzxaBnJxZ0UMCQFmMekVovXxkcEY8x7 iQ6N3mX7fy8H4O8rCFphZtPmCU0ed3dIyI4ENT81VKyK18AtKeHB/WFcQgSDB1Rt Phn5Uc/y7PQe9XhlnkdiaRQL0+OaA4nt6wA4keGmEqgePcEuV3JSkToV1mcQ1Psp rXO/dKFqr7cYdyeHOHM84CaVb2p0nnxVdeuTxKp1HK8aAAb6fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU3zjlqEQQWKcx4c87dPD7+JMcpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTBjYTA1NmItZTU3ZS0z ZDY5LTkxMmYtYTllODE4Y2U4Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7g5beAPdMztZvwiX5M4ZKE5CKZ5Pbu/dlR+LTV1fh41FrXcmnO6A7Y i0H1hS06iMNrA9YxLn3vNSYSDpqZ41AXRPybB0rlzPmlkXSa2qa5q0GwMfUL1kno G9IBzMH7cwZGkb6KRfLLLE5uHiHi68mlvxCPob2lRoQd3R3g7hSSv3+qWLPFV+P3 3UisFfZ78t+BjuuTIQdDHKrsOdEi46QmD75QtZWLt5mf9jtUzcFQLJ85w2ZGBWN3 uG22N8IOH6NGCuVskZQpZfBmEqyG70qXRyhpsqFFB7e7Y3G2WZK0tzGM6UummhX/ AZ2qucFiYJANyqc067OwJ+TY84vE2Rg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:29:59 2025 by rpki-client