$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa File: a849975a-8490-3533-b5a2-2658fda4ea2b.roa (raw, json) Hash identifier: sz6eHkp40bz2qkrDJBbxtjlIRWZGTW4LoxMwtJudB6Q= Subject key identifier: 3B:6D:91:F9:99:5A:65:8B:BE:0F:1E:12:6C:41:A1:54:6C:61:29:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBBB1033BE243C3D755B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396585 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:bb:10:33:be:24:3c:3d:75:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=831a3bfa-95c1-4e24-9e85-6989f724482b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:22:f6:65:be:e8:5e:87:3f:11:68:28:0a:a4: 3d:f3:83:5c:64:7f:75:06:c2:db:1f:cc:a4:ad:04: 1f:58:09:e5:cd:1d:85:c2:bf:ee:94:6f:4f:ab:e9: 7e:f1:38:af:b4:ef:7d:dd:72:67:b5:79:9f:22:52: 14:71:44:99:7d:da:fb:cd:5d:6c:e9:f0:2e:94:fc: cd:ad:3f:74:c7:8b:2c:30:a2:b5:c1:d9:8f:e8:3d: 9f:1c:cc:ef:4a:96:8c:b9:ae:4e:08:f6:6e:f3:38: 3b:65:8a:c7:5f:ca:6a:b9:73:4c:0d:0d:63:e9:27: df:68:88:22:4d:d1:33:90:ce:b7:00:fb:55:ba:4c: b9:1d:20:22:49:4a:2c:50:c9:4d:f9:29:c9:e7:d3: fe:86:1d:b7:cf:9a:78:11:6f:c2:74:69:92:a8:dd: f2:1d:e4:96:6e:2f:66:8a:5a:b6:60:05:57:ab:db: bc:bb:1f:81:51:51:73:90:d3:9b:1d:05:32:63:34: 14:05:0c:53:7f:f9:f5:63:2f:9e:2b:4d:f2:0a:4c: 19:cf:ad:d5:9b:57:9a:f5:d0:72:4e:58:3e:37:bf: 4f:5f:49:72:78:e8:34:80:16:65:0b:1f:f1:be:ad: d8:7c:d5:23:ad:82:7f:38:1e:02:f7:e2:b6:74:24: 28:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6D:91:F9:99:5A:65:8B:BE:0F:1E:12:6C:41:A1:54:6C:61:29:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ba:42:d7:b9:2e:01:3e:58:6a:d9:72:db:f0:8e:84:cb:92: 13:9f:74:89:8a:b3:e0:72:c4:0c:20:45:77:80:8b:98:f0:65: 85:c2:df:da:20:c8:af:d9:49:63:ae:42:96:0f:de:47:c8:6c: 70:3c:ca:72:03:c6:7c:3a:75:7a:dc:a5:b7:e1:44:63:72:45: da:18:b5:c9:c0:77:37:e8:3f:01:41:c6:ac:57:ca:90:4d:31: 1b:94:e1:2e:db:91:ed:9a:f0:15:02:45:57:e2:90:7c:b6:25: 8b:f2:fb:8d:67:88:ac:d9:83:cd:5a:da:02:ff:43:7a:5c:a0: 78:e1:1e:18:89:01:8e:d8:d5:bd:00:02:e8:43:82:d1:82:0f: f0:48:6c:55:d7:9d:8e:f2:d5:ea:1c:59:8d:76:10:5d:74:30: a0:ce:c7:a8:72:84:71:22:fc:31:47:69:4e:37:69:12:be:6d: 4e:8e:f2:8a:3b:9b:5e:11:45:07:cd:de:06:87:34:52:43:3c: c9:2f:7e:d7:a6:d1:8d:a5:fb:26:4b:3f:51:a7:4b:e3:7e:75: 11:d1:39:c5:8e:e8:a3:01:1a:84:78:9c:e1:f9:6f:ac:05:8f: c6:68:07:68:a8:ea:41:26:1b:f5:a8:03:4a:f1:3f:2c:e3:96: 36:d0:e4:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27sQM74kPD11W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk ODMxYTNiZmEtOTVjMS00ZTI0LTllODUtNjk4OWY3MjQ0ODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCL2Zb7oXoc/EWgoCqQ984NcZH91BsLbH8yk rQQfWAnlzR2Fwr/ulG9Pq+l+8TivtO993XJntXmfIlIUcUSZfdr7zV1s6fAulPzN rT90x4ssMKK1wdmP6D2fHMzvSpaMua5OCPZu8zg7ZYrHX8pquXNMDQ1j6SffaIgi TdEzkM63APtVuky5HSAiSUosUMlN+SnJ59P+hh23z5p4EW/CdGmSqN3yHeSWbi9m ilq2YAVXq9u8ux+BUVFzkNObHQUyYzQUBQxTf/n1Yy+eK03yCkwZz63Vm1ea9dBy Tlg+N79PX0lyeOg0gBZlCx/xvq3YfNUjrYJ/OB4C9+K2dCQo8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDttkfmZWmWLvg8eEmxBoVRsYSntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg0OTk3NWEtODQ5MC0z NTMzLWI1YTItMjY1OGZkYTRlYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG6Qte5LgE+WGrZctvwjoTLkhOfdImKs+ByxAwgRXeAi5jwZYXC39og yK/ZSWOuQpYP3kfIbHA8ynIDxnw6dXrcpbfhRGNyRdoYtcnAdzfoPwFBxqxXypBN MRuU4S7bke2a8BUCRVfikHy2JYvy+41niKzZg81a2gL/Q3pcoHjhHhiJAY7Y1b0A AuhDgtGCD/BIbFXXnY7y1eocWY12EF10MKDOx6hyhHEi/DFHaU43aRK+bU6O8oo7 m14RRQfN3gaHNFJDPMkvftem0Y2l+yZLP1GnS+N+dRHROcWO6KMBGoR4nOH5b6wF j8ZoB2io6kEmG/WoA0rxPyzjljbQ5J0= -----END CERTIFICATE-----Generated at Sat Aug 23 14:08:48 2025 by rpki-client