$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f0f3ea-1208-3121-b941-02893030e71a.roa File: a9f0f3ea-1208-3121-b941-02893030e71a.roa (raw, json) Hash identifier: BcMwWl2SkxdVKgn7jfOOi2j9z9G+R7DM3j72zXs5WBA= Subject key identifier: 03:1A:53:44:7E:0E:C0:E9:DE:99:EB:03:76:77:AB:1D:C1:9A:73:83 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5276DDC8F821F47B859A20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f0f3ea-1208-3121-b941-02893030e71a.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397207 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:76:dd:c8:f8:21:f4:7b:85:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=0dc93b02-fe12-40b1-a636-58283d48f3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:41:17:8b:93:c6:33:d5:86:51:22:a1:69:0c: ec:57:5f:ed:6f:05:04:e4:f3:6b:f8:fb:be:37:3f: 01:da:6c:63:e5:00:6a:12:bc:5e:f2:3c:c5:59:58: ca:25:7e:b1:b7:bf:01:cb:86:ad:9a:29:75:08:f6: 50:5c:49:e8:6c:a4:d5:63:0a:10:04:14:4b:98:e5: f5:a0:7d:00:fa:1d:b0:44:c6:73:54:14:ef:05:12: f0:4b:51:fa:78:23:69:9f:50:71:36:f7:58:5c:88: d6:4a:8e:5d:a3:6f:42:7e:78:53:ef:b1:b8:d8:25: 8b:91:59:06:5b:31:1b:af:33:37:c2:cc:02:85:20: 90:b1:2f:33:4d:86:ee:ae:84:05:b8:56:f4:54:3a: 31:ab:f8:0a:41:ab:57:a0:a8:cc:c8:0b:c6:49:22: fe:a6:9a:cf:01:02:56:0d:f5:39:d0:b6:1a:43:50: 71:78:60:a4:32:47:d9:7b:cc:d1:10:00:fa:ae:bc: c2:b3:f3:48:6e:4e:c6:42:c2:7c:74:6a:4b:64:29: cd:55:71:c1:6c:37:e2:48:17:7f:db:f3:92:d4:1a: b2:1a:69:f4:24:59:c9:33:a9:48:38:0a:79:bf:2c: 32:c0:c1:63:05:60:d8:19:a8:48:5f:bf:ae:ff:28: 59:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1A:53:44:7E:0E:C0:E9:DE:99:EB:03:76:77:AB:1D:C1:9A:73:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f0f3ea-1208-3121-b941-02893030e71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6f:fa:88:fe:09:15:e5:e9:ad:90:93:b6:ab:73:9d:41:1d: 6a:fc:1e:0f:71:71:0e:78:ae:79:fb:fd:09:90:dd:44:da:b7: f2:71:ba:7e:8f:f8:c4:44:a0:12:9b:56:3d:b4:5b:e6:30:be: 8a:d9:fc:14:8f:fd:59:43:9e:37:35:32:d7:2e:d3:27:e8:77: 3a:d5:11:6b:19:e7:1e:d8:20:11:44:3d:a2:99:e4:57:35:b8: e7:e3:13:fd:96:11:3e:0a:3f:95:fd:43:96:2a:93:f6:65:89: 2b:a1:90:8e:cc:49:2f:6f:c2:76:95:0c:d6:9e:55:0f:80:f4: 12:61:62:36:7c:09:38:5f:7b:c0:be:16:33:19:68:38:97:23: 5c:ab:b1:a5:9c:dc:1b:a1:91:0b:2c:6e:e4:e3:8f:04:b8:85: a8:ed:4f:04:7d:fd:43:29:72:6a:b1:a9:b4:14:e3:8e:83:5a: cc:37:d6:46:ce:47:3a:b9:47:3a:d8:62:72:91:61:a5:bc:ec: 57:4a:f5:b4:23:2e:74:d2:9b:ce:60:9b:6b:71:46:29:15:c7: 19:e1:d2:eb:93:e9:b7:71:1f:6a:8b:3c:e4:f3:2e:c4:97:6e: 6b:ca:3a:90:e3:b8:fa:84:a2:31:48:35:86:6f:e1:c5:66:1f: b0:39:3d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnbdyPgh9HuFmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MGRjOTNiMDItZmUxMi00MGIxLWE2MzYtNTgyODNkNDhmM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EEXi5PGM9WGUSKhaQzsV1/tbwUE5PNr+Pu+ Nz8B2mxj5QBqErxe8jzFWVjKJX6xt78By4atmil1CPZQXEnobKTVYwoQBBRLmOX1 oH0A+h2wRMZzVBTvBRLwS1H6eCNpn1BxNvdYXIjWSo5do29CfnhT77G42CWLkVkG WzEbrzM3wswChSCQsS8zTYburoQFuFb0VDoxq/gKQatXoKjMyAvGSSL+pprPAQJW DfU50LYaQ1BxeGCkMkfZe8zREAD6rrzCs/NIbk7GQsJ8dGpLZCnNVXHBbDfiSBd/ 2/OS1BqyGmn0JFnJM6lIOAp5vywywMFjBWDYGahIX7+u/yhZOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMaU0R+DsDp3pnrA3Z3qx3BmnODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlmMGYzZWEtMTIwOC0z MTIxLWI5NDEtMDI4OTMwMzBlNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpv+oj+CRXl6a2Qk7arc51BHWr8Hg9xcQ54rnn7/QmQ3UTat/Jxun6P +MREoBKbVj20W+YwvorZ/BSP/VlDnjc1Mtcu0yfodzrVEWsZ5x7YIBFEPaKZ5Fc1 uOfjE/2WET4KP5X9Q5Yqk/ZliSuhkI7MSS9vwnaVDNaeVQ+A9BJhYjZ8CThfe8C+ FjMZaDiXI1yrsaWc3BuhkQssbuTjjwS4hajtTwR9/UMpcmqxqbQU446DWsw31kbO Rzq5RzrYYnKRYaW87FdK9bQjLnTSm85gm2txRikVxxnh0uuT6bdxH2qLPOTzLsSX bmvKOpDjuPqEojFINYZv4cVmH7A5Pds= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:31 2025 by rpki-client