$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa00a88e-f04a-3e11-a54e-ce9e4e9e43d2.roa File: aa00a88e-f04a-3e11-a54e-ce9e4e9e43d2.roa (raw, json) Hash identifier: yQQ8uDorwkrsE7TzeqKtTpRyW23M2RFzU/0vktQPN6I= Subject key identifier: E6:5A:1A:62:EE:A2:36:C0:FB:E9:AC:99:AD:9E:60:E4:7A:1A:C9:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B92DD92B5945FF28CE5696240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa00a88e-f04a-3e11-a54e-ce9e4e9e43d2.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 396561 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:92:b5:94:5f:f2:8c:e5:69:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=ebd1c61d-c803-46f9-b15f-a7c551399129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:0d:d4:1c:42:49:1d:07:62:ff:bb:3b:d0: 12:8b:d4:d2:c2:b4:a5:eb:54:4d:28:7e:7b:7a:0f: 23:87:26:09:2c:15:49:86:ed:59:2f:e2:ea:b0:c7: 77:d2:73:fe:cf:10:f8:c7:c9:b7:89:0f:11:14:f2: ac:96:3a:cf:b5:65:2d:fd:f0:a4:fc:82:62:0e:05: 55:d5:a9:45:ef:82:2f:fa:b6:fb:27:94:1b:a4:74: 27:0b:03:f2:df:e8:2c:7c:52:1b:b4:4c:8c:b6:87: cc:2b:6c:37:0c:dd:63:b7:a7:58:23:f1:05:c8:8f: cb:ac:fa:82:e2:aa:30:d4:db:6a:94:0b:6e:4f:2b: 94:f1:1d:93:62:0d:67:39:e4:f8:82:ec:dd:57:78: 46:71:14:6f:7a:13:a5:a1:e9:77:bc:d4:bd:c8:0d: be:90:bc:50:75:d4:1b:72:a6:e9:e2:ce:1a:17:e2: 79:54:d3:54:fb:78:ff:48:12:42:1b:2d:9e:68:b4: 2e:0d:73:7a:90:32:e8:3b:0c:2a:3c:dc:06:89:d5: 82:79:67:05:36:73:fc:bc:51:01:86:6f:97:38:ac: 55:31:03:a4:ac:53:30:95:7e:ba:d8:be:ef:8a:3b: 6d:9c:ce:29:7a:2f:9e:6a:ad:8b:b8:38:2d:52:8b: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:1A:62:EE:A2:36:C0:FB:E9:AC:99:AD:9E:60:E4:7A:1A:C9:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa00a88e-f04a-3e11-a54e-ce9e4e9e43d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:22:1a:d5:79:04:0b:dc:79:e8:18:7c:2e:6f:37:f6:11:ee: 64:ef:5e:3d:73:82:78:51:64:c7:bd:6f:3b:cc:30:57:e4:99: 7e:98:3b:02:c9:f9:c3:10:af:7d:d2:0c:ee:7c:0c:7d:9f:05: 78:cd:75:d5:2a:83:5e:20:d6:01:aa:03:94:02:91:04:f6:b9: 15:c5:6e:6c:ce:1a:72:96:87:cb:04:f5:63:b4:a4:d3:03:86: 9b:f8:53:ff:b8:b7:d0:13:f6:2e:7a:c7:1b:99:53:1d:02:5a: a0:58:92:ac:09:fb:14:50:6b:86:83:d1:24:35:c4:59:32:6d: 16:d6:16:38:77:40:c5:1b:f3:66:48:25:1d:0e:3d:c1:85:69: 40:a9:8a:b9:19:3b:79:ae:0b:39:f2:38:35:a8:38:44:61:09: ae:db:31:a7:b1:ca:4d:fd:e0:c4:bd:b3:86:e7:bf:60:89:23: 2e:dc:5d:f5:09:f8:ff:ff:af:a2:0d:50:7b:33:4f:90:9e:9e: d1:32:3b:ad:b8:80:d7:7b:7c:96:c3:da:57:44:62:ea:58:f9: c0:01:5a:76:ac:61:03:c1:8b:5d:9e:30:b0:d1:1b:38:fc:cf: 94:1d:30:c5:2c:e2:86:7d:7b:b2:3d:c2:4b:f3:33:d5:59:38: 1d:fc:32:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZK1lF/yjOVpYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZWJkMWM2MWQtYzgwMy00NmY5LWIxNWYtYTdjNTUxMzk5MTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx04N1BxCSR0HYv+7O9ASi9TSwrSl61RNKH57 eg8jhyYJLBVJhu1ZL+LqsMd30nP+zxD4x8m3iQ8RFPKsljrPtWUt/fCk/IJiDgVV 1alF74Iv+rb7J5QbpHQnCwPy3+gsfFIbtEyMtofMK2w3DN1jt6dYI/EFyI/LrPqC 4qow1NtqlAtuTyuU8R2TYg1nOeT4guzdV3hGcRRvehOloel3vNS9yA2+kLxQddQb cqbp4s4aF+J5VNNU+3j/SBJCGy2eaLQuDXN6kDLoOwwqPNwGidWCeWcFNnP8vFEB hm+XOKxVMQOkrFMwlX662L7vijttnM4pei+eaq2LuDgtUovaRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZaGmLuojbA++msma2eYOR6Gsm6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEwMGE4OGUtZjA0YS0z ZTExLWE1NGUtY2U5ZTRlOWU0M2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwiGtV5BAvceegYfC5vN/YR7mTvXj1zgnhRZMe9bzvMMFfkmX6YOwLJ +cMQr33SDO58DH2fBXjNddUqg14g1gGqA5QCkQT2uRXFbmzOGnKWh8sE9WO0pNMD hpv4U/+4t9AT9i56xxuZUx0CWqBYkqwJ+xRQa4aD0SQ1xFkybRbWFjh3QMUb82ZI JR0OPcGFaUCpirkZO3muCznyODWoOERhCa7bMaexyk394MS9s4bnv2CJIy7cXfUJ +P//r6INUHszT5CentEyO624gNd7fJbD2ldEYupY+cABWnasYQPBi12eMLDRGzj8 z5QdMMUs4oZ9e7I9wkvzM9VZOB38MkE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:20:45 2025 by rpki-client