$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbc4ad3-3fbc-33a2-b4a2-e0d0331abe12.roa File: acbc4ad3-3fbc-33a2-b4a2-e0d0331abe12.roa (raw, json) Hash identifier: 5O842bJQuAmNrZEGPYQdS5hbjzbBh/UG07Fj9Y2fY1Q= Subject key identifier: AF:C7:1C:E8:48:E4:26:4C:94:59:74:45:EC:38:49:DE:12:C4:92:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526E363DD5D41BB1426A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbc4ad3-3fbc-33a2-b4a2-e0d0331abe12.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396623 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6e:36:3d:d5:d4:1b:b1:42:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=7af28672-f810-474e-aea0-a52e2925ae57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0b:eb:ed:10:25:86:54:57:d9:b4:86:83:8e: df:85:70:58:e9:00:f1:1a:5b:b2:80:8e:1f:8f:83: 5c:da:98:7d:bb:54:42:0b:8c:5b:c2:6f:5a:fd:43: 37:b9:bd:18:b2:0a:cd:10:15:4e:85:85:ac:2a:f6: 4a:70:b5:ec:a1:0b:94:2e:b3:09:4e:9d:a2:49:57: 4f:7f:74:ab:90:ec:bc:f2:81:b5:63:ea:c5:97:e7: e5:ac:11:dc:86:78:cb:eb:fc:c8:e8:9a:6b:62:d8: 95:2f:6e:9b:49:36:e1:59:31:e5:58:f3:e7:25:56: 3a:79:f4:f9:93:f2:f2:1f:30:24:29:02:f4:9f:2b: dd:57:53:12:6d:77:58:ca:33:7b:0d:cc:49:55:a3: 37:ba:46:e1:f9:b5:7f:36:26:d3:41:90:f5:63:55: 25:5b:55:e2:0d:9a:97:54:6c:60:fb:95:8b:d3:5c: 0b:cd:1b:e5:7a:ea:15:a3:11:ce:ee:3a:d5:32:fe: 6a:c2:b6:8e:21:1a:be:62:ff:fb:85:36:32:5d:45: 8d:6f:85:d4:4d:74:20:ee:3b:53:92:08:26:bf:fe: c8:e7:85:5a:54:3e:d1:a4:47:7b:8b:bb:db:09:ce: 68:3a:95:f0:eb:7e:d1:63:39:fe:99:c6:d0:85:20: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C7:1C:E8:48:E4:26:4C:94:59:74:45:EC:38:49:DE:12:C4:92:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/acbc4ad3-3fbc-33a2-b4a2-e0d0331abe12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8e:44:e9:d6:3e:52:4e:58:90:1f:75:50:2a:53:c5:e6:8f: 82:bb:96:e7:b6:9e:75:31:84:31:28:da:96:27:5d:33:ad:be: b0:28:65:70:48:18:87:0e:ba:2f:27:95:ec:14:5c:89:ea:65: 76:91:c3:46:67:a4:dd:1f:df:ed:03:42:d7:5d:50:93:64:b9: 3b:5d:54:23:0c:c9:cc:23:f4:f9:ba:4c:ab:96:fc:db:12:99: a8:72:c5:4e:0e:f7:98:8a:88:8a:1e:e7:ce:a8:83:0c:79:b7: 1c:b9:63:84:5e:84:ee:05:d5:f5:75:9d:1f:91:52:b3:26:9c: 3c:04:15:b5:59:3f:dd:a1:e5:02:8e:a9:b6:05:21:b6:a4:98: b5:06:9f:9c:ed:a6:35:eb:9f:7a:5e:c0:70:6d:85:78:1c:8d: 35:89:08:ea:b1:57:4f:82:95:f7:a9:7b:da:48:47:aa:f3:66: 32:39:83:e6:8d:bb:9d:c6:07:ab:a4:ad:e2:95:f4:ec:cc:1b: ff:a5:fa:1d:7c:2f:3e:45:59:92:f6:86:9e:d8:9f:00:78:55: 1e:ea:e5:56:c7:b0:a5:9b:40:16:50:45:1e:d8:f4:22:e2:e2: aa:cc:20:28:ab:27:67:f3:73:40:8d:54:24:af:0d:88:cb:3d: 59:46:c6:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Um42PdXUG7FCaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk N2FmMjg2NzItZjgxMC00NzRlLWFlYTAtYTUyZTI5MjVhZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAvr7RAlhlRX2bSGg47fhXBY6QDxGluygI4f j4Nc2ph9u1RCC4xbwm9a/UM3ub0YsgrNEBVOhYWsKvZKcLXsoQuULrMJTp2iSVdP f3SrkOy88oG1Y+rFl+flrBHchnjL6/zI6JprYtiVL26bSTbhWTHlWPPnJVY6efT5 k/LyHzAkKQL0nyvdV1MSbXdYyjN7DcxJVaM3ukbh+bV/NibTQZD1Y1UlW1XiDZqX VGxg+5WL01wLzRvleuoVoxHO7jrVMv5qwraOIRq+Yv/7hTYyXUWNb4XUTXQg7jtT kggmv/7I54VaVD7RpEd7i7vbCc5oOpXw637RYzn+mcbQhSAIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/HHOhI5CZMlFl0Rew4Sd4SxJL/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWNiYzRhZDMtM2ZiYy0z M2EyLWI0YTItZTBkMDMzMWFiZTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+OROnWPlJOWJAfdVAqU8Xmj4K7lue2nnUxhDEo2pYnXTOtvrAoZXBI GIcOui8nlewUXInqZXaRw0ZnpN0f3+0DQtddUJNkuTtdVCMMycwj9Pm6TKuW/NsS mahyxU4O95iKiIoe586ogwx5txy5Y4RehO4F1fV1nR+RUrMmnDwEFbVZP92h5QKO qbYFIbakmLUGn5ztpjXrn3pewHBthXgcjTWJCOqxV0+Clfepe9pIR6rzZjI5g+aN u53GB6ukreKV9OzMG/+l+h18Lz5FWZL2hp7YnwB4VR7q5VbHsKWbQBZQRR7Y9CLi 4qrMICirJ2fzc0CNVCSvDYjLPVlGxig= -----END CERTIFICATE-----Generated at Mon Oct 20 03:37:30 2025 by rpki-client