$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad11f819-387c-36a4-af73-fa2dd501edad.roa File: ad11f819-387c-36a4-af73-fa2dd501edad.roa (raw, json) Hash identifier: HcsvZeSmNMJGImDHFFU6w4V06c1ikzSB3FTv/HfNS5s= Subject key identifier: F0:E4:84:65:D3:65:1B:CE:1F:51:02:93:07:65:6E:92:74:E5:A4:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52702B1BE72EA416790531 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad11f819-387c-36a4-af73-fa2dd501edad.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396648 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:70:2b:1b:e7:2e:a4:16:79:05:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=9d8ea1ed-7970-4c96-b45e-dfefe0602a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:47:c8:c1:ae:d5:a5:95:b0:c6:93:b8:30:6d: 82:03:36:7e:a4:c3:e2:b4:4a:b1:2c:c5:75:fc:63: 23:40:48:f8:4d:7d:f5:6c:de:2e:8b:86:67:2d:e1: 9c:30:d9:f8:76:5a:19:70:e7:18:56:37:51:07:81: 6b:cd:0e:10:45:cd:92:c8:9f:f7:2f:b3:17:d3:57: 32:5c:c3:91:4e:06:63:7f:c8:32:b3:8c:58:83:cb: 1b:06:93:e3:88:47:46:d5:27:3c:17:2d:36:0c:f0: 94:99:ea:04:3d:d7:fb:84:0c:d2:a3:bb:8c:9d:f6: 5f:16:81:a1:a0:5b:27:cf:84:d2:fe:e3:f7:49:27: 0d:d2:a0:4c:42:67:93:46:48:95:9a:8d:0f:69:a8: 5d:86:81:67:70:8c:0b:5c:dc:d1:a1:64:95:17:15: 7b:93:32:a8:17:70:c6:7c:6d:a7:31:ab:72:c8:69: bd:dd:bc:f0:e3:53:90:97:96:04:5c:84:bb:6c:b2: 55:13:f4:11:08:e8:78:e3:44:ef:34:e5:5b:d7:b8: 70:d4:62:a8:52:da:bd:ec:28:67:63:d0:e9:43:0a: a4:7d:a7:a3:ec:2f:0b:75:e7:9e:24:ce:a2:d8:42: 00:a1:ab:4f:b2:4e:43:58:66:57:11:3f:1b:3a:98: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E4:84:65:D3:65:1B:CE:1F:51:02:93:07:65:6E:92:74:E5:A4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad11f819-387c-36a4-af73-fa2dd501edad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:47:93:f9:08:03:2d:70:78:82:41:34:2c:39:68:23:70:c1: 87:0c:b4:20:d5:2e:e0:3e:dc:a4:64:ac:a4:02:8d:03:a4:2b: a3:71:8f:65:9a:9f:0f:bf:11:a1:eb:12:51:38:02:4f:42:b7: 51:5a:d3:a6:16:3b:f5:4d:4d:96:ad:08:d8:8f:0f:ce:0d:4c: 33:3a:c8:e7:27:b1:f9:7a:2c:6f:07:ae:15:1b:a8:2a:a1:84: 1f:89:92:99:9a:22:01:4b:09:1e:f2:01:72:e2:14:57:9a:65: 47:a7:fa:cf:88:25:ce:60:c6:59:e3:49:7e:8b:df:26:1e:9f: 8e:80:4f:bd:87:7f:fc:f2:4a:2b:f3:66:2e:69:61:df:b5:58: 98:17:07:43:e8:d7:ee:95:6b:1f:ce:7d:21:02:3f:82:9a:46: 19:cf:12:9e:2a:19:47:1d:5a:9c:68:3f:97:d6:d8:5b:bf:0e: 45:04:84:c0:6c:81:e4:16:c9:99:27:16:07:bd:0a:89:20:08: 43:7d:83:cc:cc:08:8b:ca:ef:52:f7:18:d3:0e:31:5f:6c:2a: 94:01:4f:4c:d6:4c:f2:2b:16:cd:cf:6f:10:f8:5b:a2:7c:61: 6f:97:b9:e6:17:07:7e:42:c2:d9:69:18:72:7d:41:41:0d:dc: 9e:6c:de:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnArG+cupBZ5BTEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OWQ4ZWExZWQtNzk3MC00Yzk2LWI0NWUtZGZlZmUwNjAyYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0fIwa7VpZWwxpO4MG2CAzZ+pMPitEqxLMV1 /GMjQEj4TX31bN4ui4ZnLeGcMNn4dloZcOcYVjdRB4FrzQ4QRc2SyJ/3L7MX01cy XMORTgZjf8gys4xYg8sbBpPjiEdG1Sc8Fy02DPCUmeoEPdf7hAzSo7uMnfZfFoGh oFsnz4TS/uP3SScN0qBMQmeTRkiVmo0PaahdhoFncIwLXNzRoWSVFxV7kzKoF3DG fG2nMatyyGm93bzw41OQl5YEXIS7bLJVE/QRCOh440TvNOVb17hw1GKoUtq97Chn Y9DpQwqkfaej7C8LdeeeJM6i2EIAoatPsk5DWGZXET8bOpgrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDkhGXTZRvOH1ECkwdlbpJ05aQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQxMWY4MTktMzg3Yy0z NmE0LWFmNzMtZmEyZGQ1MDFlZGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALtHk/kIAy1weIJBNCw5aCNwwYcMtCDVLuA+3KRkrKQCjQOkK6Nxj2Wa nw+/EaHrElE4Ak9Ct1Fa06YWO/VNTZatCNiPD84NTDM6yOcnsfl6LG8HrhUbqCqh hB+JkpmaIgFLCR7yAXLiFFeaZUen+s+IJc5gxlnjSX6L3yYen46AT72Hf/zySivz Zi5pYd+1WJgXB0Po1+6Vax/OfSECP4KaRhnPEp4qGUcdWpxoP5fW2Fu/DkUEhMBs geQWyZknFge9CokgCEN9g8zMCIvK71L3GNMOMV9sKpQBT0zWTPIrFs3PbxD4W6J8 YW+XueYXB35CwtlpGHJ9QUEN3J5s3jU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:40 2025 by rpki-client