$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa File: adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa (raw, json) Hash identifier: CRZ4yJ3+iodGnqJeSx1wH6WWWOxzg5TwaWgLhvM8SB8= Subject key identifier: 8A:CD:57:46:8D:F4:80:4F:3B:DC:F6:53:E3:B8:05:70:9D:89:C9:67 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526FC909EE1E8F8B2ECB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396692 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6f:c9:09:ee:1e:8f:8b:2e:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d5cacdbb-6758-4fac-8b70-8f9186773142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:4d:c5:e5:4f:4d:53:2e:73:fb:eb:99:37: d9:e5:af:ce:fd:f0:bc:7f:78:74:d9:77:20:90:58: 6d:f3:a6:2b:6f:55:b4:84:2d:e0:ab:62:e8:7c:06: 8a:62:fd:f5:ed:8e:56:9d:f1:94:a8:dd:89:68:48: 57:b0:69:fa:aa:64:2c:86:24:82:6f:ef:63:94:29: c0:5c:41:3f:52:60:1b:7f:54:0e:ce:02:d2:d4:20: 80:86:d4:fb:9e:a0:9e:24:81:02:ea:a7:34:8e:33: ae:8f:c7:d9:b8:b8:aa:c4:ac:63:c8:01:06:d6:a9: 0c:ea:6f:5e:ec:b8:10:62:19:c5:0d:59:91:a3:16: ce:82:9b:75:65:a5:5e:97:da:c6:09:16:6a:3b:be: c4:7c:2d:9b:e7:1a:23:42:3d:d4:43:9d:4a:b4:af: 85:2d:fb:b9:e3:ff:00:05:95:ba:fd:18:93:87:3b: a3:fa:da:c3:86:a8:68:0b:3c:a6:a2:e2:d1:f3:41: d2:d4:28:85:ca:d8:b0:e3:84:2e:6b:05:3d:34:fc: a6:a9:d6:55:15:5a:a4:b5:cb:b8:2c:f8:4a:e2:f8: d7:6e:ca:f2:1e:0f:9d:f6:18:92:41:fe:b0:e5:b4: 0d:a5:8f:53:91:b8:95:6a:e9:be:90:32:32:e2:2e: 16:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CD:57:46:8D:F4:80:4F:3B:DC:F6:53:E3:B8:05:70:9D:89:C9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f9:60:0c:25:2e:81:69:96:dc:e8:0a:9f:a5:35:5f:a0:99: 25:d8:b2:fb:69:95:1a:cb:b6:45:40:f0:fe:a7:53:a7:e4:36: 9b:2c:98:05:d4:bd:77:e7:93:10:f2:b5:1d:45:61:7f:4b:6f: 06:8b:9d:89:23:b0:ff:28:be:a2:0b:0e:40:fe:52:e0:6c:ab: 74:31:c7:36:04:26:33:66:bc:f6:3a:b0:17:eb:e6:73:61:ba: d0:5f:24:74:83:ee:1b:34:42:e8:7b:b5:03:72:a2:11:7e:f5: 96:c4:61:22:6e:0f:19:71:20:f8:51:33:e7:8f:87:e3:9a:44: 1d:2b:7b:a1:a4:3f:31:87:f2:f9:ef:3a:d9:3c:da:29:d9:33: 3c:63:a5:d1:24:af:18:d0:83:b4:f8:ac:93:ce:78:00:0d:b4: 8c:da:48:1e:56:f4:65:4b:b2:d2:b4:af:02:b5:13:b1:ef:38: 35:ac:ec:6b:95:44:31:b0:03:24:af:05:2a:07:0c:d2:48:00: dc:5c:9e:74:26:11:d0:d6:cc:f5:fe:7f:1a:4d:2d:a9:5e:65: fd:f9:87:4e:a7:3c:e6:83:63:54:00:f4:e9:01:44:6f:c3:ac: 8a:0b:82:a5:8a:14:0f:9a:49:a0:3a:54:2d:8e:75:21:0e:59: a3:c1:6f:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Um/JCe4ej4suywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDVjYWNkYmItNjc1OC00ZmFjLThiNzAtOGY5MTg2NzczMTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01dNxeVPTVMuc/vrmTfZ5a/O/fC8f3h02Xcg kFht86Yrb1W0hC3gq2LofAaKYv317Y5WnfGUqN2JaEhXsGn6qmQshiSCb+9jlCnA XEE/UmAbf1QOzgLS1CCAhtT7nqCeJIEC6qc0jjOuj8fZuLiqxKxjyAEG1qkM6m9e 7LgQYhnFDVmRoxbOgpt1ZaVel9rGCRZqO77EfC2b5xojQj3UQ51KtK+FLfu54/8A BZW6/RiThzuj+trDhqhoCzymouLR80HS1CiFytiw44QuawU9NPymqdZVFVqktcu4 LPhK4vjXbsryHg+d9hiSQf6w5bQNpY9TkbiVaum+kDIy4i4WbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrNV0aN9IBPO9z2U+O4BXCdiclnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWRhZjZkMmYtMzY0Zi0z YWY2LThmMGUtNmMzNjZmODk0ZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX5YAwlLoFpltzoCp+lNV+gmSXYsvtplRrLtkVA8P6nU6fkNpssmAXU vXfnkxDytR1FYX9LbwaLnYkjsP8ovqILDkD+UuBsq3QxxzYEJjNmvPY6sBfr5nNh utBfJHSD7hs0Quh7tQNyohF+9ZbEYSJuDxlxIPhRM+ePh+OaRB0re6GkPzGH8vnv Otk82inZMzxjpdEkrxjQg7T4rJPOeAANtIzaSB5W9GVLstK0rwK1E7HvODWs7GuV RDGwAySvBSoHDNJIANxcnnQmEdDWzPX+fxpNLaleZf35h06nPOaDY1QA9OkBRG/D rIoLgqWKFA+aSaA6VC2OdSEOWaPBb4s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:23 2025 by rpki-client