$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa File: ae19a127-62a2-38bf-9f41-30bcd4da2037.roa (raw, json) Hash identifier: cUt6+yvloZ7ljKc+7AoBZjpxXg85pw9RbR7Bb6I79D0= Subject key identifier: 2A:59:5B:F3:CC:26:C8:91:19:F7:B9:86:D0:1D:79:B2:08:AB:23:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52688C1BA8B4C9E1CA0700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396586 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:68:8c:1b:a8:b4:c9:e1:ca:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=2dc83356-2092-43a6-9c40-b8b0109c791e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a1:a0:2f:f2:c4:da:9f:be:a2:e3:f4:3a:fe: 6c:2d:67:11:29:44:bd:bc:f2:d5:da:fe:c5:66:3b: e1:ba:43:8b:52:f8:92:39:b2:89:2e:32:26:73:e9: 5a:0c:f2:fc:f5:09:f8:0f:23:b7:3c:db:10:2b:48: ec:34:6c:27:b3:18:d0:a6:35:35:fd:a1:aa:98:2b: ef:93:d5:0a:3d:54:28:c5:6b:19:b9:e1:1f:4d:50: 18:29:af:b9:e9:29:d5:23:1b:a4:81:42:ba:d5:97: be:64:8d:25:52:a8:1e:2b:03:06:cb:a3:9f:58:25: 1e:91:f5:16:4e:bc:15:4a:34:e0:1e:93:ff:9d:98: 90:b8:e2:ba:6b:38:bd:b4:fc:3f:a1:2a:bf:27:a8: 64:f0:cb:b8:54:68:4a:e5:21:e6:03:96:6a:50:c6: e9:64:91:59:3d:91:b6:a3:0b:b5:b3:fe:55:48:30: 97:df:7b:e3:d2:cf:06:08:99:18:4a:c2:85:6d:98: 0b:85:b8:a2:b3:cc:73:f0:d4:83:79:a6:22:fe:b3: 0e:e2:4e:77:d6:bd:15:cb:a1:e3:e5:5a:ab:7f:fd: 0f:7e:5c:b7:86:6a:e9:b8:9b:bf:3b:63:dc:d3:6f: cd:68:29:4d:36:b8:e5:98:63:78:d3:1e:0f:22:f1: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:59:5B:F3:CC:26:C8:91:19:F7:B9:86:D0:1D:79:B2:08:AB:23:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae19a127-62a2-38bf-9f41-30bcd4da2037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:d2:0d:c8:02:40:97:7e:fc:ba:f1:07:87:3d:cb:ff:7c:e5: b9:f4:41:97:7e:9c:29:40:19:83:0a:3f:18:26:c9:2c:e0:d4: a3:ac:de:b4:8f:02:49:a9:3d:13:10:ed:23:26:5c:49:48:1d: 11:b3:dd:5c:6e:9a:dc:a0:09:2f:44:3d:eb:05:15:87:15:79: cd:37:ae:73:a2:6b:61:be:4e:45:7b:8a:b5:7d:f6:b9:f2:06: a5:9c:83:40:03:4a:7d:42:89:66:51:b2:6d:8e:22:0d:46:00: 5c:b0:a6:bf:40:97:2d:c4:40:22:3c:af:5a:bb:f7:77:ae:4e: 6e:08:1b:9a:57:41:01:93:04:d7:c9:2a:e7:5d:19:5e:f9:9a: 41:8d:d6:3c:d8:7f:c7:61:72:64:57:51:02:bf:8e:db:5f:83: e1:4d:c7:22:e4:67:f0:67:a0:94:c3:22:17:9e:c4:47:06:f1: 6b:9a:a0:24:52:a9:c9:dd:04:70:e2:27:5e:35:02:9e:0c:a2: 35:d8:4e:8d:d4:1b:ea:e0:42:ea:7a:49:79:d4:f5:6b:4f:58: 5d:7e:aa:a6:9a:be:18:dd:7a:67:bf:a7:76:f3:c6:9a:fa:f1: c6:9d:35:1b:82:86:b9:c8:37:41:25:7f:6e:ba:12:74:f5:97: a4:65:66:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmiMG6i0yeHKBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MmRjODMzNTYtMjA5Mi00M2E2LTljNDAtYjhiMDEwOWM3OTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKGgL/LE2p++ouP0Ov5sLWcRKUS9vPLV2v7F ZjvhukOLUviSObKJLjImc+laDPL89Qn4DyO3PNsQK0jsNGwnsxjQpjU1/aGqmCvv k9UKPVQoxWsZueEfTVAYKa+56SnVIxukgUK61Ze+ZI0lUqgeKwMGy6OfWCUekfUW TrwVSjTgHpP/nZiQuOK6azi9tPw/oSq/J6hk8Mu4VGhK5SHmA5ZqUMbpZJFZPZG2 owu1s/5VSDCX33vj0s8GCJkYSsKFbZgLhbiis8xz8NSDeaYi/rMO4k531r0Vy6Hj 5Vqrf/0Pfly3hmrpuJu/O2Pc02/NaClNNrjlmGN40x4PIvF+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpZW/PMJsiRGfe5htAdebIIqyMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWUxOWExMjctNjJhMi0z OGJmLTlmNDEtMzBiY2Q0ZGEyMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPSDcgCQJd+/LrxB4c9y/985bn0QZd+nClAGYMKPxgmySzg1KOs3rSP AkmpPRMQ7SMmXElIHRGz3VxumtygCS9EPesFFYcVec03rnOia2G+TkV7irV99rny BqWcg0ADSn1CiWZRsm2OIg1GAFywpr9Aly3EQCI8r1q793euTm4IG5pXQQGTBNfJ KuddGV75mkGN1jzYf8dhcmRXUQK/jttfg+FNxyLkZ/BnoJTDIheexEcG8WuaoCRS qcndBHDiJ141Ap4MojXYTo3UG+rgQup6SXnU9WtPWF1+qqaavhjdeme/p3bzxpr6 8cadNRuChrnIN0Elf266EnT1l6RlZj8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:04 2025 by rpki-client