$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa File: b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa (raw, json) Hash identifier: O828NiJ7xAPEUeupakLot+7GLKioXcOUaWW3a81jbRo= Subject key identifier: A3:BD:F4:4D:D5:92:9A:25:DC:70:BA:22:24:38:8A:BC:14:75:89:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52751BE0E725FF3E502900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396719 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:75:1b:e0:e7:25:ff:3e:50:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=6023a8b1-3cf8-47b4-b063-596c42479f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:76:6d:e3:0d:80:26:e7:ae:af:11:74:a0:da: fe:53:da:a9:93:3f:a5:2f:bf:04:ef:60:99:1e:ab: 05:83:2b:69:22:19:12:a2:d7:8f:58:e0:71:54:08: 85:fe:a2:12:73:a0:e4:12:af:d3:f1:ac:d1:3b:e7: 11:37:9e:0a:49:ff:45:9a:45:b4:de:f5:f5:a6:f8: 82:92:aa:65:1b:d0:6e:51:a7:0f:01:e9:a3:d4:2a: 1c:00:87:18:fe:6c:67:e5:87:ca:a0:c0:d0:22:38: a6:f0:1a:7b:da:7b:b7:d8:60:dd:97:fd:9e:6a:f8: cb:5c:78:a4:7d:35:5c:5d:e4:41:f7:77:aa:a4:67: 73:6e:d0:b2:4c:25:bd:c9:27:e3:05:cb:ec:2e:54: b4:03:0d:7b:4f:f7:b3:4c:43:c2:eb:47:95:c5:73: 0c:2f:e3:70:8d:bc:52:b9:c5:bf:c1:98:04:0f:51: 14:f3:a1:43:95:8f:1f:e0:ab:63:b5:f8:71:8f:40: eb:25:8f:17:a6:9d:5b:43:ab:ff:06:6e:b1:6a:1e: 1c:f0:40:c0:1e:b5:e9:2f:be:10:a9:a2:f2:e8:94: 4a:b2:39:42:ee:c0:f1:64:66:91:df:ba:59:ca:f8: 2e:12:d4:01:56:df:48:1b:1c:32:cd:34:d1:fc:4d: 00:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:BD:F4:4D:D5:92:9A:25:DC:70:BA:22:24:38:8A:BC:14:75:89:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b253ef1c-fd34-3508-9abe-d7d2aa8175b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c0:e6:0e:aa:93:35:09:bb:39:2a:30:74:23:30:87:46:47: 9e:10:5d:53:a1:50:0d:1e:76:f5:e8:ed:18:b7:db:0a:9a:77: 66:13:7f:c8:ac:59:96:2e:0f:be:b3:a6:ba:3e:99:5f:5b:50: bf:7f:d1:c7:d9:5f:d9:b0:77:15:45:79:de:5e:60:13:8c:f9: fb:b2:9c:27:ec:3f:c4:18:33:4e:ca:54:fc:79:f7:19:6b:d0: 66:84:3b:6f:a4:11:da:84:02:b2:b3:f2:11:95:04:60:cc:d6: 69:71:5b:5b:91:eb:89:fd:85:e2:bc:a7:33:03:01:cc:f2:6a: 7e:7b:0f:d3:82:6d:1a:ce:04:56:3e:e9:b7:5d:64:92:73:35: 89:06:48:56:71:67:b2:78:f2:ec:36:8b:72:55:b6:e7:dc:ab: c7:bf:df:f5:50:b6:35:3b:54:ea:cd:6e:e9:a8:ab:4a:19:03: 85:a1:bb:25:9b:9f:4e:d0:9c:5f:6c:63:42:9b:0f:c4:fe:0b: 68:b5:a1:1f:bb:bb:34:26:e6:46:61:90:fe:e4:74:29:6f:2c: 21:49:89:61:68:95:03:2e:9e:ad:fd:f5:a0:90:d3:83:8d:6f: 63:7c:0e:87:9d:f7:ea:e8:80:10:ce:10:02:35:69:f9:bd:70: d9:15:f0:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnUb4Ocl/z5QKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NjAyM2E4YjEtM2NmOC00N2I0LWIwNjMtNTk2YzQyNDc5ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XZt4w2AJueurxF0oNr+U9qpkz+lL78E72CZ HqsFgytpIhkSotePWOBxVAiF/qISc6DkEq/T8azRO+cRN54KSf9FmkW03vX1pviC kqplG9BuUacPAemj1CocAIcY/mxn5YfKoMDQIjim8Bp72nu32GDdl/2eavjLXHik fTVcXeRB93eqpGdzbtCyTCW9ySfjBcvsLlS0Aw17T/ezTEPC60eVxXMML+NwjbxS ucW/wZgED1EU86FDlY8f4Ktjtfhxj0DrJY8Xpp1bQ6v/Bm6xah4c8EDAHrXpL74Q qaLy6JRKsjlC7sDxZGaR37pZyvguEtQBVt9IGxwyzTTR/E0AaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKO99E3Vkpol3HC6IiQ4irwUdYl/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjI1M2VmMWMtZmQzNC0z NTA4LTlhYmUtZDdkMmFhODE3NWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHA5g6qkzUJuzkqMHQjMIdGR54QXVOhUA0edvXo7Ri32wqad2YTf8is WZYuD76zpro+mV9bUL9/0cfZX9mwdxVFed5eYBOM+fuynCfsP8QYM07KVPx59xlr 0GaEO2+kEdqEArKz8hGVBGDM1mlxW1uR64n9heK8pzMDAczyan57D9OCbRrOBFY+ 6bddZJJzNYkGSFZxZ7J48uw2i3JVtufcq8e/3/VQtjU7VOrNbumoq0oZA4WhuyWb n07QnF9sY0KbD8T+C2i1oR+7uzQm5kZhkP7kdClvLCFJiWFolQMunq399aCQ04ON b2N8Doed9+rogBDOEAI1afm9cNkV8EA= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:54 2025 by rpki-client