$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b998c1a7-0b04-36d9-8d79-c88332491ca6.roa File: b998c1a7-0b04-36d9-8d79-c88332491ca6.roa (raw, json) Hash identifier: W0alp+PzmBCnE5fPaeqnJw0aQtM+63trdeRWzblvkyM= Subject key identifier: 85:16:E6:63:9E:6C:35:5A:93:0D:AC:02:A7:9D:AD:E5:01:B1:28:AA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526F38CF77BAA3455BFFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b998c1a7-0b04-36d9-8d79-c88332491ca6.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 36630 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6f:38:cf:77:ba:a3:45:5b:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a7890bf4-0d88-4ba7-b4ac-e9d02a0b9ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:aa:94:80:69:e8:a4:61:1b:85:b3:1b:42:16: 81:22:cd:f9:41:92:3a:f3:b7:74:d6:7a:c5:56:f7: 62:5f:96:f2:5f:10:29:49:a1:b3:98:6f:d4:dc:0b: f6:a5:4d:9d:09:1f:58:a2:69:a6:84:df:0d:c0:f0: 4e:65:6d:e8:bc:81:1a:91:12:34:43:47:56:98:76: 14:ee:e6:73:86:50:03:6a:e0:07:6f:15:a8:d5:18: 62:1b:93:e0:ab:80:94:00:9b:00:dc:c3:f1:3a:33: 46:4e:eb:fd:4a:08:72:ab:5e:b8:58:45:96:b0:fd: 79:3f:fe:49:4e:a5:82:f5:f6:5e:33:a6:21:01:24: dd:6e:f5:58:d4:2f:fd:18:b3:e9:21:d6:9e:21:12: df:6d:f2:86:14:44:e6:aa:ce:42:f1:c5:e6:bd:e7: 12:32:2b:21:c1:78:2a:3f:d5:f6:97:64:7a:cf:12: 9a:76:6d:12:c6:1b:1f:b7:90:b1:7c:33:f8:72:14: b8:15:09:cc:8c:a2:bb:4e:d9:52:b8:65:4c:a0:7e: e6:d8:ea:1a:e9:ff:18:81:fc:b7:bf:0c:eb:05:ce: 2c:9c:01:8c:ef:f9:8a:71:27:c4:b7:c1:65:37:12: 08:3f:dc:b7:c6:8f:ca:9a:3e:f1:88:64:78:59:d6: 62:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:16:E6:63:9E:6C:35:5A:93:0D:AC:02:A7:9D:AD:E5:01:B1:28:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b998c1a7-0b04-36d9-8d79-c88332491ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7e:b2:2e:ba:31:69:52:cb:8b:77:0d:98:5e:ae:a5:35:d1: 1c:04:89:93:7f:81:c0:7c:10:52:4d:bf:db:21:51:7b:1f:83: 47:9c:f6:a5:f8:e0:6b:db:e4:22:f6:57:a4:a5:4c:8e:d2:75: e7:74:12:be:25:8d:ec:d5:21:95:3f:07:81:9e:bf:53:4f:67: c7:1e:af:cc:62:f2:09:f1:be:38:57:4a:bb:21:1a:60:2a:a6: 92:3d:8f:0b:21:47:fb:5a:62:ec:0e:00:23:8b:ed:8a:48:1a: f1:7d:bc:f7:9e:cd:d9:99:d5:0a:4b:c2:39:4c:63:41:4c:3d: 24:c0:94:45:22:19:41:a8:68:a5:aa:32:1f:6c:7b:8f:a6:d8: 73:0f:e6:5b:37:a2:2a:90:60:87:95:87:f1:57:92:6f:ab:75: 86:0b:a6:c0:10:b6:82:e0:25:9d:8b:9d:93:23:02:91:ec:a6: 70:90:14:24:2a:ac:25:6f:a8:77:93:5a:8a:4d:5b:95:34:63: ce:b1:b2:cf:70:cc:1a:d2:37:57:0c:7a:e6:e1:f7:06:a1:bf: 1f:b1:08:0a:ab:c0:04:7c:fe:5e:6a:bb:b1:5c:5b:e7:13:21: 54:ac:44:a7:46:5e:30:d6:12:ae:b5:2e:80:24:9d:8e:ba:25: df:5a:bc:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Um84z3e6o0Vb/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTc4OTBiZjQtMGQ4OC00YmE3LWI0YWMtZTlkMDJhMGI5ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaqUgGnopGEbhbMbQhaBIs35QZI687d01nrF VvdiX5byXxApSaGzmG/U3Av2pU2dCR9YommmhN8NwPBOZW3ovIEakRI0Q0dWmHYU 7uZzhlADauAHbxWo1RhiG5Pgq4CUAJsA3MPxOjNGTuv9Sghyq164WEWWsP15P/5J TqWC9fZeM6YhASTdbvVY1C/9GLPpIdaeIRLfbfKGFETmqs5C8cXmvecSMishwXgq P9X2l2R6zxKadm0Sxhsft5CxfDP4chS4FQnMjKK7TtlSuGVMoH7m2Ooa6f8Ygfy3 vwzrBc4snAGM7/mKcSfEt8FlNxIIP9y3xo/Kmj7xiGR4WdZiVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUW5mOebDVakw2sAqedreUBsSiqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjk5OGMxYTctMGIwNC0z NmQ5LThkNzktYzg4MzMyNDkxY2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt+si66MWlSy4t3DZherqU10RwEiZN/gcB8EFJNv9shUXsfg0ec9qX4 4Gvb5CL2V6SlTI7Sded0Er4ljezVIZU/B4Gev1NPZ8cer8xi8gnxvjhXSrshGmAq ppI9jwshR/taYuwOACOL7YpIGvF9vPeezdmZ1QpLwjlMY0FMPSTAlEUiGUGoaKWq Mh9se4+m2HMP5ls3oiqQYIeVh/FXkm+rdYYLpsAQtoLgJZ2LnZMjApHspnCQFCQq rCVvqHeTWopNW5U0Y86xss9wzBrSN1cMeubh9wahvx+xCAqrwAR8/l5qu7FcW+cT IVSsRKdGXjDWEq61LoAknY66Jd9avOA= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:55 2025 by rpki-client