$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bab1a8bb-3dac-3898-af07-be229f8d9066.roa File: bab1a8bb-3dac-3898-af07-be229f8d9066.roa (raw, json) Hash identifier: f9iZzGeOi7qLxhJBtc1CXcbFAfZw8EjQR+3tQJ7DRJw= Subject key identifier: FA:C5:04:78:A5:87:8D:1C:F4:CF:C2:40:DC:F5:E4:4A:0C:9D:EF:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBB6A9B624899A2D8D1180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bab1a8bb-3dac-3898-af07-be229f8d9066.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 36621 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b6:a9:b6:24:89:9a:2d:8d:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=4b26e7a0-cfd1-43a6-a754-76cf5876f1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e4:e3:f3:bc:13:4e:56:49:34:9b:18:71:e8: d4:e4:0f:70:c2:19:42:a6:35:91:84:7b:1f:47:81: 18:70:8f:a4:30:55:a3:13:25:09:fb:6d:89:8d:28: d0:61:33:6d:d9:cc:9f:02:5e:cf:6e:89:e5:89:b6: a5:3a:07:15:f5:8f:0a:6d:28:67:47:54:78:5c:f6: 2a:19:91:04:3c:86:07:08:4c:a2:31:cd:8d:7f:6b: 8c:07:3a:e2:72:7e:7d:12:0e:1d:6d:9b:5a:96:82: 26:d7:65:59:7a:2d:bc:44:76:c0:e1:1c:6f:f5:4c: 5c:e7:4d:ec:21:98:72:00:19:67:99:3b:3b:e9:46: 85:b0:76:a2:b3:4a:be:4f:73:d0:fe:d2:8f:b9:cd: 43:ba:5c:84:71:3f:60:d2:9d:74:90:13:04:57:0f: f6:41:7a:92:00:9f:6d:75:31:dd:e5:b2:af:f5:b9: 58:07:cf:6e:44:f3:03:9d:46:9b:2c:61:6f:9a:2c: 4c:53:7e:04:f8:c1:6d:ea:93:b8:7a:af:70:b1:31: 08:8c:43:c2:43:4b:c5:21:03:5f:bc:af:d2:b0:f1: 61:4d:01:42:2b:1a:45:82:d6:98:0f:b5:80:33:50: ac:a8:ae:1b:6f:a6:bd:88:28:e0:44:7c:2f:77:87: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C5:04:78:A5:87:8D:1C:F4:CF:C2:40:DC:F5:E4:4A:0C:9D:EF:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bab1a8bb-3dac-3898-af07-be229f8d9066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:16:31:e3:97:e0:15:14:5e:0f:2d:e9:65:2d:4c:8d:19:d5: e3:bd:75:99:ae:d6:cf:19:65:27:53:ca:4b:1c:42:1a:ef:95: a8:e0:d8:37:2e:b4:a0:14:ba:e8:8b:2c:1e:ae:de:1a:65:b3: f4:c6:be:ff:53:91:a8:4f:25:e2:6f:75:aa:f6:2a:04:36:80: 35:86:13:ae:d3:a2:e9:74:73:4e:1f:e6:61:c0:ba:29:aa:1d: 75:3e:9e:08:ea:08:51:99:87:ae:c0:dc:26:6b:8a:b4:8f:4e: 13:8f:ea:7b:b2:db:92:a2:e8:25:21:6b:4a:c6:81:e4:2f:60: 49:74:24:f0:58:aa:ed:18:c8:68:35:25:c3:a1:af:4c:b1:11: b7:fe:21:a3:1f:e5:56:57:54:9e:f1:e7:87:69:f4:88:74:43: ed:8c:85:3d:c7:b3:b3:e9:a4:e1:ae:c8:e8:4b:f9:f1:63:7a: 71:5e:3b:80:64:cf:72:c7:e0:9b:d0:f1:b4:fa:c5:56:01:dd: 8d:94:9f:09:71:32:36:5d:71:6b:60:41:b3:70:4e:31:05:e1: 9b:b5:30:1a:8f:4b:11:2e:f7:45:aa:d6:37:c2:b2:e0:5a:7d: d7:75:3b:92:2a:2a:e5:8c:6f:e5:01:2d:e4:8b:e9:25:be:6e: 3f:4a:bb:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27aptiSJmi2NEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk NGIyNmU3YTAtY2ZkMS00M2E2LWE3NTQtNzZjZjU4NzZmMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuTj87wTTlZJNJsYcejU5A9wwhlCpjWRhHsf R4EYcI+kMFWjEyUJ+22JjSjQYTNt2cyfAl7PbonlibalOgcV9Y8KbShnR1R4XPYq GZEEPIYHCEyiMc2Nf2uMBzricn59Eg4dbZtaloIm12VZei28RHbA4Rxv9Uxc503s IZhyABlnmTs76UaFsHais0q+T3PQ/tKPuc1DulyEcT9g0p10kBMEVw/2QXqSAJ9t dTHd5bKv9blYB89uRPMDnUabLGFvmixMU34E+MFt6pO4eq9wsTEIjEPCQ0vFIQNf vK/SsPFhTQFCKxpFgtaYD7WAM1CsqK4bb6a9iCjgRHwvd4drnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrFBHilh40c9M/CQNz15EoMne9lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFiMWE4YmItM2RhYy0z ODk4LWFmMDctYmUyMjlmOGQ5MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEWMeOX4BUUXg8t6WUtTI0Z1eO9dZmu1s8ZZSdTykscQhrvlajg2Dcu tKAUuuiLLB6u3hpls/TGvv9TkahPJeJvdar2KgQ2gDWGE67Toul0c04f5mHAuimq HXU+ngjqCFGZh67A3CZrirSPThOP6nuy25Ki6CUha0rGgeQvYEl0JPBYqu0YyGg1 JcOhr0yxEbf+IaMf5VZXVJ7x54dp9Ih0Q+2MhT3Hs7PppOGuyOhL+fFjenFeO4Bk z3LH4JvQ8bT6xVYB3Y2UnwlxMjZdcWtgQbNwTjEF4Zu1MBqPSxEu90Wq1jfCsuBa fdd1O5IqKuWMb+UBLeSL6SW+bj9Ku1U= -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:15 2025 by rpki-client