$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa File: babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa (raw, json) Hash identifier: WKFEaqUwnrZKkf0o/N7w0BMfoD4Byrkm+vA1qxQSa9U= Subject key identifier: 87:97:6E:F3:68:95:00:3B:F8:49:45:E4:B8:AA:F7:EC:97:EA:89:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D80637F8DD27EB754040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36621 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d8:06:37:f8:dd:27:eb:75:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=8dcba9d5-de86-40f9-a511-53f8f05fd2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:78:86:3b:de:87:ef:9a:8e:bc:ad:c6:06:74: 12:f2:1a:00:61:09:41:e2:d1:4b:0e:7e:3b:c2:24: c1:88:6f:d1:a1:eb:36:b9:a8:da:a3:2d:a4:69:3a: b7:7a:a3:2b:27:d3:d9:4e:00:ff:0b:96:2c:9c:99: 52:9c:45:0b:f8:e4:41:85:b3:06:5c:b4:49:66:39: 95:5f:21:23:10:e9:96:18:50:c1:34:2e:1a:07:2f: 46:da:c1:09:4d:0e:0c:5e:c8:70:94:b1:7b:c9:21: 7f:08:8f:28:e2:93:82:e2:13:cc:e8:e7:81:00:fb: 18:3d:cb:c1:0b:76:71:04:61:f7:56:b8:9a:72:d8: 1c:49:7a:db:d7:ba:63:3b:11:e9:a9:39:4a:be:3d: fd:2d:9e:e6:24:dd:ef:6b:c7:7d:d5:a9:19:bb:5c: 3c:3d:d8:2d:de:2c:d7:b3:0b:e6:c2:e2:1b:03:d5: 21:30:cb:96:0c:40:f8:e2:99:36:e7:91:1f:94:b8: bb:73:ee:cb:c6:95:5e:11:c9:f8:10:ec:bd:db:9c: 71:ae:e0:79:dd:53:62:9e:dc:df:9e:8b:64:6e:75: 5e:d6:7e:9e:6e:a2:24:6c:82:04:0e:b7:f7:4d:4b: 42:b7:cd:43:d7:76:65:8d:61:1d:dd:b6:62:9c:77: ad:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:97:6E:F3:68:95:00:3B:F8:49:45:E4:B8:AA:F7:EC:97:EA:89:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/babd3466-e6c2-3811-ab93-4cf6d0e0fc17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:61:60:bd:f1:4e:ad:73:4f:ec:85:fd:e0:27:68:1c:b7:47: 36:40:13:d5:86:e3:d4:15:a1:0d:a8:a3:5d:41:06:93:a6:d4: 36:c8:ef:5e:c3:9f:3a:b4:d2:e0:b8:64:93:99:c7:34:68:de: 6d:14:65:8b:44:11:09:96:d2:40:b7:0d:30:87:9c:39:87:7a: 4b:0e:2f:b5:f3:d3:85:03:62:ba:ed:49:0b:e6:7a:40:f4:27: b7:08:82:3e:e6:4e:af:6b:e9:9d:b0:25:1b:9b:4e:92:ab:7d: 8b:32:1f:ed:d7:11:04:90:3a:0f:7f:cd:2f:05:7c:a7:9e:79: 07:26:34:d9:cf:4c:0e:8e:3b:db:42:37:dc:54:4e:a5:82:d0: bc:e1:b3:c4:f1:68:08:1a:49:48:92:ba:d0:09:5f:7d:1d:62: a2:8a:e1:a9:5c:91:30:64:e1:cc:97:46:64:af:3f:77:44:29: 65:a0:51:ee:5e:30:cd:22:c1:43:d6:b0:8e:33:c4:ac:05:3b: 15:21:1b:d5:7a:15:04:c0:ee:7e:7c:2f:63:c5:20:ff:4c:19: 33:2b:be:9a:a1:fc:c7:c5:81:f9:a5:e8:d3:68:e0:51:a0:e4: 1e:dd:1d:0d:9f:5d:5b:5b:ed:9e:a3:6e:1f:79:94:c0:c5:b8: d8:7e:72:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgdgGN/jdJ+t1QEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OGRjYmE5ZDUtZGU4Ni00MGY5LWE1MTEtNTNmOGYwNWZkMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXiGO96H75qOvK3GBnQS8hoAYQlB4tFLDn47 wiTBiG/Roes2uajaoy2kaTq3eqMrJ9PZTgD/C5YsnJlSnEUL+ORBhbMGXLRJZjmV XyEjEOmWGFDBNC4aBy9G2sEJTQ4MXshwlLF7ySF/CI8o4pOC4hPM6OeBAPsYPcvB C3ZxBGH3VriactgcSXrb17pjOxHpqTlKvj39LZ7mJN3va8d91akZu1w8Pdgt3izX swvmwuIbA9UhMMuWDED44pk255EflLi7c+7LxpVeEcn4EOy925xxruB53VNintzf notkbnVe1n6ebqIkbIIEDrf3TUtCt81D13ZljWEd3bZinHetgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeXbvNolQA7+ElF5Liq9+yX6onYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmFiZDM0NjYtZTZjMi0z ODExLWFiOTMtNGNmNmQwZTBmYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdhYL3xTq1zT+yF/eAnaBy3RzZAE9WG49QVoQ2oo11BBpOm1DbI717D nzq00uC4ZJOZxzRo3m0UZYtEEQmW0kC3DTCHnDmHeksOL7Xz04UDYrrtSQvmekD0 J7cIgj7mTq9r6Z2wJRubTpKrfYsyH+3XEQSQOg9/zS8FfKeeeQcmNNnPTA6OO9tC N9xUTqWC0Lzhs8TxaAgaSUiSutAJX30dYqKK4alckTBk4cyXRmSvP3dEKWWgUe5e MM0iwUPWsI4zxKwFOxUhG9V6FQTA7n58L2PFIP9MGTMrvpqh/MfFgfml6NNo4FGg 5B7dHQ2fXVtb7Z6jbh95lMDFuNh+cgs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:56:23 2025 by rpki-client