$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc6db486-0e9e-3e58-b493-845c99f80ea9.roa File: bc6db486-0e9e-3e58-b493-845c99f80ea9.roa (raw, json) Hash identifier: OvVrXeYI6vy/Bn/xHaAAjewwkUnzkJUURqCiGkzDfG0= Subject key identifier: C3:30:1D:E9:35:D0:7D:D3:42:2D:E7:48:6D:8C:D9:C4:F5:21:8B:B9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F527189DD6ECE23E3D92900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc6db486-0e9e-3e58-b493-845c99f80ea9.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396635 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:71:89:dd:6e:ce:23:e3:d9:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=fbb0f39d-087c-4ba5-9475-66fe11987ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:81:f0:f7:5b:14:ae:24:4e:cd:a7:b2:1b:69: 3b:06:57:61:cd:a6:64:34:27:c6:9b:fd:9b:d4:f4: e3:7b:a8:af:4f:47:f1:a7:35:60:2c:a4:04:df:a9: 6e:6e:df:62:8d:29:f3:c1:90:e7:f0:1b:c3:0a:89: d7:da:05:ca:27:21:fd:a4:8c:39:72:58:53:56:ec: 24:92:46:bb:b2:01:8a:00:80:76:4c:57:24:c6:07: fa:de:da:6b:10:71:8c:76:29:d5:a7:4b:34:e2:ae: 19:cd:e9:52:cb:f6:ad:08:4a:be:ec:83:39:ad:5f: 97:fe:49:6b:32:f9:0c:8a:28:8c:b9:f9:d7:ed:84: bd:fc:77:15:ed:ad:3b:96:b0:5d:29:bc:1b:d7:3f: ba:d3:96:26:cf:de:b3:4d:94:17:b7:78:36:42:f8: 64:52:60:42:5e:7a:00:f0:70:94:76:82:00:ba:01: 6e:21:42:7f:4b:68:59:8f:4d:e6:05:01:df:55:44: 4e:e2:d6:5b:2f:a7:e0:28:91:ae:6f:71:f9:07:79: cc:13:18:1f:e8:6d:9a:2f:c4:2c:f4:8b:3b:84:a6: 8c:34:e8:9f:ac:c5:cd:10:f0:6a:1b:51:bc:8a:99: 74:b5:e7:d5:94:92:bd:56:b5:a4:5f:77:a0:cf:f7: 89:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:30:1D:E9:35:D0:7D:D3:42:2D:E7:48:6D:8C:D9:C4:F5:21:8B:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bc6db486-0e9e-3e58-b493-845c99f80ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:91:25:a5:7a:8c:d2:95:07:88:d2:71:a1:29:d9:52:cf:a7: 33:6c:53:6a:30:c7:09:61:be:84:44:58:f4:04:b5:20:81:3c: 53:99:d5:f1:ff:f8:02:81:db:ee:1d:8e:c8:c5:93:38:06:89: c5:7a:9a:60:33:49:64:df:9a:ec:c0:0d:a9:3d:fc:4f:49:fc: 43:01:e0:2e:9f:7c:e3:19:55:f8:3f:4d:bc:2a:74:92:20:7f: cf:04:2c:6c:ef:9a:d0:78:53:bf:b6:6b:77:cd:6e:a0:c6:99: 30:75:62:6f:5a:8e:cd:ea:33:71:88:af:13:21:ae:a5:a8:df: f3:ea:6f:95:54:72:3b:5f:78:b8:79:ea:56:2e:43:b6:17:c5: b4:2c:07:38:f1:47:ee:a3:63:a4:0f:96:83:50:ec:b8:b0:a6: e4:95:8a:cd:4a:37:b6:1a:b4:2d:23:9d:f0:46:8a:dc:00:9a: 2d:f0:16:c3:f7:88:52:c7:ab:68:22:04:0b:71:76:df:28:18: f2:31:26:95:56:60:84:ea:d4:6b:be:30:6f:4f:c0:87:a0:6a: 01:0b:b9:50:08:f0:0f:90:98:eb:cc:64:7d:74:55:d0:ec:ad: 28:68:1e:21:3a:7e:db:d1:17:7e:96:d8:51:2a:83:c2:00:f7: 88:9e:08:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnGJ3W7OI+PZKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZmJiMGYzOWQtMDg3Yy00YmE1LTk0NzUtNjZmZTExOTg3ZmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoHw91sUriROzaeyG2k7BldhzaZkNCfGm/2b 1PTje6ivT0fxpzVgLKQE36lubt9ijSnzwZDn8BvDConX2gXKJyH9pIw5clhTVuwk kka7sgGKAIB2TFckxgf63tprEHGMdinVp0s04q4ZzelSy/atCEq+7IM5rV+X/klr MvkMiiiMufnX7YS9/HcV7a07lrBdKbwb1z+605Ymz96zTZQXt3g2QvhkUmBCXnoA 8HCUdoIAugFuIUJ/S2hZj03mBQHfVURO4tZbL6fgKJGub3H5B3nMExgf6G2aL8Qs 9Is7hKaMNOifrMXNEPBqG1G8ipl0tefVlJK9VrWkX3egz/eJ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMwHek10H3TQi3nSG2M2cT1IYu5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmM2ZGI0ODYtMGU5ZS0z ZTU4LWI0OTMtODQ1Yzk5ZjgwZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaRJaV6jNKVB4jScaEp2VLPpzNsU2owxwlhvoREWPQEtSCBPFOZ1fH/ +AKB2+4djsjFkzgGicV6mmAzSWTfmuzADak9/E9J/EMB4C6ffOMZVfg/TbwqdJIg f88ELGzvmtB4U7+2a3fNbqDGmTB1Ym9ajs3qM3GIrxMhrqWo3/Pqb5VUcjtfeLh5 6lYuQ7YXxbQsBzjxR+6jY6QPloNQ7LiwpuSVis1KN7YatC0jnfBGitwAmi3wFsP3 iFLHq2giBAtxdt8oGPIxJpVWYITq1Gu+MG9PwIegagELuVAI8A+QmOvMZH10VdDs rShoHiE6ftvRF36W2FEqg8IA94ieCJE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:09 2025 by rpki-client