$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcf77097-9d42-3d9a-a4f2-751afa1d59df.roa File: bcf77097-9d42-3d9a-a4f2-751afa1d59df.roa (raw, json) Hash identifier: smtiQgzF2vAycG6trylM9o1zOb3dm4cCKU7hHRmDebg= Subject key identifier: A5:65:0D:43:E9:86:CB:16:1C:50:91:7F:47:01:64:E8:2A:9A:F9:B9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081DD56E6E845FEB80AE600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcf77097-9d42-3d9a-a4f2-751afa1d59df.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 396585 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:dd:56:e6:e8:45:fe:b8:0a:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=dde3e795-3139-4e0d-8037-38c110b468b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:01:98:f5:ed:7a:e0:97:66:89:57:c7:5f: 61:59:72:3a:64:6e:ad:6d:af:f7:8d:e4:ab:ed:6c: f7:23:1a:ed:7f:8f:6b:80:fd:bd:19:4b:e3:8a:aa: 5c:d6:a3:ee:02:b7:b8:2d:84:7d:6b:26:22:32:7d: df:ac:64:44:32:e8:04:62:a8:d3:e1:0c:82:43:55: 11:b0:ff:bc:a6:31:5d:b6:33:35:7b:a8:5c:ed:53: 1c:a2:87:20:34:ce:cf:fa:eb:b2:a2:d8:39:64:11: 04:ed:51:f2:58:b2:14:28:14:b0:dc:d0:bc:93:55: af:a9:9b:5a:a7:0b:08:c3:8b:1e:c3:f1:10:e3:23: 0e:b9:36:88:38:2b:82:f5:35:27:cf:e3:9c:20:6c: 67:d5:c2:ca:90:8a:09:ce:c8:8e:92:c1:72:40:b4: 4d:db:d3:5c:eb:82:45:76:56:ce:0f:84:88:20:80: a8:a8:3b:97:b2:71:20:19:d5:43:e8:f6:b7:44:01: a9:01:33:2f:cd:0d:8e:d1:15:28:d6:c5:c3:be:9e: db:6f:4c:56:59:28:6f:cb:14:00:87:0e:4c:3a:8c: 5e:e9:96:5e:e7:a1:94:30:7a:d4:01:b2:58:33:88: fb:e5:36:07:50:dc:e7:68:0c:f9:8b:31:9e:24:22: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:0D:43:E9:86:CB:16:1C:50:91:7F:47:01:64:E8:2A:9A:F9:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcf77097-9d42-3d9a-a4f2-751afa1d59df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0f:bf:f5:ab:ce:d7:de:f4:f9:e2:90:28:bf:01:5c:9e:7a: 4f:06:b6:24:22:3a:cf:ba:4f:cb:63:6f:ce:b2:7c:5b:f0:4b: a4:c1:a8:57:dd:8f:73:1f:15:ae:cc:13:bc:d8:6a:24:e9:4e: 17:fb:c9:6b:c8:8c:08:18:2d:ee:03:60:ec:53:88:ed:e8:fe: 78:a0:35:5b:c2:f8:46:9c:6b:2e:13:a0:bf:9e:1c:35:07:a4: ae:90:ec:32:9e:a2:09:56:3a:c6:bb:66:bf:3c:c2:73:9c:95: de:f7:8a:bd:f0:87:96:aa:f1:42:c4:d0:61:69:a8:54:26:aa: 89:ad:86:4a:62:2f:ba:d1:93:5a:ba:37:b0:b6:eb:c9:72:85: bb:69:25:c8:e5:51:e2:4c:04:dc:f4:bf:f6:1e:e6:fc:5d:16: 97:8f:0d:0e:16:ff:45:4e:75:62:d5:07:9a:4a:0d:ad:4a:b8: 9f:fa:fe:f2:e5:c1:d5:72:84:e5:a3:68:69:b5:d0:01:8f:d8: 6e:85:7d:f5:59:8a:3f:55:6e:b1:7c:79:a4:de:36:ea:a0:7b: c4:a0:4a:51:a5:6d:52:45:75:99:d1:c2:f4:c6:f2:6e:bd:26: e9:61:e9:2c:42:69:e5:2f:40:17:13:85:cf:fb:5b:77:17:0f: 9c:64:11:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgd1W5uhF/rgK5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk ZGRlM2U3OTUtMzEzOS00ZTBkLTgwMzctMzhjMTEwYjQ2OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkkBmPXteuCXZolXx19hWXI6ZG6tba/3jeSr 7Wz3Ixrtf49rgP29GUvjiqpc1qPuAre4LYR9ayYiMn3frGREMugEYqjT4QyCQ1UR sP+8pjFdtjM1e6hc7VMcoocgNM7P+uuyotg5ZBEE7VHyWLIUKBSw3NC8k1WvqZta pwsIw4sew/EQ4yMOuTaIOCuC9TUnz+OcIGxn1cLKkIoJzsiOksFyQLRN29Nc64JF dlbOD4SIIICoqDuXsnEgGdVD6Pa3RAGpATMvzQ2O0RUo1sXDvp7bb0xWWShvyxQA hw5MOoxe6ZZe56GUMHrUAbJYM4j75TYHUNznaAz5izGeJCI4YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVlDUPphssWHFCRf0cBZOgqmvm5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmNmNzcwOTctOWQ0Mi0z ZDlhLWE0ZjItNzUxYWZhMWQ1OWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8Pv/Wrztfe9PnikCi/AVyeek8GtiQiOs+6T8tjb86yfFvwS6TBqFfd j3MfFa7ME7zYaiTpThf7yWvIjAgYLe4DYOxTiO3o/nigNVvC+Eacay4ToL+eHDUH pK6Q7DKeoglWOsa7Zr88wnOcld73ir3wh5aq8ULE0GFpqFQmqomthkpiL7rRk1q6 N7C268lyhbtpJcjlUeJMBNz0v/Ye5vxdFpePDQ4W/0VOdWLVB5pKDa1KuJ/6/vLl wdVyhOWjaGm10AGP2G6FffVZij9VbrF8eaTeNuqge8SgSlGlbVJFdZnRwvTG8m69 Julh6SxCaeUvQBcThc/7W3cXD5xkEWo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:57:13 2025 by rpki-client