$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c127d01c-a50a-3e96-b3c6-df871adeefaa.roa File: c127d01c-a50a-3e96-b3c6-df871adeefaa.roa (raw, json) Hash identifier: OVgVBAiPIUj4tiHOLh4TuutyEibD8LJVASM4fJTHtoM= Subject key identifier: A5:21:B6:7D:B6:43:5E:4A:0D:AD:58:E8:EB:D6:14:B4:EE:C6:81:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5271BC45CE6F6B437A0C60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c127d01c-a50a-3e96-b3c6-df871adeefaa.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 25485 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:71:bc:45:ce:6f:6b:43:7a:0c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=c1dc1abb-daea-4563-b120-18db035df50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:95:db:88:42:2d:f0:8f:90:df:a9:ef:0b: 82:11:3e:d4:83:66:48:99:bb:c8:ad:42:8e:aa:ac: d6:ad:3e:15:34:b7:8a:bb:1a:67:05:69:85:6d:38: 2f:9d:46:9c:3b:cc:e9:ed:c1:82:76:a4:56:96:7c: 70:c9:6f:78:07:17:d4:74:0d:5e:81:a3:25:22:2b: fe:b4:9e:b1:05:b6:c9:0e:33:89:b8:b7:97:77:67: 27:01:93:29:f4:16:b5:dd:72:9d:bb:f7:fb:8f:ef: 94:5c:22:7e:31:56:7e:50:d0:a3:58:1a:76:0c:a8: d0:98:1e:4c:11:00:23:b9:2d:03:66:f9:c0:7d:55: b2:ab:a5:b1:1f:c8:ce:cd:cc:a5:04:33:97:32:b7: c5:3d:5c:14:e1:ff:cf:b4:6a:0a:8d:e3:69:19:d7: 15:11:d3:4d:d3:ed:96:1e:6a:30:7e:88:11:8d:1b: b1:01:40:cd:9f:8e:56:46:00:3c:e9:6b:e3:c3:f6: fb:6a:88:a2:8d:f3:81:96:5b:cf:86:40:76:7b:9d: 4a:3f:5e:52:45:43:4b:c4:41:a3:5e:c5:cc:f9:23: 00:0d:dd:13:3a:2e:84:de:d6:86:7a:f3:2d:63:1c: 63:48:1f:06:fd:a7:da:cd:2e:82:aa:b3:63:18:fd: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:21:B6:7D:B6:43:5E:4A:0D:AD:58:E8:EB:D6:14:B4:EE:C6:81:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c127d01c-a50a-3e96-b3c6-df871adeefaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:38:6b:60:f6:ff:86:8b:46:9e:4c:97:71:1b:d9:69:1b:6a: c1:c3:7e:95:74:57:30:0a:ab:ae:93:8f:5a:86:fa:18:99:94: 03:5f:d3:5f:5a:a3:ba:49:45:11:79:e6:db:ac:ea:7e:14:f5: 62:b5:9d:d1:a1:d4:1a:36:a0:c7:ad:1f:da:b7:f5:7d:fe:26: e6:af:6d:6c:f4:51:8d:4e:2d:60:ee:3e:96:53:77:01:ab:42: 3a:f9:4f:27:7e:07:37:eb:94:79:cc:dd:fa:b1:2e:0c:b7:93: 94:e2:93:5d:23:e2:d9:52:4b:ef:ee:4c:ad:7b:00:cb:a1:2a: 9f:7e:4e:2e:90:4a:c4:6e:77:dc:66:10:21:59:73:93:c8:09: 11:3d:c5:ef:fc:64:54:a7:8e:45:7d:8b:1f:a9:39:fc:41:d0: 5a:19:70:9d:6e:52:29:63:86:08:88:ee:fa:f8:56:1f:f6:81: 6f:f1:ee:a5:fc:6b:ac:f2:b0:61:e7:ec:96:de:0f:ed:f9:59: e0:1a:91:bc:b8:15:26:ab:80:e8:30:62:3e:88:87:af:b7:08: ab:15:1d:b1:53:9d:30:e5:85:f8:94:5a:39:b3:e7:56:00:0a: 1e:b4:79:7a:c2:c8:04:08:97:84:45:4d:24:d1:bc:10:92:6b: d0:66:66:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnG8Rc5va0N6DGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YzFkYzFhYmItZGFlYS00NTYzLWIxMjAtMThkYjAzNWRmNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxiV24hCLfCPkN+p7wuCET7Ug2ZImbvIrUKO qqzWrT4VNLeKuxpnBWmFbTgvnUacO8zp7cGCdqRWlnxwyW94BxfUdA1egaMlIiv+ tJ6xBbbJDjOJuLeXd2cnAZMp9Ba13XKdu/f7j++UXCJ+MVZ+UNCjWBp2DKjQmB5M EQAjuS0DZvnAfVWyq6WxH8jOzcylBDOXMrfFPVwU4f/PtGoKjeNpGdcVEdNN0+2W HmowfogRjRuxAUDNn45WRgA86Wvjw/b7aoiijfOBllvPhkB2e51KP15SRUNLxEGj XsXM+SMADd0TOi6E3taGevMtYxxjSB8G/afazS6CqrNjGP2A6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUhtn22Q15KDa1Y6OvWFLTuxoEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzEyN2QwMWMtYTUwYS0z ZTk2LWIzYzYtZGY4NzFhZGVlZmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk4a2D2/4aLRp5Ml3Eb2WkbasHDfpV0VzAKq66Tj1qG+hiZlANf019a o7pJRRF55tus6n4U9WK1ndGh1Bo2oMetH9q39X3+JuavbWz0UY1OLWDuPpZTdwGr Qjr5Tyd+BzfrlHnM3fqxLgy3k5Tik10j4tlSS+/uTK17AMuhKp9+Ti6QSsRud9xm ECFZc5PICRE9xe/8ZFSnjkV9ix+pOfxB0FoZcJ1uUiljhgiI7vr4Vh/2gW/x7qX8 a6zysGHn7JbeD+35WeAakby4FSargOgwYj6Ih6+3CKsVHbFTnTDlhfiUWjmz51YA Ch60eXrCyAQIl4RFTSTRvBCSa9BmZtc= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:22 2025 by rpki-client