$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c434e4f3-be8f-3639-852d-82e7a27c95c9.roa File: c434e4f3-be8f-3639-852d-82e7a27c95c9.roa (raw, json) Hash identifier: JNQKQCunwLU1FkEmplYayNTw4zerFsYg/gyCuDmSt3I= Subject key identifier: 5D:F7:54:4B:0B:CF:4A:08:AD:6C:B7:A5:FB:7D:1D:19:BD:65:F8:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5272EA3ADEB21045AE43C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c434e4f3-be8f-3639-852d-82e7a27c95c9.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396574 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:72:ea:3a:de:b2:10:45:ae:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=4007dede-c7d0-4dc6-8d56-edb48f9fd32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:06:b0:b2:dd:8f:7c:05:fd:24:3a:d0:b5: 8b:80:6c:40:c0:fa:13:4f:61:3b:99:91:4e:17:f2: ad:de:e5:8f:d1:e1:56:63:dd:71:9b:9a:28:e2:fe: cb:2b:4b:fa:38:e8:1d:9a:b3:ae:b9:5d:65:d9:d8: 9c:18:64:c6:4d:71:21:f8:cc:5c:06:43:e8:3a:87: 70:9d:ac:4d:29:6e:f7:38:74:e3:b1:7a:ce:56:c3: f9:3d:fa:16:24:be:e2:f1:5f:6b:da:0d:0a:de:41: 8c:b8:a2:0f:eb:48:0f:4f:41:4f:1d:f9:e7:9e:ec: cc:0f:a7:8f:78:25:f5:92:dc:dc:1a:05:84:cc:37: e0:2a:40:1d:94:3e:bc:e0:68:3d:05:e9:34:05:59: e5:30:48:70:bb:db:72:42:89:3c:7b:4e:af:09:bc: d2:a1:60:6c:3d:6c:17:09:0b:c5:33:88:f3:7c:97: d5:42:67:3b:26:0f:31:f8:d6:68:a6:3f:7c:7a:20: b2:bc:65:0c:1e:cc:7a:d9:d7:da:92:41:b3:a5:48: fc:24:72:68:56:ba:d8:97:4b:c3:61:ca:bd:e9:f4: 31:04:9e:e6:d8:ab:80:3c:bb:83:ff:fb:58:02:72: fe:d8:6e:ce:c1:3e:5d:d8:7e:2c:3a:09:c6:40:d2: f4:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F7:54:4B:0B:CF:4A:08:AD:6C:B7:A5:FB:7D:1D:19:BD:65:F8:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c434e4f3-be8f-3639-852d-82e7a27c95c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:2a:37:16:fd:a4:13:7e:75:47:a6:62:66:33:c8:81:73:b9: 83:fd:26:91:f0:07:d3:fa:57:25:ef:e1:38:af:69:7d:2f:ba: 8f:9a:77:80:9e:e3:8d:2c:4b:9e:f2:53:e8:eb:30:ef:bd:15: 30:32:cd:5c:e1:dd:bd:07:53:7a:ef:40:a2:f3:30:2e:a6:5f: e0:95:d3:4e:ce:82:d9:19:78:4e:34:2a:79:88:53:d4:4a:0c: e7:64:1b:b3:22:bb:d4:8a:27:5f:4f:2a:ad:5d:59:9b:06:fb: 62:5c:a7:83:60:26:e1:d9:7f:ea:95:1d:e2:d3:4d:b8:99:16: 2e:6d:7e:c4:de:39:d0:c1:a6:1f:1b:2f:7a:a7:c7:d8:fc:16: c7:d0:e0:71:6e:e2:73:3b:4e:7d:b0:95:f8:aa:54:3c:95:52: 8d:46:7f:75:1f:21:56:6a:e0:39:11:9e:75:a7:4f:2b:e2:a3: a8:a5:87:1c:b4:08:b4:34:90:9c:72:a1:61:63:03:d8:88:7e: 02:0d:09:1d:d2:99:01:80:3d:34:45:c1:a5:09:5b:56:58:ad: b6:63:3d:47:96:ed:fe:ce:02:20:55:ff:e7:7a:f5:fb:d9:0b: 31:cc:10:78:de:0b:1f:54:74:1f:44:33:61:cf:82:26:cd:45: b8:fb:76:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnLqOt6yEEWuQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NDAwN2RlZGUtYzdkMC00ZGM2LThkNTYtZWRiNDhmOWZkMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSYGsLLdj3wF/SQ60LWLgGxAwPoTT2E7mZFO F/Kt3uWP0eFWY91xm5oo4v7LK0v6OOgdmrOuuV1l2dicGGTGTXEh+MxcBkPoOodw naxNKW73OHTjsXrOVsP5PfoWJL7i8V9r2g0K3kGMuKIP60gPT0FPHfnnnuzMD6eP eCX1ktzcGgWEzDfgKkAdlD684Gg9Bek0BVnlMEhwu9tyQok8e06vCbzSoWBsPWwX CQvFM4jzfJfVQmc7Jg8x+NZopj98eiCyvGUMHsx62dfakkGzpUj8JHJoVrrYl0vD Ycq96fQxBJ7m2KuAPLuD//tYAnL+2G7OwT5d2H4sOgnGQNL0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF33VEsLz0oIrWy3pft9HRm9ZfhPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzNGU0ZjMtYmU4Zi0z NjM5LTg1MmQtODJlN2EyN2M5NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAqNxb9pBN+dUemYmYzyIFzuYP9JpHwB9P6VyXv4TivaX0vuo+ad4Ce 440sS57yU+jrMO+9FTAyzVzh3b0HU3rvQKLzMC6mX+CV007OgtkZeE40KnmIU9RK DOdkG7Miu9SKJ19PKq1dWZsG+2Jcp4NgJuHZf+qVHeLTTbiZFi5tfsTeOdDBph8b L3qnx9j8FsfQ4HFu4nM7Tn2wlfiqVDyVUo1Gf3UfIVZq4DkRnnWnTyvio6ilhxy0 CLQ0kJxyoWFjA9iIfgINCR3SmQGAPTRFwaUJW1ZYrbZjPUeW7f7OAiBV/+d69fvZ CzHMEHjeCx9UdB9EM2HPgibNRbj7dpk= -----END CERTIFICATE-----Generated at Tue Oct 21 03:56:49 2025 by rpki-client