$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa File: cac08b00-ba94-304f-8b53-a587441ecb7b.roa (raw, json) Hash identifier: 1FufRYf73tVxwhU8K+wPvQM+ykeVwXva/lz9Y3vtYCQ= Subject key identifier: 96:81:E7:01:27:D5:9D:69:7F:F1:8D:6A:C6:97:78:9B:8E:4D:FF:1D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52677350FE8F2B15461A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396624 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:67:73:50:fe:8f:2b:15:46:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=953cb27c-f1c7-4531-8937-7468e17bdb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:94:89:b6:d0:31:29:7c:5b:20:9a:c4:42:90: f7:eb:a7:b7:ba:f2:21:26:87:a6:e4:cb:f7:56:ec: 66:e8:a2:7a:51:ca:85:f6:78:ce:d1:99:47:aa:b8: 74:e1:88:20:4b:39:57:5a:5b:34:8a:cd:49:59:66: 0d:47:fa:f0:58:40:5c:0d:e4:72:4d:b1:83:1c:9d: 62:00:11:45:53:e6:eb:4c:59:a5:c0:df:55:ed:66: 7c:7f:3c:b2:21:ad:46:f1:b2:d9:09:a9:db:a4:c5: 18:36:29:ff:ee:df:fc:0b:76:e2:8f:71:81:63:9d: ef:89:c7:ef:a3:e1:c5:5b:4a:f4:bc:50:47:42:52: 2b:36:9e:8f:7c:95:55:9b:12:1f:bf:b0:66:d9:31: eb:4a:36:8c:be:6a:f7:5c:73:27:f4:03:18:78:ea: 42:4d:3c:76:95:18:04:11:60:03:f6:2b:41:6d:af: 01:8a:ef:fc:d8:24:c9:ce:de:95:4a:2e:98:34:6a: 34:35:39:12:38:7e:e2:52:71:1c:e8:64:be:7b:5d: 7f:4d:8a:92:15:f0:c4:ce:12:55:44:0d:2b:05:31: 4e:1e:85:84:8a:a6:de:fa:29:95:44:16:5f:f0:4e: 79:8c:0b:9f:d1:1d:9e:78:f6:33:6c:e8:33:3e:04: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:81:E7:01:27:D5:9D:69:7F:F1:8D:6A:C6:97:78:9B:8E:4D:FF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac08b00-ba94-304f-8b53-a587441ecb7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1b:0e:cb:f1:86:1a:78:76:60:68:20:32:7d:91:4c:9d:7e: c7:45:7f:ec:7c:d6:e1:aa:b1:fb:7a:b7:0f:f5:99:ed:6d:59: d3:f9:95:99:a1:16:fa:fa:79:2a:3b:e0:79:6d:b7:fa:04:f2: d6:14:3b:5d:af:c8:91:4e:0f:45:da:4c:25:85:67:b8:ae:c1: 49:5b:33:6e:fd:0c:a1:30:99:81:1d:45:77:1e:09:55:f0:c4: 7b:c9:61:bb:8a:e7:df:4b:8c:9b:b3:27:00:9d:d5:37:73:81: bb:f5:ce:91:60:38:f9:ef:85:82:59:90:b0:e6:5f:39:ad:2c: 16:20:07:19:fc:e5:45:fd:ed:87:30:b0:2b:19:2a:2a:7c:b7: 6f:9b:f6:99:6b:d7:e5:5c:bb:e0:57:40:2f:56:f2:ee:fc:d2: a9:f3:83:1b:21:f9:c1:97:79:f9:d6:a1:9f:8e:ab:20:3c:ca: ca:82:c5:02:77:24:21:8e:2e:ce:0d:1e:84:da:1d:b5:c0:12: 60:02:05:58:44:ec:29:78:aa:2b:52:3b:e3:8b:3f:f4:ef:a8: b9:60:20:5c:aa:84:ab:20:7b:67:b8:17:4a:c7:26:9a:8c:40: 9d:5c:45:f2:03:59:2b:89:1b:7d:2f:74:7e:c9:d9:05:88:70: 00:1d:3a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmdzUP6PKxVGGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OTUzY2IyN2MtZjFjNy00NTMxLTg5MzctNzQ2OGUxN2JkYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJSJttAxKXxbIJrEQpD366e3uvIhJoem5Mv3 Vuxm6KJ6UcqF9njO0ZlHqrh04YggSzlXWls0is1JWWYNR/rwWEBcDeRyTbGDHJ1i ABFFU+brTFmlwN9V7WZ8fzyyIa1G8bLZCanbpMUYNin/7t/8C3bij3GBY53vicfv o+HFW0r0vFBHQlIrNp6PfJVVmxIfv7Bm2THrSjaMvmr3XHMn9AMYeOpCTTx2lRgE EWAD9itBba8Biu/82CTJzt6VSi6YNGo0NTkSOH7iUnEc6GS+e11/TYqSFfDEzhJV RA0rBTFOHoWEiqbe+imVRBZf8E55jAuf0R2eePYzbOgzPgQd+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaB5wEn1Z1pf/GNasaXeJuOTf8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FjMDhiMDAtYmE5NC0z MDRmLThiNTMtYTU4NzQ0MWVjYjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8bDsvxhhp4dmBoIDJ9kUydfsdFf+x81uGqsft6tw/1me1tWdP5lZmh Fvr6eSo74Hltt/oE8tYUO12vyJFOD0XaTCWFZ7iuwUlbM279DKEwmYEdRXceCVXw xHvJYbuK599LjJuzJwCd1Tdzgbv1zpFgOPnvhYJZkLDmXzmtLBYgBxn85UX97Ycw sCsZKip8t2+b9plr1+Vcu+BXQC9W8u780qnzgxsh+cGXefnWoZ+OqyA8ysqCxQJ3 JCGOLs4NHoTaHbXAEmACBVhE7Cl4qitSO+OLP/TvqLlgIFyqhKsge2e4F0rHJpqM QJ1cRfIDWSuJG30vdH7J2QWIcAAdOl8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:40 2025 by rpki-client