$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa File: cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa (raw, json) Hash identifier: h1hVEAEb5MECjdNFBw6vIiEIK8BNgT0MIXzF0xoWRsw= Subject key identifier: 54:26:F5:86:6E:C3:C1:53:81:63:02:D6:FD:A4:BE:66:E9:A2:1D:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61E52AB669AA406756C600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396600 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e5:2a:b6:69:aa:40:67:56:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=57b37ca7-5dfc-4e40-8e71-9b60b37ca3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:b6:e7:26:ef:79:a8:ff:10:6e:f5:98:15: d1:4a:0e:1c:bd:2f:6e:eb:30:7a:cb:fd:88:d6:91: d6:13:dd:fb:99:91:ce:71:94:68:a5:18:0e:54:6e: 9c:4d:be:a1:67:44:7e:b3:9a:5e:95:7e:25:84:75: 6e:c9:84:7c:5a:7f:15:ee:55:c2:05:17:46:5f:bf: 5f:46:22:4b:ac:09:45:94:ae:d6:32:ac:32:b6:85: ec:7e:f9:47:d0:0b:38:5b:68:17:03:f7:ab:c7:c5: 68:0d:bc:1d:54:a6:6e:1c:0c:02:74:ee:3c:19:1f: 75:88:60:61:35:16:0f:b0:86:70:dd:d5:40:a2:0d: c1:76:6b:a6:fc:bb:74:11:12:81:a3:de:63:ce:6c: 37:6f:1a:21:22:23:64:3a:9d:36:a8:b7:81:90:7f: ed:42:64:74:06:ff:18:11:cb:40:43:49:81:93:8d: 66:44:37:f5:f0:19:4a:3c:c3:3f:a3:6c:36:1a:da: 3d:7e:10:06:40:30:14:d1:92:5a:71:2c:d4:34:6f: 87:3e:ce:f9:72:6d:26:a4:35:39:51:a9:b1:66:48: 95:8a:45:b5:05:43:04:60:56:1c:3c:e0:b3:bf:60: de:5b:e5:dc:39:3d:2f:7b:da:7c:10:b8:26:2e:b2: c0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:26:F5:86:6E:C3:C1:53:81:63:02:D6:FD:A4:BE:66:E9:A2:1D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf09854e-4b86-3725-b4da-1d34f6ac54eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7e:bc:2a:3a:8b:15:15:71:99:f8:60:52:f8:9e:de:f9:2c: 49:6e:3f:c9:f1:c6:98:bf:d3:6a:a5:c0:21:12:c9:16:51:32: 4c:d6:d2:59:aa:3d:db:e3:7b:be:80:e5:dc:d7:59:67:34:ce: 5d:82:ec:c7:e9:57:3d:05:06:54:fb:de:92:dc:b6:7a:bf:2c: db:a5:df:2f:e5:78:49:63:7a:e6:9c:3c:52:3f:15:ef:1e:92: ac:71:98:58:2e:3e:a3:da:4f:80:c0:43:c6:07:13:d4:01:dc: d5:ec:a4:fe:fa:db:99:24:a7:93:46:79:d7:42:dc:e5:fb:2a: 06:cf:ab:97:3b:bc:e6:d2:9f:a9:4c:76:70:dd:52:fc:89:a0: 16:25:3c:8a:59:24:86:40:68:8d:33:7f:a4:c8:dd:48:71:25: 20:06:51:f5:0e:f0:07:15:fb:d9:7a:1e:35:54:f1:84:e6:bc: 5e:b5:3c:c3:09:a9:f3:f0:b1:78:3d:4c:1d:8d:b4:bb:99:93: 7f:ae:73:17:f9:ec:70:50:7c:e0:e5:32:dc:77:24:62:22:02: 6f:7a:25:e1:46:28:87:d5:79:ee:d2:cb:67:95:3d:d4:f9:79: 5e:8c:9c:79:60:d9:82:12:3c:db:1e:2d:97:87:d6:55:73:ad: 7a:ab:6c:9c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYeUqtmmqQGdWxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NTdiMzdjYTctNWRmYy00ZTQwLThlNzEtOWI2MGIzN2NhM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7i25ybveaj/EG71mBXRSg4cvS9u6zB6y/2I 1pHWE937mZHOcZRopRgOVG6cTb6hZ0R+s5pelX4lhHVuyYR8Wn8V7lXCBRdGX79f RiJLrAlFlK7WMqwytoXsfvlH0As4W2gXA/erx8VoDbwdVKZuHAwCdO48GR91iGBh NRYPsIZw3dVAog3Bdmum/Lt0ERKBo95jzmw3bxohIiNkOp02qLeBkH/tQmR0Bv8Y EctAQ0mBk41mRDf18BlKPMM/o2w2Gto9fhAGQDAU0ZJacSzUNG+HPs75cm0mpDU5 UamxZkiVikW1BUMEYFYcPOCzv2DeW+XcOT0ve9p8ELgmLrLAFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFQm9YZuw8FTgWMC1v2kvmbpoh3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YwOTg1NGUtNGI4Ni0z NzI1LWI0ZGEtMWQzNGY2YWM1NGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB9frwqOosVFXGZ+GBS+J7e+SxJbj/J8caYv9NqpcAhEskWUTJM1tJZ qj3b43u+gOXc11lnNM5dguzH6Vc9BQZU+96S3LZ6vyzbpd8v5XhJY3rmnDxSPxXv HpKscZhYLj6j2k+AwEPGBxPUAdzV7KT++tuZJKeTRnnXQtzl+yoGz6uXO7zm0p+p THZw3VL8iaAWJTyKWSSGQGiNM3+kyN1IcSUgBlH1DvAHFfvZeh41VPGE5rxetTzD Canz8LF4PUwdjbS7mZN/rnMX+exwUHzg5TLcdyRiIgJveiXhRiiH1Xnu0stnlT3U +XlejJx5YNmCEjzbHi2Xh9ZVc616q2yc -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:38 2025 by rpki-client