$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa File: d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa (raw, json) Hash identifier: tIQJmgLaj3oQet3NyqYpzdoABpnY7S9iUwKb+HtQFuE= Subject key identifier: F0:94:15:15:12:A3:F2:E8:9B:79:1C:3B:4C:88:56:2C:06:58:77:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D84FEE6375590D595A20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 396564 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d8:4f:ee:63:75:59:0d:59:5a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5cece3c0-5bbe-4bc9-ac3c-648c8a628c3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:96:de:c9:2c:0d:42:74:b0:23:b2:0e:da:58: 1f:46:6a:14:43:04:31:0d:13:1c:e9:ae:f7:76:06: 97:2a:44:51:15:99:b3:2c:ea:90:16:40:27:c1:10: bf:ae:a8:da:98:9f:61:d0:c6:c4:30:4b:70:ca:ae: 3f:54:80:e4:38:cf:0f:06:fa:a3:c1:e0:cd:0a:42: 3b:f0:61:52:35:7c:a2:9a:6f:28:1a:0a:25:27:b5: 85:1b:e0:9a:21:c9:07:52:62:7d:bd:de:50:e7:65: a9:11:96:29:3f:a2:01:c1:3a:81:70:ad:0b:48:7e: 8f:5f:05:6c:8c:40:88:4a:a7:b0:b9:19:5a:2b:46: 3c:ac:12:43:b1:0b:f4:6f:7b:be:ec:91:22:81:f2: fb:f5:14:05:7c:a0:cf:e1:3f:0a:71:6a:54:53:88: c3:62:8c:8d:33:c6:76:1e:89:d4:c0:93:23:2a:a6: a6:cf:c2:56:8a:51:3c:e0:fa:65:dd:74:21:45:8e: ee:d7:09:aa:c5:d2:38:86:ed:d4:60:54:59:bc:86: 0c:22:16:b5:4d:b1:d3:0b:0b:f0:75:1b:ee:c2:9e: 93:4f:d3:d1:c2:49:87:d2:d2:69:6e:7a:6a:72:b2: a6:a0:49:7e:59:4a:bf:0b:83:f4:b7:32:21:a7:25: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:94:15:15:12:A3:F2:E8:9B:79:1C:3B:4C:88:56:2C:06:58:77:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d23ac7c9-dd70-35fe-ad65-74eaca6d1e38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:76:36:33:70:d2:34:a4:79:f8:57:65:3a:d4:eb:0a:5e:3a: 05:68:96:b4:54:78:93:5e:ae:81:a6:b4:0d:f8:09:74:3e:c1: 3b:f4:65:90:fe:3e:df:1a:ad:5d:53:fa:3d:9e:ab:22:94:cb: a1:f8:9e:f9:12:a9:d8:34:82:05:34:01:60:36:2c:bb:fc:b2: 34:fe:2c:42:44:34:a5:af:4c:e8:26:03:14:05:be:9b:f9:8b: 49:8a:d5:f6:ab:7a:41:85:10:a1:6b:44:8d:f1:36:a8:7d:61: 2c:d3:9d:4a:3e:2c:99:38:12:46:43:ba:4d:09:c7:18:3e:c5: df:8f:ac:0b:08:4c:fa:12:ad:4f:ce:d9:fa:08:53:50:e2:c9: 48:91:e8:8d:99:1b:96:dc:89:6b:af:f4:21:03:fb:97:27:bc: e2:b1:f6:39:3f:0b:cd:be:a9:a8:47:c5:d1:aa:e9:a3:de:42: 15:6f:eb:80:99:8f:46:fe:24:96:03:0f:11:dc:b1:57:3d:c1: e0:56:5f:16:30:99:a2:c5:de:f4:f5:9d:ae:34:37:14:48:82: 4c:db:72:25:72:fe:2f:a4:ab:fe:ac:91:f6:5b:15:80:1a:19: 6a:d1:71:23:78:cf:e7:a5:7a:bc:b4:69:c1:76:07:f8:81:cf: 22:71:c6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgdhP7mN1WQ1ZWiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWNlY2UzYzAtNWJiZS00YmM5LWFjM2MtNjQ4YzhhNjI4YzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJbeySwNQnSwI7IO2lgfRmoUQwQxDRMc6a73 dgaXKkRRFZmzLOqQFkAnwRC/rqjamJ9h0MbEMEtwyq4/VIDkOM8PBvqjweDNCkI7 8GFSNXyimm8oGgolJ7WFG+CaIckHUmJ9vd5Q52WpEZYpP6IBwTqBcK0LSH6PXwVs jECISqewuRlaK0Y8rBJDsQv0b3u+7JEigfL79RQFfKDP4T8KcWpUU4jDYoyNM8Z2 HonUwJMjKqamz8JWilE84Ppl3XQhRY7u1wmqxdI4hu3UYFRZvIYMIha1TbHTCwvw dRvuwp6TT9PRwkmH0tJpbnpqcrKmoEl+WUq/C4P0tzIhpyWLTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPCUFRUSo/Lom3kcO0yIViwGWHdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIzYWM3YzktZGQ3MC0z NWZlLWFkNjUtNzRlYWNhNmQxZTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN2NjNw0jSkefhXZTrU6wpeOgVolrRUeJNeroGmtA34CXQ+wTv0ZZD+ Pt8arV1T+j2eqyKUy6H4nvkSqdg0ggU0AWA2LLv8sjT+LEJENKWvTOgmAxQFvpv5 i0mK1farekGFEKFrRI3xNqh9YSzTnUo+LJk4EkZDuk0Jxxg+xd+PrAsITPoSrU/O 2foIU1DiyUiR6I2ZG5bciWuv9CED+5cnvOKx9jk/C82+qahHxdGq6aPeQhVv64CZ j0b+JJYDDxHcsVc9weBWXxYwmaLF3vT1na40NxRIgkzbciVy/i+kq/6skfZbFYAa GWrRcSN4z+elery0acF2B/iBzyJxxvQ= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:45 2025 by rpki-client