$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa File: d948cd7c-dd3e-3991-922a-683b9d77f25d.roa (raw, json) Hash identifier: B8UVDK4Worug20i44/JI0wHAJ8dph/2HCKEfg7Ad55A= Subject key identifier: 8A:1F:DF:9C:91:2E:5A:87:F7:A8:01:EA:B1:6E:C3:71:A8:0B:DC:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526C7BE43E805972ADBF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396550 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6c:7b:e4:3e:80:59:72:ad:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=542f2902-1c58-433a-a6a3-bb418423d400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:db:52:0d:4c:a0:05:ed:30:74:c5:c6:b6:e2: 03:4d:73:ad:6f:94:c9:73:74:4c:68:6e:ef:66:48: 27:a0:fb:fe:6b:82:a8:a4:16:04:47:63:44:22:1d: 78:53:5c:5d:b4:f1:06:43:ae:13:bf:40:18:ff:39: 80:64:07:90:9f:5b:1e:10:b7:03:17:b1:67:54:89: dc:0e:0e:c0:57:50:c7:96:ff:a3:ff:ee:17:9a:15: ab:ca:b0:91:ce:f3:3a:c5:46:a0:b1:95:4f:6a:34: be:43:83:13:66:1e:f6:73:6b:4c:f1:04:4c:a6:f8: 23:dd:93:96:06:06:a9:d1:97:cb:c9:17:86:a5:b1: ec:a0:64:d7:fd:78:5a:5b:df:fe:7a:7c:a4:2e:89: 02:33:54:99:ed:70:5a:ab:40:ec:4c:c2:b0:3c:ba: 0a:41:5a:15:3d:10:a5:a2:47:62:cd:c4:c4:87:18: 40:6c:ba:4c:3d:3e:cb:da:dd:91:43:8a:46:33:ea: 52:f8:45:04:6a:b9:20:24:6e:75:81:87:0b:5d:57: 79:02:d2:a5:f4:d9:0e:fa:e8:b1:cd:b0:71:e0:b0: 6f:71:23:3d:49:92:19:b4:a9:c9:8f:da:c9:dc:3a: d7:1c:69:ed:21:15:a6:64:8e:2f:8b:29:7b:71:b7: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1F:DF:9C:91:2E:5A:87:F7:A8:01:EA:B1:6E:C3:71:A8:0B:DC:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d948cd7c-dd3e-3991-922a-683b9d77f25d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1d:ff:ec:c8:6f:f0:5c:b2:ac:f4:a0:00:aa:18:f1:a1:17: 3b:a8:07:86:f2:ad:2b:c3:f8:a7:91:65:63:54:05:17:0a:47: 38:fa:80:b6:8f:65:98:45:fe:a7:13:a2:45:1f:77:47:f3:f8: 33:b8:07:4b:ee:41:3a:4a:73:ec:65:5a:3b:9a:75:c4:85:39: 67:9b:ff:f1:56:ea:c4:d0:2b:fe:90:c7:e5:d8:38:a5:b9:cb: 6b:58:01:9e:3b:3b:8c:0b:fd:43:9b:a8:b7:13:b9:19:48:d6: 93:b9:eb:d5:42:e9:1b:cc:a1:b0:a3:6c:83:58:8c:2b:55:7c: 94:dd:6b:a3:1c:bb:3e:f0:ab:6f:4b:44:b5:00:d3:1a:7f:81: a7:2e:27:d3:24:fa:a5:99:78:9f:df:20:24:e4:de:40:14:7f: 58:2b:28:ea:3e:a3:77:a0:eb:7d:40:45:66:1e:8f:1e:cc:b1: 30:4f:1d:30:c7:48:1b:8e:6a:c4:e1:1c:90:18:fe:5f:74:7b: 2d:04:38:57:cb:0b:f8:4c:c2:6e:c6:66:3f:b0:8d:80:76:f1: 35:2e:67:e5:e5:33:8e:ee:b2:a3:c0:ea:d9:c5:90:15:00:28: 2f:cb:71:48:1c:f9:53:a2:e8:7b:fe:76:67:19:ab:79:96:59: 53:4b:5c:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Umx75D6AWXKtv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTQyZjI5MDItMWM1OC00MzNhLWE2YTMtYmI0MTg0MjNkNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdtSDUygBe0wdMXGtuIDTXOtb5TJc3RMaG7v ZkgnoPv+a4KopBYER2NEIh14U1xdtPEGQ64Tv0AY/zmAZAeQn1seELcDF7FnVInc Dg7AV1DHlv+j/+4XmhWryrCRzvM6xUagsZVPajS+Q4MTZh72c2tM8QRMpvgj3ZOW Bgap0ZfLyReGpbHsoGTX/XhaW9/+enykLokCM1SZ7XBaq0DsTMKwPLoKQVoVPRCl okdizcTEhxhAbLpMPT7L2t2RQ4pGM+pS+EUEarkgJG51gYcLXVd5AtKl9NkO+uix zbBx4LBvcSM9SZIZtKnJj9rJ3DrXHGntIRWmZI4viyl7cbed+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIof35yRLlqH96gB6rFuw3GoC9xPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDk0OGNkN2MtZGQzZS0z OTkxLTkyMmEtNjgzYjlkNzdmMjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcd/+zIb/Bcsqz0oACqGPGhFzuoB4byrSvD+KeRZWNUBRcKRzj6gLaP ZZhF/qcTokUfd0fz+DO4B0vuQTpKc+xlWjuadcSFOWeb//FW6sTQK/6Qx+XYOKW5 y2tYAZ47O4wL/UObqLcTuRlI1pO569VC6RvMobCjbINYjCtVfJTda6Mcuz7wq29L RLUA0xp/gacuJ9Mk+qWZeJ/fICTk3kAUf1grKOo+o3eg631ARWYejx7MsTBPHTDH SBuOasThHJAY/l90ey0EOFfLC/hMwm7GZj+wjYB28TUuZ+XlM47usqPA6tnFkBUA KC/LcUgc+VOi6Hv+dmcZq3mWWVNLXBo= -----END CERTIFICATE-----Generated at Mon Oct 20 03:16:22 2025 by rpki-client