$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e15ac8c1-3088-368d-979b-9d68905e2638.roa File: e15ac8c1-3088-368d-979b-9d68905e2638.roa (raw, json) Hash identifier: swTcJtjDMXSy61g7pa/5QTiM0FeVMrm+eCegBVfFfAA= Subject key identifier: 28:00:44:ED:B5:4B:BE:75:32:45:00:75:70:34:F9:56:3D:62:66:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526BC3068FB0CDCE621240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e15ac8c1-3088-368d-979b-9d68905e2638.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20362 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6b:c3:06:8f:b0:cd:ce:62:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a981cdfb-b50e-4171-bff4-898a04ae0915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:99:d4:50:20:c6:a1:36:27:6f:8b:88:84:17: 71:1e:e4:22:a9:6c:40:16:38:f0:2d:88:4b:f2:c2: 0e:84:62:45:fb:6a:a2:30:c5:9b:7a:75:d6:10:97: e3:22:e2:ae:52:6b:d3:ff:15:06:37:4d:9a:b4:79: 22:8a:a4:f1:a9:0f:4b:8c:e5:f2:75:5c:23:fe:97: 63:62:e8:10:19:33:09:ff:7c:27:c9:85:e9:52:dc: 6d:88:ae:5b:c8:f5:c8:0b:c7:14:4b:3c:50:99:ae: a1:39:71:23:a1:13:b8:25:18:c4:5c:78:99:6e:f7: ff:7a:84:04:3c:f2:26:33:81:95:d7:aa:c1:df:86: e7:14:2a:9b:7c:ff:34:c4:60:24:76:da:de:ed:a7: 8d:04:5f:88:f8:6c:fc:0f:a8:10:53:37:de:49:c1: 66:d9:3b:e3:4a:9d:53:65:3b:79:56:3a:de:31:c8: 69:d3:53:e2:12:7b:ca:3b:89:0c:fe:ac:83:88:9e: 0b:a5:be:f0:7c:80:44:22:f8:ec:7e:ab:62:34:83: d7:8a:8c:50:63:98:bc:6c:60:a9:d5:a8:c5:79:10: 54:c9:d1:25:d6:3c:6d:fd:b4:f3:a0:7f:6b:0f:55: 06:36:88:09:68:ba:ed:d9:bc:1f:c8:09:7a:8d:11: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:44:ED:B5:4B:BE:75:32:45:00:75:70:34:F9:56:3D:62:66:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e15ac8c1-3088-368d-979b-9d68905e2638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:40:7e:2f:e0:a1:12:12:f2:59:ca:0d:fa:e6:f9:5c:15:9d: 9f:d3:94:16:31:14:92:3d:7d:1b:45:88:7c:17:74:8b:91:c3: 3f:59:25:2f:59:1a:20:2e:41:ab:54:99:ea:34:23:2f:8e:84: 12:f2:ce:34:aa:2a:cc:77:b7:e6:93:f0:d0:bf:b2:85:33:93: 96:e3:8b:2d:05:0a:06:b5:ce:c3:ca:7f:ce:4d:50:85:5e:6e: f6:2c:ed:5e:a9:d1:1a:48:e7:f3:cf:8e:61:1c:20:36:6b:b0: fd:a7:ef:e3:d7:21:c9:e4:f7:68:fd:fb:13:ce:b5:cb:73:76: 6c:5f:85:40:a7:5a:13:a4:0c:d9:dc:74:aa:ad:df:74:d0:c9: 50:41:34:f8:cc:99:50:2b:0d:71:35:9b:0b:69:07:49:f1:51: bd:dd:aa:09:e7:07:8a:17:91:92:db:81:6b:38:c3:e8:32:f6: 5c:c7:c5:24:3d:88:ad:7e:b3:98:d1:50:a3:86:f9:eb:a2:62: b0:b5:28:3c:67:42:75:79:4f:78:0d:71:7f:da:2b:fc:8d:6e: 1a:14:b3:82:20:59:17:27:66:9e:f3:cf:62:e5:ed:a5:bd:8a: 46:d7:3a:05:fd:f9:84:4c:a4:83:5c:94:5e:36:8a:61:a1:b1: a2:74:8c:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmvDBo+wzc5iEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTk4MWNkZmItYjUwZS00MTcxLWJmZjQtODk4YTA0YWUwOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJnUUCDGoTYnb4uIhBdxHuQiqWxAFjjwLYhL 8sIOhGJF+2qiMMWbenXWEJfjIuKuUmvT/xUGN02atHkiiqTxqQ9LjOXydVwj/pdj YugQGTMJ/3wnyYXpUtxtiK5byPXIC8cUSzxQma6hOXEjoRO4JRjEXHiZbvf/eoQE PPImM4GV16rB34bnFCqbfP80xGAkdtre7aeNBF+I+Gz8D6gQUzfeScFm2TvjSp1T ZTt5VjreMchp01PiEnvKO4kM/qyDiJ4Lpb7wfIBEIvjsfqtiNIPXioxQY5i8bGCp 1ajFeRBUydEl1jxt/bTzoH9rD1UGNogJaLrt2bwfyAl6jRFb/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgARO21S751MkUAdXA0+VY9YmahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTE1YWM4YzEtMzA4OC0z NjhkLTk3OWItOWQ2ODkwNWUyNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxAfi/goRIS8lnKDfrm+VwVnZ/TlBYxFJI9fRtFiHwXdIuRwz9ZJS9Z GiAuQatUmeo0Iy+OhBLyzjSqKsx3t+aT8NC/soUzk5bjiy0FCga1zsPKf85NUIVe bvYs7V6p0RpI5/PPjmEcIDZrsP2n7+PXIcnk92j9+xPOtctzdmxfhUCnWhOkDNnc dKqt33TQyVBBNPjMmVArDXE1mwtpB0nxUb3dqgnnB4oXkZLbgWs4w+gy9lzHxSQ9 iK1+s5jRUKOG+euiYrC1KDxnQnV5T3gNcX/aK/yNbhoUs4IgWRcnZp7zz2Ll7aW9 ikbXOgX9+YRMpINclF42imGhsaJ0jOs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:19 2025 by rpki-client