$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa File: e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa (raw, json) Hash identifier: tIjZ0nss4fgTslVpJ+Dt0xZIwExFA4vcM8Vplf6wjns= Subject key identifier: D7:FD:1B:84:D7:09:7A:63:D1:4E:A6:29:3D:C8:57:2A:EC:C5:85:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AC9DBB333E7D41AD4D0503000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 396593 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:b3:33:e7:d4:1a:d4:d0:50:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=a07a4ef8-0106-45a8-aed1-88c05d0c2ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e6:b7:46:f5:a5:c0:8e:b0:2c:bc:4a:64:10: 42:ba:68:62:7e:dd:6a:85:39:a0:1c:dc:75:01:90: e6:72:6b:44:fc:7f:48:53:c3:c8:4e:21:82:82:7b: 90:bc:5f:65:e3:fb:10:63:b3:ee:d8:6b:5a:67:05: 39:41:c7:08:54:bd:10:f5:b7:ea:6b:e6:81:a9:ca: 0d:4d:dd:5e:25:79:c0:57:45:27:49:9c:d6:37:fb: 64:d8:1a:5c:ee:29:e5:db:84:3a:21:79:ff:af:85: 51:3a:71:82:73:20:10:e9:77:03:1e:41:8e:10:78: 55:11:a2:1e:e7:c6:ce:52:2c:62:cf:e1:8e:61:91: 13:8d:25:e2:d7:e6:9b:96:0d:84:94:8e:ac:83:12: 6b:46:7a:5a:9d:ab:39:ce:60:44:c2:bf:47:78:93: a3:9c:86:24:00:c0:21:f6:55:51:85:c0:51:e5:75: 40:f9:b2:48:0f:82:b4:0d:68:7b:90:60:9b:35:6c: 89:24:b1:77:0e:23:33:0c:91:1d:ba:3a:be:f7:b8: ce:4a:5a:4a:33:48:8e:bb:54:2f:cc:d8:8e:bd:80: 91:61:8b:44:e5:58:3b:79:29:22:3a:3b:42:44:61: ff:84:8b:93:41:1d:75:3e:01:8c:12:c3:d0:a8:0e: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FD:1B:84:D7:09:7A:63:D1:4E:A6:29:3D:C8:57:2A:EC:C5:85:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e20c27ca-30cd-3ea3-a6b6-276523efa84f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f2:ac:35:cf:bd:fe:88:3a:ee:81:dc:00:7e:18:f7:3f:19: 95:d6:5b:2a:ca:ad:53:8b:7b:9b:90:d7:6a:a9:f7:e2:45:5b: c8:bc:8b:96:ab:5d:f5:e9:4b:ee:3c:8c:da:0b:01:4c:6a:cf: da:1d:0a:dc:63:57:0e:75:4d:22:8c:3e:96:8b:33:ad:61:08: 7b:e4:0e:04:a2:ba:65:d4:b1:71:67:ac:1c:ed:51:d6:80:12: d9:f1:cf:c3:61:44:91:f9:fc:1a:7c:a8:1c:ee:06:95:0c:76: be:b7:b6:4b:4f:48:43:71:43:65:c0:b2:34:f3:cc:3a:25:ec: 26:60:f9:86:5b:75:e6:d4:c4:e8:d4:41:83:d8:0e:7d:93:09: de:a8:38:e0:e2:9a:5d:a3:e3:8a:19:a4:22:e6:4f:70:4b:7e: f8:a7:e1:2d:8d:71:fb:0e:12:7f:fd:a0:d7:e1:7d:bb:a5:fa: cf:3c:b4:f0:c5:70:a0:16:df:c3:64:fe:1a:be:1e:1e:8b:32: 12:99:39:1a:01:94:db:70:97:be:36:7a:51:4e:de:f9:cd:7f: 5e:6a:0e:89:2c:f1:58:42:a0:a1:aa:8d:a9:22:49:1f:f8:3a: 62:68:4d:e8:8d:f7:e5:ed:ff:88:bb:7d:7f:ed:53:a8:f0:2e: 9b:de:4e:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ27Mz59Qa1NBQMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk YTA3YTRlZjgtMDEwNi00NWE4LWFlZDEtODhjMDVkMGMyYWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiua3RvWlwI6wLLxKZBBCumhift1qhTmgHNx1 AZDmcmtE/H9IU8PITiGCgnuQvF9l4/sQY7Pu2GtaZwU5QccIVL0Q9bfqa+aBqcoN Td1eJXnAV0UnSZzWN/tk2Bpc7inl24Q6IXn/r4VROnGCcyAQ6XcDHkGOEHhVEaIe 58bOUixiz+GOYZETjSXi1+ablg2ElI6sgxJrRnpanas5zmBEwr9HeJOjnIYkAMAh 9lVRhcBR5XVA+bJID4K0DWh7kGCbNWyJJLF3DiMzDJEdujq+97jOSlpKM0iOu1Qv zNiOvYCRYYtE5Vg7eSkiOjtCRGH/hIuTQR11PgGMEsPQqA4Y1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf9G4TXCXpj0U6mKT3IVyrsxYU3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIwYzI3Y2EtMzBjZC0z ZWEzLWE2YjYtMjc2NTIzZWZhODRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjyrDXPvf6IOu6B3AB+GPc/GZXWWyrKrVOLe5uQ12qp9+JFW8i8i5ar XfXpS+48jNoLAUxqz9odCtxjVw51TSKMPpaLM61hCHvkDgSiumXUsXFnrBztUdaA Etnxz8NhRJH5/Bp8qBzuBpUMdr63tktPSENxQ2XAsjTzzDol7CZg+YZbdebUxOjU QYPYDn2TCd6oOODiml2j44oZpCLmT3BLfvin4S2NcfsOEn/9oNfhfbul+s88tPDF cKAW38Nk/hq+Hh6LMhKZORoBlNtwl742elFO3vnNf15qDoks8VhCoKGqjakiSR/4 OmJoTeiN9+Xt/4i7fX/tU6jwLpveToU= -----END CERTIFICATE-----Generated at Sat Aug 23 13:12:54 2025 by rpki-client