$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e90a3c8d-c405-3e19-a528-7a8dd5b0a605.roa File: e90a3c8d-c405-3e19-a528-7a8dd5b0a605.roa (raw, json) Hash identifier: eNo9RyuhJH73A3VqJee9ppZ4L+6FsPO+Zbb5XQF+/sc= Subject key identifier: 61:DB:59:80:5B:4C:92:6A:99:5F:E9:34:B1:0D:B7:54:9B:EB:0C:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5267B7A2AC0E00342AC880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e90a3c8d-c405-3e19-a528-7a8dd5b0a605.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20172 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:67:b7:a2:ac:0e:00:34:2a:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=aa70e97a-3cf8-4017-9637-1c2d4a1bfc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:99:d6:80:57:c3:b8:b0:22:e1:53:3c:77:86: 92:fd:97:c6:9d:32:a0:2a:3d:15:e4:4e:45:8f:4d: 90:15:1e:ce:b4:f2:71:81:43:46:26:cd:2d:88:54: 06:51:5d:bb:ee:d6:92:39:2b:0b:e0:54:82:27:5c: 80:e5:6e:07:94:77:4a:f6:4b:3d:42:c6:13:94:65: 8b:2f:ff:8d:90:2c:c0:39:92:ab:82:9c:b1:be:3b: 47:7e:a8:bc:82:59:8e:6a:11:e3:80:08:d4:0a:d6: ea:e4:0e:5f:79:1f:07:cb:00:02:8e:e7:ac:00:bf: d9:70:d7:d3:c4:67:88:63:1d:7e:02:9f:92:a7:5b: c5:65:67:76:af:b4:1d:eb:1a:b0:17:af:58:fc:ed: 43:1d:75:ba:d0:12:d1:7d:30:2a:2a:ee:e7:79:4e: 28:c3:a4:ee:3e:49:b1:94:38:15:57:fa:b1:89:2e: af:01:8c:c5:8d:16:72:b3:ec:fa:e9:31:d3:a5:af: 91:45:d5:60:05:44:4b:8d:0c:23:a7:03:49:10:5a: 70:f8:8c:1a:b4:79:4a:da:95:a3:66:b1:57:22:50: 4f:15:0e:4b:16:c5:e4:1d:e4:09:6b:e6:b7:72:39: 3e:ab:68:e8:08:06:b0:f6:60:2c:3c:c9:14:e0:ee: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:DB:59:80:5B:4C:92:6A:99:5F:E9:34:B1:0D:B7:54:9B:EB:0C:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e90a3c8d-c405-3e19-a528-7a8dd5b0a605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9f:39:cd:64:cc:c4:76:90:f9:85:a0:e2:b0:cc:04:4b:48: 2c:6b:44:17:c0:6c:af:35:b9:60:51:2f:15:e9:16:43:7b:9f: 42:92:9e:9b:28:f8:59:db:1a:44:75:0f:67:c2:47:95:b1:19: a2:49:8f:f5:6f:fd:66:e9:3a:61:5a:09:fe:5c:61:aa:b4:f9: 99:2f:e8:6f:aa:7b:14:87:5c:52:fa:57:76:8e:ef:ae:a7:ea: 92:ec:92:bc:69:6d:2d:7b:7a:9e:12:0b:e4:10:a9:53:0c:6a: 1b:de:42:06:29:8d:95:38:1e:a7:db:9a:d4:ce:9d:b2:2c:0c: 24:24:68:75:af:ba:ff:7e:6d:8d:4d:22:8d:83:97:77:47:49: 3f:e7:f2:08:f6:54:53:c4:7a:f4:83:96:34:95:38:70:f6:47: 58:8f:be:4b:ef:6a:2b:0d:72:29:ed:dc:e3:78:f6:ca:73:85: 02:4f:ec:04:10:bb:c8:88:46:b6:fb:1c:d4:c9:62:dd:59:1c: 26:4e:ec:3c:06:2f:a4:cc:3b:04:7b:ef:58:a9:22:83:cb:07: 04:3d:b5:e6:52:9d:7b:de:9a:1a:13:5b:d0:d1:d7:d5:2d:11: 7b:1d:00:36:af:38:4e:9e:53:ac:38:3f:95:5f:19:8e:ae:40: bb:1f:1a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Ume3oqwOADQqyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YWE3MGU5N2EtM2NmOC00MDE3LTk2MzctMWMyZDRhMWJmYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25nWgFfDuLAi4VM8d4aS/ZfGnTKgKj0V5E5F j02QFR7OtPJxgUNGJs0tiFQGUV277taSOSsL4FSCJ1yA5W4HlHdK9ks9QsYTlGWL L/+NkCzAOZKrgpyxvjtHfqi8glmOahHjgAjUCtbq5A5feR8HywACjuesAL/ZcNfT xGeIYx1+Ap+Sp1vFZWd2r7Qd6xqwF69Y/O1DHXW60BLRfTAqKu7neU4ow6TuPkmx lDgVV/qxiS6vAYzFjRZys+z66THTpa+RRdVgBURLjQwjpwNJEFpw+IwatHlK2pWj ZrFXIlBPFQ5LFsXkHeQJa+a3cjk+q2joCAaw9mAsPMkU4O66WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHbWYBbTJJqmV/pNLENt1Sb6wyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTkwYTNjOGQtYzQwNS0z ZTE5LWE1MjgtN2E4ZGQ1YjBhNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSfOc1kzMR2kPmFoOKwzARLSCxrRBfAbK81uWBRLxXpFkN7n0KSnpso +FnbGkR1D2fCR5WxGaJJj/Vv/WbpOmFaCf5cYaq0+Zkv6G+qexSHXFL6V3aO766n 6pLskrxpbS17ep4SC+QQqVMMahveQgYpjZU4HqfbmtTOnbIsDCQkaHWvuv9+bY1N Io2Dl3dHST/n8gj2VFPEevSDljSVOHD2R1iPvkvvaisNcint3ON49spzhQJP7AQQ u8iIRrb7HNTJYt1ZHCZO7DwGL6TMOwR771ipIoPLBwQ9teZSnXvemhoTW9DR19Ut EXsdADavOE6eU6w4P5VfGY6uQLsfGiw= -----END CERTIFICATE-----Generated at Mon Oct 20 06:47:09 2025 by rpki-client