$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4203c8c-1308-372b-8900-113a54047028.roa File: f4203c8c-1308-372b-8900-113a54047028.roa (raw, json) Hash identifier: 0Ev5EzwG5hhC5fOoFqWLJTYXOMdTK4kTVU0WONqBPfQ= Subject key identifier: DE:66:23:C5:7E:E1:10:5C:BA:32:BE:60:F0:D7:91:99:D2:1E:46:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B92DD963F6DB8B3AB0E19BB40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4203c8c-1308-372b-8900-113a54047028.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 396547 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dd:96:3f:6d:b8:b3:ab:0e:19:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=739a92ef-da5d-4b86-9ee1-a9b8fc145910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:a1:f6:34:33:21:81:58:54:38:32:2b:2a: 72:f7:f7:32:64:bc:2d:45:6e:56:89:6a:9a:c9:8a: a3:e8:b4:76:6b:ba:7c:58:7c:c0:11:82:51:6a:bb: 82:2a:13:24:9e:2b:83:07:a3:9b:c9:89:75:fc:b4: fb:61:de:21:ba:8c:8a:82:e3:01:5d:ef:72:68:1a: 1e:c9:c9:a6:b2:6b:76:41:d2:2f:2a:95:0c:3d:f4: 50:75:27:00:95:62:1a:3a:71:df:86:96:fe:04:ed: 5b:71:84:88:f7:e2:07:f3:cc:e7:22:f6:ba:0e:6d: d1:57:cf:a8:1d:6c:04:be:17:65:26:dc:2e:f1:44: 8e:99:52:3d:60:23:67:aa:cb:19:e4:06:c4:46:f9: 44:b1:1a:b1:61:38:f3:56:9b:cf:4a:58:6f:93:a7: 88:45:44:66:24:1f:1e:b0:eb:33:39:46:d9:7d:6a: e6:7a:da:c2:a6:e6:1c:12:b0:19:ec:66:86:80:dc: 68:f4:bd:b4:75:f9:de:85:ee:84:01:d9:40:24:a2: 2a:e6:bc:42:7b:87:dd:e8:59:3c:ac:57:4f:a8:68: 76:35:cd:ba:d3:cd:a2:7e:75:8f:e1:b9:ba:4b:3f: 06:73:35:19:45:81:34:62:66:6a:80:1c:05:79:9e: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:66:23:C5:7E:E1:10:5C:BA:32:BE:60:F0:D7:91:99:D2:1E:46:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4203c8c-1308-372b-8900-113a54047028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:62:5e:a5:4a:35:cf:42:70:19:9e:52:18:68:df:b8:2f:dd: aa:c0:2a:68:9f:e1:8b:f0:f2:71:93:ee:ba:d1:3d:f0:46:49: 2c:f8:bf:cf:b8:dc:05:45:d5:40:0d:db:cf:af:88:90:e4:f2: ef:89:10:41:1d:e9:a8:36:dd:9b:1c:5b:b3:21:53:47:b9:5a: 9c:84:28:4f:e7:00:3f:5e:75:e0:e2:6b:24:db:93:47:04:18: a6:e2:a3:bb:58:9a:20:01:38:cd:02:fa:de:a5:38:b2:dc:a4: c7:9f:ce:c8:dd:ab:1d:33:36:d5:a9:cd:2e:2f:12:b2:42:53: e8:b6:3c:3f:bc:0d:fa:d6:30:f8:96:4c:a4:d4:dd:13:cc:a4: 49:8d:86:98:02:ca:b9:5c:75:0a:89:2f:d4:59:1b:e4:46:51: 90:57:91:ae:a6:03:4f:27:1d:27:d7:b0:8a:f3:71:85:52:12: 28:58:3f:01:2f:c0:58:da:62:e1:8a:70:4a:79:a6:88:ff:66: 3b:18:ea:43:f4:0e:ef:0c:bb:57:df:08:52:d9:18:ba:f0:b6: 18:95:8b:9e:e4:7e:99:72:11:ab:ff:3c:cc:65:fe:67:69:c1: f0:9e:e8:ce:53:14:73:8d:49:b8:ef:3f:54:b4:a7:9c:7b:d9: fd:62:24:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3ZY/bbizqw4Zu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk NzM5YTkyZWYtZGE1ZC00Yjg2LTllZTEtYTliOGZjMTQ1OTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqCh9jQzIYFYVDgyKypy9/cyZLwtRW5WiWqa yYqj6LR2a7p8WHzAEYJRaruCKhMkniuDB6ObyYl1/LT7Yd4huoyKguMBXe9yaBoe ycmmsmt2QdIvKpUMPfRQdScAlWIaOnHfhpb+BO1bcYSI9+IH88znIva6Dm3RV8+o HWwEvhdlJtwu8USOmVI9YCNnqssZ5AbERvlEsRqxYTjzVpvPSlhvk6eIRURmJB8e sOszOUbZfWrmetrCpuYcErAZ7GaGgNxo9L20dfnehe6EAdlAJKIq5rxCe4fd6Fk8 rFdPqGh2Nc26082ifnWP4bm6Sz8GczUZRYE0YmZqgBwFeZ7iyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5mI8V+4RBcujK+YPDXkZnSHkYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjQyMDNjOGMtMTMwOC0z NzJiLTg5MDAtMTEzYTU0MDQ3MDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFiXqVKNc9CcBmeUhho37gv3arAKmif4Yvw8nGT7rrRPfBGSSz4v8+4 3AVF1UAN28+viJDk8u+JEEEd6ag23ZscW7MhU0e5WpyEKE/nAD9edeDiayTbk0cE GKbio7tYmiABOM0C+t6lOLLcpMefzsjdqx0zNtWpzS4vErJCU+i2PD+8DfrWMPiW TKTU3RPMpEmNhpgCyrlcdQqJL9RZG+RGUZBXka6mA08nHSfXsIrzcYVSEihYPwEv wFjaYuGKcEp5poj/ZjsY6kP0Du8Mu1ffCFLZGLrwthiVi57kfplyEav/PMxl/mdp wfCe6M5TFHONSbjvP1S0p5x72f1iJKg= -----END CERTIFICATE-----Generated at Mon Oct 20 04:10:13 2025 by rpki-client