$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7d63933-068b-35af-9b76-be4bc4876fd8.roa File: f7d63933-068b-35af-9b76-be4bc4876fd8.roa (raw, json) Hash identifier: 8VnOUgPONNWrbcNlMPMq3TFi9cx7y15iMfSGvTfadk0= Subject key identifier: 60:53:2D:73:09:2A:56:80:D1:61:76:4A:13:F8:C6:19:91:33:FE:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526E25F7596A16FBC458C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7d63933-068b-35af-9b76-be4bc4876fd8.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396626 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6e:25:f7:59:6a:16:fb:c4:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=c0eed8d0-a121-4c36-adeb-f4a88083e958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c8:c5:31:b5:f9:43:2a:1a:45:14:35:cb:73: a7:6f:40:e1:33:08:aa:aa:7a:54:d5:28:62:7d:e5: a9:13:9d:8c:39:f0:ab:05:b6:20:88:c0:73:d7:9f: 0b:a1:9c:1f:5d:f4:e6:47:47:8e:46:67:09:fc:a5: 08:29:a5:30:ce:00:00:84:41:a6:ac:e0:b6:d0:63: c6:37:0c:bd:20:1c:96:a0:ca:82:ab:b7:d3:50:ec: 1f:26:dd:88:10:61:e1:b8:72:0b:37:f6:e1:e9:5a: 68:ea:05:86:f7:7c:5b:9d:e0:cb:33:67:40:c9:9f: 78:d2:27:3f:53:57:41:cc:39:c5:bc:e4:54:58:50: fc:75:8d:26:61:68:69:e5:07:20:71:c4:62:4a:9e: cc:34:81:eb:2f:84:ac:82:11:eb:27:fc:6e:ad:9e: 8e:03:61:ec:92:96:a7:d8:d3:90:86:cf:d2:56:27: b3:5f:79:e6:e1:6f:cc:a6:ee:98:a8:d9:6f:06:51: f6:09:a1:cc:5e:45:ad:63:01:5c:29:d6:c7:22:b0: fb:0c:a0:91:2a:e2:99:67:74:ba:7b:5e:66:e9:ba: 58:ce:d3:22:bf:f7:81:4b:6d:1f:df:0d:a3:4c:ca: 1e:be:bf:d8:de:69:15:0e:e2:e5:00:e1:29:cd:97: 80:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:53:2D:73:09:2A:56:80:D1:61:76:4A:13:F8:C6:19:91:33:FE:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f7d63933-068b-35af-9b76-be4bc4876fd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:b6:fb:df:40:d0:c2:43:81:d2:2b:d3:bc:8d:ae:9a:a3:36: c1:59:a8:6f:db:f7:78:7a:55:a6:51:22:b2:3f:c3:dc:37:92: e4:cf:54:0f:14:22:fc:0f:ac:33:21:c0:de:90:79:f8:c3:ba: d7:04:35:0f:a7:b8:bf:64:45:fa:8f:da:cf:f9:6d:88:3d:38: d1:02:01:b2:ec:9f:ca:0c:38:0b:5f:ff:5a:77:a3:39:a0:81: a0:f8:7b:8c:0c:10:30:44:b7:6f:c6:9e:78:d9:39:3d:7a:03: 88:97:91:a0:9a:47:c0:1d:e7:3d:bd:4d:fb:0a:39:c1:71:77: d9:7a:ec:d4:96:28:4d:c3:70:f2:5d:5d:51:8a:41:34:6f:34: bb:e6:3d:16:23:b7:8a:bc:eb:9c:b5:85:54:9a:8e:75:76:b6: 3d:d7:dd:32:01:10:ec:3e:bf:cd:5e:36:71:90:68:d6:2f:99: 8f:8b:4b:5a:13:d0:6e:15:0d:3e:68:96:d6:27:e7:16:f4:8d: a5:6a:79:d9:51:f2:7c:e5:2e:82:c4:af:e9:ed:94:3c:c5:53: 36:a2:8c:c2:a6:e3:cc:8f:eb:f6:87:30:8a:b9:a1:8e:3d:41: a5:4e:12:2c:b6:9b:7d:9c:d7:f1:9a:74:19:b9:45:2c:0c:e4: 3f:9a:37:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Um4l91lqFvvEWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YzBlZWQ4ZDAtYTEyMS00YzM2LWFkZWItZjRhODgwODNlOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsjFMbX5QyoaRRQ1y3Onb0DhMwiqqnpU1Shi feWpE52MOfCrBbYgiMBz158LoZwfXfTmR0eORmcJ/KUIKaUwzgAAhEGmrOC20GPG Nwy9IByWoMqCq7fTUOwfJt2IEGHhuHILN/bh6Vpo6gWG93xbneDLM2dAyZ940ic/ U1dBzDnFvORUWFD8dY0mYWhp5QcgccRiSp7MNIHrL4SsghHrJ/xurZ6OA2Hskpan 2NOQhs/SViezX3nm4W/Mpu6YqNlvBlH2CaHMXkWtYwFcKdbHIrD7DKCRKuKZZ3S6 e15m6bpYztMiv/eBS20f3w2jTMoevr/Y3mkVDuLlAOEpzZeAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBTLXMJKlaA0WF2ShP4xhmRM/59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjdkNjM5MzMtMDY4Yi0z NWFmLTliNzYtYmU0YmM0ODc2ZmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACG2+99A0MJDgdIr07yNrpqjNsFZqG/b93h6VaZRIrI/w9w3kuTPVA8U IvwPrDMhwN6QefjDutcENQ+nuL9kRfqP2s/5bYg9ONECAbLsn8oMOAtf/1p3ozmg gaD4e4wMEDBEt2/GnnjZOT16A4iXkaCaR8Ad5z29TfsKOcFxd9l67NSWKE3DcPJd XVGKQTRvNLvmPRYjt4q865y1hVSajnV2tj3X3TIBEOw+v81eNnGQaNYvmY+LS1oT 0G4VDT5oltYn5xb0jaVqedlR8nzlLoLEr+ntlDzFUzaijMKm48yP6/aHMIq5oY49 QaVOEiy2m32c1/GadBm5RSwM5D+aNzk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:56 2025 by rpki-client