$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa File: fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa (raw, json) Hash identifier: 8FN63JOoRY/0asA0pxuuYy6pmXlOpiJXwy2CGmPFIgM= Subject key identifier: 42:6C:3A:3F:4B:72:C2:93:C6:54:F1:CD:A7:47:34:A5:F5:9C:6F:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52661859A88303DBEE35C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396681 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:66:18:59:a8:83:03:db:ee:35:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=a3e9f34c-f1af-4eea-b66b-d8f3a46d91e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:bd:29:b9:f7:7c:bc:99:ba:a2:39:12:33:a5: 1a:fe:62:36:fc:e1:fe:26:f6:d4:ea:5a:45:2f:eb: 0b:a0:21:4a:de:ac:43:af:64:09:1b:4e:b5:67:53: bc:8b:29:a6:6a:a2:c9:11:3c:41:e9:da:77:91:5a: 0e:3f:25:5c:b8:97:5c:b0:c5:ca:32:fc:cd:80:ab: 28:b2:b5:a7:c0:15:86:2b:1a:a8:00:ae:5d:d4:11: 49:6c:2e:3c:fe:fb:10:c4:01:c9:6a:85:a2:f3:22: b7:c6:ff:31:df:17:64:06:d1:10:9b:e1:83:49:22: c9:2c:cc:e6:fb:49:8a:36:a5:91:b8:fa:f5:c9:f8: f4:98:e3:22:26:5d:b0:0f:e3:21:0a:09:7f:3f:f7: 09:1d:2a:e4:ac:be:e0:b8:ea:c9:a8:ee:2b:2a:6a: 7e:70:84:61:37:d5:aa:e9:b0:78:98:3e:7e:80:fe: 64:60:dd:47:9b:c1:c2:3f:2f:b3:1e:8f:23:b7:3c: 79:cf:80:35:7c:70:97:a5:ef:4b:d9:16:b0:23:c3: 6e:3a:99:7b:cd:7f:d6:15:0d:8d:cc:5e:52:65:b7: 63:c5:b3:41:f4:8f:a9:59:bf:c8:09:bb:80:ba:7f: 83:db:1f:df:f1:16:c5:25:d0:16:b5:04:b7:d4:a9: 8c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6C:3A:3F:4B:72:C2:93:C6:54:F1:CD:A7:47:34:A5:F5:9C:6F:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd5b5c66-b7d1-3d13-b467-0ee05d2e13a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:93:8f:01:d8:b8:af:86:3e:37:8a:ae:58:ea:d4:d4:fc:e6: 1d:82:f3:82:2e:3a:7c:c6:a5:9f:37:d5:3f:6a:fe:49:ff:33: 2c:36:00:64:eb:22:87:10:a5:fd:c4:b5:4f:21:ea:ee:05:8f: 80:21:48:cf:cf:1e:89:cb:07:d7:cb:b6:9d:2c:c2:40:38:29: 6b:fc:17:d5:63:0e:31:c0:3c:5a:a2:71:1b:fa:be:55:04:6a: 21:b6:ef:a9:41:57:c6:fd:64:33:b8:aa:ca:8e:bd:9c:43:4a: ba:40:5a:59:eb:ee:a0:13:2a:46:46:8f:14:d1:db:56:00:57: 6f:83:f3:59:be:ba:ad:a8:55:05:9c:e8:a9:42:e6:98:58:cc: bd:70:bb:cb:4b:00:8d:38:5a:9c:fb:bd:bc:00:4f:fa:88:be: 7d:2d:d8:49:ec:50:1f:19:3c:7a:c0:af:26:0e:2c:d4:7f:20: da:83:79:5b:0e:6b:af:e4:09:80:b0:a5:e5:a2:9f:4f:30:54: 42:08:c8:c6:d9:27:70:df:89:13:5a:98:9e:13:77:72:fe:b9: 8f:c3:da:43:91:7c:0b:ad:a0:48:e4:60:da:2f:04:6b:6c:31: 72:0a:68:f0:b5:79:d3:be:42:a8:95:10:d0:a7:09:a6:04:9a: 9e:a8:fb:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmYYWaiDA9vuNcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk YTNlOWYzNGMtZjFhZi00ZWVhLWI2NmItZDhmM2E0NmQ5MWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL0pufd8vJm6ojkSM6Ua/mI2/OH+JvbU6lpF L+sLoCFK3qxDr2QJG061Z1O8iymmaqLJETxB6dp3kVoOPyVcuJdcsMXKMvzNgKso srWnwBWGKxqoAK5d1BFJbC48/vsQxAHJaoWi8yK3xv8x3xdkBtEQm+GDSSLJLMzm +0mKNqWRuPr1yfj0mOMiJl2wD+MhCgl/P/cJHSrkrL7guOrJqO4rKmp+cIRhN9Wq 6bB4mD5+gP5kYN1Hm8HCPy+zHo8jtzx5z4A1fHCXpe9L2RawI8NuOpl7zX/WFQ2N zF5SZbdjxbNB9I+pWb/ICbuAun+D2x/f8RbFJdAWtQS31KmM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJsOj9LcsKTxlTxzadHNKX1nG+nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQ1YjVjNjYtYjdkMS0z ZDEzLWI0NjctMGVlMDVkMmUxM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOTjwHYuK+GPjeKrljq1NT85h2C84IuOnzGpZ831T9q/kn/Myw2AGTr IocQpf3EtU8h6u4Fj4AhSM/PHonLB9fLtp0swkA4KWv8F9VjDjHAPFqicRv6vlUE aiG276lBV8b9ZDO4qsqOvZxDSrpAWlnr7qATKkZGjxTR21YAV2+D81m+uq2oVQWc 6KlC5phYzL1wu8tLAI04Wpz7vbwAT/qIvn0t2EnsUB8ZPHrAryYOLNR/INqDeVsO a6/kCYCwpeWin08wVEIIyMbZJ3DfiRNamJ4Td3L+uY/D2kORfAutoEjkYNovBGts MXIKaPC1edO+QqiVENCnCaYEmp6o+y4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:22 2025 by rpki-client