$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e89c6e-b01c-36da-8903-3de0ddd73f76.roa File: 03e89c6e-b01c-36da-8903-3de0ddd73f76.roa (raw, json) Hash identifier: CVeKu8nDXu/57CfSsPLw90KCQuRa4sW06lFNl/AEhhI= Subject key identifier: 60:AC:AD:2C:77:41:D6:FD:96:3D:A7:D8:B5:A1:25:D7:0D:8E:5A:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DCED403114AC63E26D1E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e89c6e-b01c-36da-8903-3de0ddd73f76.roa Signing time: Tue 26 Aug 2025 12:32:17 +0000 ROA not before: Tue 26 Aug 2025 12:32:17 +0000 ROA not after: Mon 24 Nov 2025 13:32:17 +0000 asID: 397209 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:ce:d4:03:11:4a:c6:3e:26:d1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:17 2025 GMT Not After : Nov 24 13:32:17 2025 GMT Subject: CN=93d19890-3d95-4a9e-833d-a0787b364f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:09:e4:0f:ca:58:e6:da:31:e1:87:f5:ba: 34:80:1d:88:a3:11:2f:b0:27:76:0b:ea:1e:c6:9c: 5c:ca:7e:94:97:25:b4:44:cd:8e:84:7d:29:56:5d: 03:c2:a6:97:a7:b9:84:f7:65:62:a0:e8:59:4b:29: b1:c8:27:04:75:da:b6:91:6d:83:33:10:d2:82:5a: 47:51:00:12:2b:04:87:a7:c1:26:e3:08:7c:d9:1e: 03:67:2b:f5:97:71:83:06:cf:6a:a5:9f:b2:57:34: eb:8a:ae:d3:a0:1d:6f:99:3e:67:f5:e1:0d:d8:53: 38:c0:eb:dc:24:0d:61:db:77:b5:70:e7:97:b1:a4: e0:0a:cf:fc:f3:be:19:f6:7c:3f:f0:11:9c:76:9c: 84:75:5c:f7:7c:88:59:51:e7:cc:76:06:09:d6:5a: 92:f9:1e:f2:a3:2f:82:9a:bc:3a:93:e6:45:e0:84: f1:43:0c:d4:59:7f:7e:aa:f8:34:84:33:91:f2:e3: bc:02:29:1b:76:65:78:58:81:8d:59:72:25:cf:ce: 98:f1:fa:dd:b9:4b:41:86:ae:aa:c1:ee:73:b8:96: 71:23:19:9b:a9:c3:48:18:db:f6:9b:86:6c:83:27: c7:1b:17:f3:ad:19:cf:30:4b:67:80:cf:b9:07:34: 2e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:AC:AD:2C:77:41:D6:FD:96:3D:A7:D8:B5:A1:25:D7:0D:8E:5A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/03e89c6e-b01c-36da-8903-3de0ddd73f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:6c:f7:51:1d:53:4e:95:55:ea:da:79:ea:c7:04:a9:db:00: 1f:88:b2:30:4d:ca:00:3f:f6:3b:71:f4:06:24:47:9a:2b:3e: 74:c3:81:6d:d2:f1:79:9f:36:7e:a9:6f:61:78:e1:37:a4:06: fa:12:ac:f2:5d:5e:11:2c:84:0f:f3:e1:55:ba:89:bb:08:78: 10:3b:ee:bf:76:2f:e9:75:67:9f:79:9a:80:53:17:b1:11:e1: ad:92:e3:2d:73:77:da:5b:43:49:a6:e0:6a:e4:b1:05:0b:61: 1b:e0:aa:ea:f1:3a:3a:41:50:09:5d:87:db:72:31:29:15:5d: 43:83:2a:bc:11:cc:e7:69:db:82:94:be:5e:e0:82:64:53:92: 88:d8:da:e9:76:cc:9f:e8:3c:91:aa:05:82:b1:39:76:f5:f9: 7e:87:5d:c3:97:fe:38:d6:58:6a:ac:78:54:ab:f3:35:66:cd: b5:28:cb:14:f1:4f:65:aa:f0:81:0e:25:45:3a:0e:5e:42:f9: a4:d4:3f:b8:37:42:96:d2:76:3c:80:e0:1e:06:b7:a8:23:01: 29:45:a5:89:9d:c9:aa:2c:37:1d:32:5c:f1:4e:7e:70:f2:51: 5a:45:64:d4:66:42:5c:e0:03:e0:2f:0d:97:85:68:c3:75:53: 80:92:eb:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8Dc7UAxFKxj4m0eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxN1oXDTI1MTEyNDEzMzIxN1owLzEtMCsGA1UEAxMk OTNkMTk4OTAtM2Q5NS00YTllLTgzM2QtYTA3ODdiMzY0ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWcJ5A/KWObaMeGH9bo0gB2IoxEvsCd2C+oe xpxcyn6UlyW0RM2OhH0pVl0DwqaXp7mE92VioOhZSymxyCcEddq2kW2DMxDSglpH UQASKwSHp8Em4wh82R4DZyv1l3GDBs9qpZ+yVzTriq7ToB1vmT5n9eEN2FM4wOvc JA1h23e1cOeXsaTgCs/8874Z9nw/8BGcdpyEdVz3fIhZUefMdgYJ1lqS+R7yoy+C mrw6k+ZF4ITxQwzUWX9+qvg0hDOR8uO8AikbdmV4WIGNWXIlz86Y8frduUtBhq6q we5zuJZxIxmbqcNIGNv2m4ZsgyfHGxfzrRnPMEtngM+5BzQuVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCsrSx3Qdb9lj2n2LWhJdcNjlp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDNlODljNmUtYjAxYy0z NmRhLTg5MDMtM2RlMGRkZDczZjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBs91EdU06VVeraeerHBKnbAB+IsjBNygA/9jtx9AYkR5orPnTDgW3S 8XmfNn6pb2F44TekBvoSrPJdXhEshA/z4VW6ibsIeBA77r92L+l1Z595moBTF7ER 4a2S4y1zd9pbQ0mm4GrksQULYRvgqurxOjpBUAldh9tyMSkVXUODKrwRzOdp24KU vl7ggmRTkojY2ul2zJ/oPJGqBYKxOXb1+X6HXcOX/jjWWGqseFSr8zVmzbUoyxTx T2Wq8IEOJUU6Dl5C+aTUP7g3QpbSdjyA4B4Gt6gjASlFpYmdyaosNx0yXPFOfnDy UVpFZNRmQlzgA+AvDZeFaMN1U4CS6wk= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:17 2025 by rpki-client