$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/149e5dbb-9f96-3f48-bca8-2ad056bb1527.roa File: 149e5dbb-9f96-3f48-bca8-2ad056bb1527.roa (raw, json) Hash identifier: jbjT335Z4Wy3weyDkloiWRUKhEE8wsWyX1qEe3Ysi5o= Subject key identifier: 43:06:2D:D3:E2:AA:A9:48:E5:66:75:F5:4B:4E:9F:20:EF:44:79:ED Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA97A0D4660D57643420E880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/149e5dbb-9f96-3f48-bca8-2ad056bb1527.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 25485 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a0:d4:66:0d:57:64:34:20:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=247ae441-e3ee-4494-95d7-9b57c84f3bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:fe:e4:fd:39:82:fc:55:38:ee:ea:55:1c: 45:55:d4:77:59:5f:c1:fd:a0:67:9a:9b:77:3e:6c: 08:71:b7:10:65:3e:e5:61:14:74:40:06:fe:4c:32: 0f:b2:63:86:d4:a9:45:cc:cf:2d:52:69:0c:b3:8a: a9:f6:8d:8b:3e:29:ef:26:88:16:81:3f:9f:81:7f: d7:03:72:24:3b:10:6a:d0:56:54:7e:53:46:9d:1a: 12:b8:b8:63:e4:d0:10:84:c2:02:dd:e8:3a:9c:f5: 4c:41:55:9c:5d:37:db:1d:2d:67:20:31:5d:a8:53: 56:a8:5e:f0:aa:19:75:a3:20:19:3a:89:16:bc:d5: 9a:29:bf:2b:04:f7:b7:7b:ac:2a:20:f0:46:05:3b: d4:8d:3d:ad:c2:08:58:9b:34:1b:39:33:aa:57:ba: 5b:67:66:1f:99:af:f5:f6:51:a5:e1:04:b8:cf:c0: c5:5a:57:f4:f1:bd:74:4e:18:58:60:3f:b5:92:3a: e5:6c:fb:e9:7a:fe:f0:24:88:1e:aa:d6:a9:8e:71: e0:3d:1a:3d:9c:5f:4b:b7:ee:53:67:77:81:ae:2f: 0e:ce:27:6c:4f:b5:6a:44:4e:51:bb:77:f5:aa:b9: ee:fb:54:68:3a:36:87:a7:0c:8b:95:f5:59:ad:c1: d9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:06:2D:D3:E2:AA:A9:48:E5:66:75:F5:4B:4E:9F:20:EF:44:79:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/149e5dbb-9f96-3f48-bca8-2ad056bb1527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:45:36:27:f6:e5:5f:51:cf:7f:45:32:4c:09:63:a6:d4:53: 17:8e:80:71:cf:97:48:04:53:9d:bf:e3:d9:83:f5:d6:ab:10: 57:d6:d5:e2:34:97:a5:ee:eb:d7:af:48:d6:99:c0:28:43:d9: e4:32:67:10:e7:8c:bc:e0:33:5f:cd:ae:c3:95:38:47:6f:19: 5e:bb:39:f6:bb:00:9a:a3:0e:67:e6:2b:f2:49:79:89:4d:e9: 87:8d:19:f5:d0:bf:84:0d:08:fd:a5:eb:0f:cf:13:49:0a:dc: 2c:31:df:49:1f:c4:bf:ac:69:7b:57:06:98:77:94:90:31:08: 65:34:c6:6f:a0:28:7a:77:0a:ef:83:d9:22:6f:81:56:e5:92: 0f:06:7b:b1:a1:05:50:a1:b3:7e:74:98:ca:5c:dd:bc:76:5e: c9:fd:ad:de:52:a4:e8:da:69:a1:67:94:83:12:99:67:ba:1f: 42:e6:99:a8:09:96:dd:63:4f:dd:f5:0b:e9:5c:a7:4a:41:ed: 09:c1:c1:a3:68:bd:24:66:57:2e:e8:b3:5c:64:66:c3:93:e3: 33:f1:e3:12:aa:27:d1:dc:31:60:72:0c:f9:89:31:77:b9:a3: ce:0e:db:1e:cb:03:65:be:ac:75:a8:a3:11:9e:c5:c4:fd:5c: 2a:a2:fc:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6DUZg1XZDQg6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MjQ3YWU0NDEtZTNlZS00NDk0LTk1ZDctOWI1N2M4NGYzYmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Pj+5P05gvxVOO7qVRxFVdR3WV/B/aBnmpt3 PmwIcbcQZT7lYRR0QAb+TDIPsmOG1KlFzM8tUmkMs4qp9o2LPinvJogWgT+fgX/X A3IkOxBq0FZUflNGnRoSuLhj5NAQhMIC3eg6nPVMQVWcXTfbHS1nIDFdqFNWqF7w qhl1oyAZOokWvNWaKb8rBPe3e6wqIPBGBTvUjT2twghYmzQbOTOqV7pbZ2Yfma/1 9lGl4QS4z8DFWlf08b10ThhYYD+1kjrlbPvpev7wJIgeqtapjnHgPRo9nF9Lt+5T Z3eBri8OzidsT7VqRE5Ru3f1qrnu+1RoOjaHpwyLlfVZrcHZLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMGLdPiqqlI5WZ19UtOnyDvRHntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQ5ZTVkYmItOWY5Ni0z ZjQ4LWJjYTgtMmFkMDU2YmIxNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNFNif25V9Rz39FMkwJY6bUUxeOgHHPl0gEU52/49mD9darEFfW1eI0 l6Xu69evSNaZwChD2eQyZxDnjLzgM1/NrsOVOEdvGV67Ofa7AJqjDmfmK/JJeYlN 6YeNGfXQv4QNCP2l6w/PE0kK3Cwx30kfxL+saXtXBph3lJAxCGU0xm+gKHp3Cu+D 2SJvgVblkg8Ge7GhBVChs350mMpc3bx2Xsn9rd5SpOjaaaFnlIMSmWe6H0LmmagJ lt1jT931C+lcp0pB7QnBwaNovSRmVy7os1xkZsOT4zPx4xKqJ9HcMWByDPmJMXe5 o84O2x7LA2W+rHWooxGexcT9XCqi/Lw= -----END CERTIFICATE-----Generated at Wed Oct 29 09:22:28 2025 by rpki-client