$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa File: 1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa (raw, json) Hash identifier: 0tBHsavsfpwihLiiuM0JMuFdRSymLvzan/fxFEZBC94= Subject key identifier: B8:1D:48:11:7C:9F:C2:3D:82:31:D3:85:93:25:03:CA:1A:9D:56:49 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526347E5E44420D3022A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397205 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:63:47:e5:e4:44:20:d3:02:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=85e8197f-8ba6-4476-9924-47bba438d2dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:87:be:7e:43:06:6c:fa:3e:ba:31:4b:04: 81:f2:21:68:f6:33:7f:56:3f:63:f2:df:35:0d:c5: fc:58:39:57:66:0a:70:0b:53:1c:5c:37:3a:cb:82: 35:1f:0c:f8:a9:eb:e7:bf:72:2a:48:0b:03:9c:62: ce:66:5b:ab:1d:25:b7:8e:b5:20:86:e0:f9:8f:aa: 46:16:64:f5:61:cf:76:ca:6c:7b:04:f6:61:8e:c4: 83:26:0b:91:4d:c4:32:3f:7f:bf:c2:ca:46:5e:3c: f6:10:6f:ca:b7:10:ff:fa:bf:60:c2:60:07:b4:c3: ff:d2:5f:63:a0:c0:22:6f:cb:21:c5:7f:6f:b8:70: d9:12:5f:a5:92:73:30:9f:b1:20:cb:18:9a:fd:06: f4:30:50:2f:ef:e7:be:3e:00:92:03:82:b5:84:4f: 43:18:71:73:8f:64:d2:8d:91:b9:34:37:cf:d7:e1: 2f:a6:01:64:27:23:31:e4:4e:3b:76:7f:8c:0c:47: a8:0c:28:26:8f:fb:a4:9b:4e:95:21:c2:e3:96:7b: f2:f8:e8:51:e3:95:46:b0:a5:ff:6d:e0:79:d4:25: 70:91:5e:db:6b:27:f4:2c:ff:bc:df:f6:bb:ac:53: b6:49:5e:cd:f3:21:48:1f:46:7c:10:56:e0:94:b9: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1D:48:11:7C:9F:C2:3D:82:31:D3:85:93:25:03:CA:1A:9D:56:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a3911cc-3f98-3efd-8ab7-7c1bf2ef0077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:51:1e:db:c7:74:85:be:48:4b:8f:7b:73:45:89:e6:51:42: fa:5e:1e:6c:e1:20:f8:66:3a:0a:1b:da:c5:95:9c:2c:49:bf: 27:5f:77:91:69:d5:33:94:0b:22:81:48:af:dc:2a:5a:f4:9b: cb:ac:a0:8d:0c:28:59:5b:80:d8:21:2e:2a:48:d6:9e:aa:97: 79:9e:5c:fe:63:53:61:d3:f5:9f:a8:de:d2:21:34:86:86:22: 1f:1a:3d:c5:f5:ab:8f:86:94:81:b7:c2:4a:20:fe:57:72:5c: 02:74:c0:dc:95:1b:64:33:cc:b6:a9:88:be:08:ca:e0:48:f5: 29:3e:1f:30:b2:a4:81:1b:33:cc:94:7b:ee:94:90:d8:f0:71: e1:be:23:22:76:c7:9d:2c:0b:2a:ae:a9:4b:a2:ed:8f:bd:c8: 02:ab:a3:fd:a6:19:55:13:8a:da:fc:31:23:87:9a:8b:01:a9: c9:fd:b7:2b:5f:be:a4:4f:e7:1a:5a:81:47:b2:38:0c:d8:74: f2:6d:0e:21:a4:46:da:7f:77:2c:b0:a8:5b:7c:7d:43:c4:1c: 50:95:8d:18:e4:ac:22:84:80:fc:a3:af:15:9a:98:81:25:ea: 0b:7d:08:a7:84:3c:f4:f3:36:b5:8b:55:eb:61:c5:ff:9c:74: f5:e2:3f:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmNH5eREINMCKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ODVlODE5N2YtOGJhNi00NDc2LTk5MjQtNDdiYmE0MzhkMmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwaHvn5DBmz6ProxSwSB8iFo9jN/Vj9j8t81 DcX8WDlXZgpwC1McXDc6y4I1Hwz4qevnv3IqSAsDnGLOZlurHSW3jrUghuD5j6pG FmT1Yc92ymx7BPZhjsSDJguRTcQyP3+/wspGXjz2EG/KtxD/+r9gwmAHtMP/0l9j oMAib8shxX9vuHDZEl+lknMwn7Egyxia/Qb0MFAv7+e+PgCSA4K1hE9DGHFzj2TS jZG5NDfP1+EvpgFkJyMx5E47dn+MDEeoDCgmj/ukm06VIcLjlnvy+OhR45VGsKX/ beB51CVwkV7bayf0LP+83/a7rFO2SV7N8yFIH0Z8EFbglLnbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgdSBF8n8I9gjHThZMlA8oanVZJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWEzOTExY2MtM2Y5OC0z ZWZkLThhYjctN2MxYmYyZWYwMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpRHtvHdIW+SEuPe3NFieZRQvpeHmzhIPhmOgob2sWVnCxJvydfd5Fp 1TOUCyKBSK/cKlr0m8usoI0MKFlbgNghLipI1p6ql3meXP5jU2HT9Z+o3tIhNIaG Ih8aPcX1q4+GlIG3wkog/ldyXAJ0wNyVG2QzzLapiL4IyuBI9Sk+HzCypIEbM8yU e+6UkNjwceG+IyJ2x50sCyquqUui7Y+9yAKro/2mGVUTitr8MSOHmosBqcn9tytf vqRP5xpagUeyOAzYdPJtDiGkRtp/dyywqFt8fUPEHFCVjRjkrCKEgPyjrxWamIEl 6gt9CKeEPPTzNrWLVethxf+cdPXiP/8= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:39 2025 by rpki-client