$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cb5c446-f874-3672-8aa0-f1d22168644b.roa File: 1cb5c446-f874-3672-8aa0-f1d22168644b.roa (raw, json) Hash identifier: /DQxC9Dco/lN7SZ40AcEx1+2gKcytZaqafPvftrZ664= Subject key identifier: C8:91:81:FA:2B:C9:AE:55:08:88:B6:45:6B:AF:71:0F:55:81:C0:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA97B514882ED65E88AE5480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cb5c446-f874-3672-8aa0-f1d22168644b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 397202 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b5:14:88:2e:d6:5e:88:ae:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=031ac8b1-f194-4bf7-af25-cfc99d13c3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:d3:36:df:c8:97:0a:31:f4:d5:aa:f5:27: 5a:9a:b3:d4:42:32:d0:65:3d:62:3e:f1:ef:e7:bc: ef:4a:50:12:4b:f5:2b:53:45:98:c0:ff:db:e5:3b: c5:84:75:b3:3e:c2:56:73:14:f5:3f:92:6b:18:47: 96:12:18:cd:5b:0c:d1:3a:d6:a1:d6:e0:60:eb:4b: 7e:f3:40:59:26:a7:29:bb:0d:24:ae:28:24:69:20: 70:cd:e4:fb:3a:cb:b9:41:a8:e8:04:44:c7:90:78: 41:47:bd:27:4c:50:70:f4:0a:b2:4b:db:67:74:e7: dc:d8:7a:c3:bd:8a:8e:44:0c:4d:b9:79:d1:fc:19: b7:c2:fd:ea:04:c5:5c:9b:9a:22:20:03:2d:db:84: ac:73:05:7c:20:be:28:9e:a5:39:a8:a6:db:4a:dd: 46:ad:86:e9:32:f1:86:b8:2e:ad:9b:62:be:f6:c5: fd:a9:0e:31:31:b3:86:30:a3:eb:35:e3:94:ce:36: 6a:f3:94:51:bf:c2:c3:e1:c7:1c:c1:d7:f6:4e:7e: 38:60:24:cc:57:1c:97:54:87:29:97:c1:1d:de:0d: b4:ce:e2:72:60:af:36:73:d0:77:e6:b8:e9:00:77: b1:9e:55:56:55:6f:d0:ba:fd:34:06:15:bc:9d:c3: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:91:81:FA:2B:C9:AE:55:08:88:B6:45:6B:AF:71:0F:55:81:C0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cb5c446-f874-3672-8aa0-f1d22168644b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f3:6a:e6:28:8a:5a:3c:75:b6:86:2c:35:87:b4:b4:46:76: 27:59:ef:fe:12:25:a8:78:5d:7c:93:03:d7:65:c0:13:ee:7c: 0d:64:fd:6a:7c:b9:aa:0a:4e:ef:28:79:8d:33:e9:a5:26:95: c5:c9:6f:ea:9d:24:5c:31:81:9a:7b:b9:f2:f4:a9:2a:8b:25: 75:c9:9a:5e:98:34:7c:d5:1a:f4:57:d7:6a:63:e4:3e:56:dd: bb:1e:30:b9:f3:0a:9a:97:e8:f6:a9:39:7f:cf:0a:a8:75:cd: 98:7d:de:67:4b:92:84:d4:fa:af:9c:5f:ed:dd:91:71:5d:c9: 65:f1:ab:1d:70:14:ad:f0:a3:6f:da:fb:37:54:9c:87:9d:6c: 5f:18:05:6a:b1:14:69:4f:bc:b6:03:08:0d:41:d2:5d:2e:b9: 30:ce:18:19:66:3f:db:73:c1:ca:f9:0e:41:7f:67:2e:ff:e4: fa:98:15:11:ed:05:24:c1:97:9d:9a:1a:5d:2d:e1:b8:95:9d: e4:a8:5c:eb:40:a3:ec:94:9e:67:78:f6:be:3f:50:92:91:3c: e4:03:54:0b:c1:0f:e7:ac:ae:29:bb:38:37:1a:ca:f6:24:56: b4:75:97:82:2e:ae:66:3c:32:a1:ee:c9:d2:db:c9:4e:2f:4d: af:06:48:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7UUiC7WXoiuVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk MDMxYWM4YjEtZjE5NC00YmY3LWFmMjUtY2ZjOTlkMTNjM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0PTNt/Ilwox9NWq9SdamrPUQjLQZT1iPvHv 57zvSlASS/UrU0WYwP/b5TvFhHWzPsJWcxT1P5JrGEeWEhjNWwzROtah1uBg60t+ 80BZJqcpuw0krigkaSBwzeT7Osu5QajoBETHkHhBR70nTFBw9AqyS9tndOfc2HrD vYqORAxNuXnR/Bm3wv3qBMVcm5oiIAMt24SscwV8IL4onqU5qKbbSt1GrYbpMvGG uC6tm2K+9sX9qQ4xMbOGMKPrNeOUzjZq85RRv8LD4cccwdf2Tn44YCTMVxyXVIcp l8Ed3g20zuJyYK82c9B35rjpAHexnlVWVW/Quv00BhW8ncPWrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiRgforya5VCIi2RWuvcQ9VgcCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNiNWM0NDYtZjg3NC0z NjcyLThhYTAtZjFkMjIxNjg2NDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLzauYoilo8dbaGLDWHtLRGdidZ7/4SJah4XXyTA9dlwBPufA1k/Wp8 uaoKTu8oeY0z6aUmlcXJb+qdJFwxgZp7ufL0qSqLJXXJml6YNHzVGvRX12pj5D5W 3bseMLnzCpqX6PapOX/PCqh1zZh93mdLkoTU+q+cX+3dkXFdyWXxqx1wFK3wo2/a +zdUnIedbF8YBWqxFGlPvLYDCA1B0l0uuTDOGBlmP9tzwcr5DkF/Zy7/5PqYFRHt BSTBl52aGl0t4biVneSoXOtAo+yUnmd49r4/UJKRPOQDVAvBD+esrim7ODcayvYk VrR1l4IurmY8MqHuydLbyU4vTa8GSLU= -----END CERTIFICATE-----Generated at Wed Oct 29 07:21:43 2025 by rpki-client