$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa File: 1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa (raw, json) Hash identifier: XVqXwTFoetIZGkYVUXhoYzbDSq/15ZpoFvXFrgfqFFs= Subject key identifier: 2F:C4:6D:FA:B9:18:FB:72:C5:52:3D:D8:57:D1:45:55:A8:D8:5D:75 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52670E7C9BEA7C1C3D8580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20431 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:67:0e:7c:9b:ea:7c:1c:3d:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=1d9dafed-eb77-4a35-bb62-bc511b7c885e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8d:06:ee:d0:4b:e0:4e:29:1d:cf:0d:20:7b: 8a:79:4a:fd:e2:23:18:17:94:06:af:fd:82:69:77: 42:bd:87:89:12:fe:e0:a8:a5:19:03:06:15:c6:2d: b6:dd:2a:8b:b0:bb:0c:28:bf:d5:f0:a7:2b:2a:e5: 36:59:bb:5a:9b:56:80:71:95:c2:66:56:ea:dc:3d: dc:0b:40:a7:37:7a:75:2d:b2:be:90:60:d9:f0:fb: c6:1a:50:81:dd:9a:34:b8:e3:7f:f9:77:c3:3d:78: 6a:8f:23:90:f3:b4:f8:e6:fd:ca:e1:33:a4:d2:7e: 77:97:bc:8e:9d:87:77:ae:89:b7:ed:e0:6d:9b:4b: 54:96:ac:4b:df:79:be:17:4d:c0:8f:3f:21:e5:61: 24:66:33:02:74:7f:3e:e1:11:53:30:6e:8c:ed:ff: a7:ff:46:ef:a5:32:fa:f3:73:1f:42:0e:99:6f:39: 8f:be:71:a3:07:9e:0d:81:18:ff:bd:ca:d5:f7:06: b6:3c:d1:05:42:2f:79:0d:c8:79:39:40:69:3a:58: 1d:ef:cc:2d:ba:8e:48:82:23:f2:47:76:78:4a:f2: 4d:c0:6b:6b:3c:e8:84:87:8d:c7:6c:0f:c3:8e:c4: 33:9f:4b:bb:20:81:f6:5f:6b:5c:42:a3:17:f6:3b: ca:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C4:6D:FA:B9:18:FB:72:C5:52:3D:D8:57:D1:45:55:A8:D8:5D:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1cef4cd4-dab0-375d-a79e-cb9078c0c2bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:05:3b:e9:99:0f:5d:0d:24:8d:1d:7a:9a:1b:63:f1:a9:5c: 07:87:09:32:60:82:3e:56:43:83:cd:5e:4b:12:ab:3d:1b:81: 63:fb:3b:b4:59:66:31:15:92:2a:84:80:92:02:67:3e:ab:97: 04:ba:51:71:d2:e9:68:7f:f4:dc:87:bf:2b:7a:d3:d1:7e:49: ed:e0:1d:a3:f4:a3:c1:c4:84:f9:90:b8:20:b4:ff:b2:41:c0: 90:6c:6f:f4:38:7d:cc:94:d3:a3:77:b4:2a:4e:9b:a2:05:86: 22:c2:79:f9:7b:0b:7d:85:05:2e:78:76:e1:cc:3a:57:2d:87: 9e:98:8c:43:96:c1:ee:dc:0f:0b:0a:80:aa:9e:62:06:c3:72: 24:c3:8a:52:8a:c3:0d:e1:fb:c1:f1:31:26:a4:e9:41:4a:8d: 6b:9f:4b:60:d9:41:cc:a3:22:5b:60:5b:cb:6e:8a:5d:cf:25: 59:cd:7b:da:96:7b:1c:f2:e0:ab:8a:7d:35:32:e7:57:bd:f7: c6:26:60:44:36:a3:8d:de:de:e6:46:3c:19:81:08:d6:6a:bc: 2a:57:e3:bb:29:1c:ad:3a:a4:8b:ab:6c:d1:ae:06:77:94:2b: 2e:95:36:64:06:9a:b6:bb:b5:bd:a4:d7:df:d5:96:8e:a7:e5: 3b:0a:3b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmcOfJvqfBw9hYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MWQ5ZGFmZWQtZWI3Ny00YTM1LWJiNjItYmM1MTFiN2M4ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY0G7tBL4E4pHc8NIHuKeUr94iMYF5QGr/2C aXdCvYeJEv7gqKUZAwYVxi223SqLsLsMKL/V8KcrKuU2Wbtam1aAcZXCZlbq3D3c C0CnN3p1LbK+kGDZ8PvGGlCB3Zo0uON/+XfDPXhqjyOQ87T45v3K4TOk0n53l7yO nYd3rom37eBtm0tUlqxL33m+F03Ajz8h5WEkZjMCdH8+4RFTMG6M7f+n/0bvpTL6 83MfQg6ZbzmPvnGjB54NgRj/vcrV9wa2PNEFQi95Dch5OUBpOlgd78wtuo5IgiPy R3Z4SvJNwGtrPOiEh43HbA/DjsQzn0u7IIH2X2tcQqMX9jvKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/Ebfq5GPtyxVI92FfRRVWo2F11MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWNlZjRjZDQtZGFiMC0z NzVkLWE3OWUtY2I5MDc4YzBjMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUFO+mZD10NJI0depobY/GpXAeHCTJggj5WQ4PNXksSqz0bgWP7O7RZ ZjEVkiqEgJICZz6rlwS6UXHS6Wh/9NyHvyt609F+Se3gHaP0o8HEhPmQuCC0/7JB wJBsb/Q4fcyU06N3tCpOm6IFhiLCefl7C32FBS54duHMOlcth56YjEOWwe7cDwsK gKqeYgbDciTDilKKww3h+8HxMSak6UFKjWufS2DZQcyjIltgW8tuil3PJVnNe9qW exzy4KuKfTUy51e998YmYEQ2o43e3uZGPBmBCNZqvCpX47spHK06pIurbNGuBneU Ky6VNmQGmra7tb2k19/Vlo6n5TsKOyk= -----END CERTIFICATE-----Generated at Wed Oct 29 09:26:00 2025 by rpki-client