$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21dc5c75-da72-3528-8d0f-ce3b773d0620.roa File: 21dc5c75-da72-3528-8d0f-ce3b773d0620.roa (raw, json) Hash identifier: nLLTdb+CdUh+FU0XYkRzICl00Kwsy6QYO5MShvdMUgI= Subject key identifier: 11:C9:9B:82:67:58:61:6E:73:57:6A:28:FB:F4:31:81:11:BF:F7:BB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B4081D7DE1E669F9E69E89C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21dc5c75-da72-3528-8d0f-ce3b773d0620.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 25485 IP address blocks: 192.43.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:d7:de:1e:66:9f:9e:69:e8:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=0a4ca7b2-1807-480f-9c72-3834aa338378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:05:a1:87:5e:fd:c0:7c:a3:72:c8:f2:1b: 42:a0:7b:46:a8:0f:71:7b:55:9f:ca:5d:c4:9e:21: 86:3c:41:c3:f6:69:eb:6b:e1:eb:1f:c7:e1:34:88: 39:a6:b6:b8:ab:ce:1d:03:bf:76:13:c2:64:ed:24: 25:8a:58:4b:b7:98:59:a2:28:f5:f7:8a:ed:b7:83: 24:55:11:be:56:9d:fd:e8:66:c2:f5:f8:6f:fc:31: c1:c5:b0:e5:a8:7e:a9:fb:be:fb:c5:46:c6:0d:a9: 0d:a8:78:c3:13:35:91:28:a3:83:57:b9:b8:0e:bf: 42:08:9d:06:f7:ef:6c:a7:ec:bc:83:16:33:c4:ec: 66:05:5d:8b:30:40:9d:bf:55:10:34:24:36:54:e9: 71:98:c9:e8:10:97:f5:d8:d3:87:ed:67:ce:52:3e: d6:41:6d:99:37:3e:03:c2:60:f3:84:6e:ff:fd:1f: 97:79:b4:de:77:41:4f:59:cb:f1:81:25:be:d9:53: de:fa:f1:8a:ef:e1:91:dd:9a:6d:94:9c:60:d9:44: e2:b3:25:6c:c1:2b:21:31:97:60:13:10:a6:19:e9: 82:3c:0f:ed:8f:56:7c:b2:b8:67:17:6a:2c:00:9a: e6:10:12:98:ea:8b:b2:37:5e:7d:b3:23:51:aa:71: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C9:9B:82:67:58:61:6E:73:57:6A:28:FB:F4:31:81:11:BF:F7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21dc5c75-da72-3528-8d0f-ce3b773d0620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a6:1f:7f:fc:af:f5:2a:79:18:66:5c:d5:7a:ef:f2:48:52: 69:c6:fc:6f:f9:c5:d9:8b:d7:fe:ab:c3:80:8f:71:7c:ef:d0: e5:58:7a:59:b3:b0:80:c8:f3:44:54:55:9e:16:15:e5:1c:86: 0a:6e:52:dd:f5:6f:69:b3:02:e6:1e:02:f2:1b:ef:e6:c0:e9: f7:4b:07:d8:bc:88:62:fd:12:cf:43:8d:37:8f:50:69:5d:0b: 12:81:42:92:f3:42:ed:12:03:b6:5b:8a:df:8c:81:ca:11:3e: 34:ad:a9:b5:99:8d:16:94:7e:46:4e:9c:29:9d:77:3f:c2:d2: 4b:eb:68:ae:27:c8:79:dc:63:fa:d8:4e:19:76:3c:da:7a:1f: 3f:3b:34:2c:de:0b:74:16:97:ce:81:72:82:cb:3a:a4:52:2d: f3:63:5e:be:e1:de:c8:51:f3:ac:97:a4:bc:2f:5c:55:d8:ca: 48:23:8a:e5:74:df:37:85:53:4a:cb:41:0a:ce:b6:f6:69:5c: 49:3e:dd:5a:aa:33:0d:e4:d8:78:61:22:cf:97:ef:43:f1:02: 5e:13:7d:14:c2:47:6b:22:4a:38:cf:54:5f:0a:17:89:09:df: f3:4f:e9:69:d1:ab:5b:86:50:9e:f0:f3:d6:58:aa:1d:de:d9: 0d:88:43:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgdfeHmafnmnonIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MGE0Y2E3YjItMTgwNy00ODBmLTljNzItMzgzNGFhMzM4Mzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn4FoYde/cB8o3LI8htCoHtGqA9xe1Wfyl3E niGGPEHD9mnra+HrH8fhNIg5pra4q84dA792E8Jk7SQlilhLt5hZoij194rtt4Mk VRG+Vp396GbC9fhv/DHBxbDlqH6p+777xUbGDakNqHjDEzWRKKODV7m4Dr9CCJ0G 9+9sp+y8gxYzxOxmBV2LMECdv1UQNCQ2VOlxmMnoEJf12NOH7WfOUj7WQW2ZNz4D wmDzhG7//R+XebTed0FPWcvxgSW+2VPe+vGK7+GR3ZptlJxg2UTisyVswSshMZdg ExCmGemCPA/tj1Z8srhnF2osAJrmEBKY6ouyN159syNRqnEyeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHJm4JnWGFuc1dqKPv0MYERv/e7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjFkYzVjNzUtZGE3Mi0z NTI4LThkMGYtY2UzYjc3M2QwNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSmH3/8r/UqeRhmXNV67/JIUmnG/G/5xdmL1/6rw4CPcXzv0OVYelmz sIDI80RUVZ4WFeUchgpuUt31b2mzAuYeAvIb7+bA6fdLB9i8iGL9Es9DjTePUGld CxKBQpLzQu0SA7Zbit+MgcoRPjStqbWZjRaUfkZOnCmddz/C0kvraK4nyHncY/rY Thl2PNp6Hz87NCzeC3QWl86BcoLLOqRSLfNjXr7h3shR86yXpLwvXFXYykgjiuV0 3zeFU0rLQQrOtvZpXEk+3VqqMw3k2HhhIs+X70PxAl4TfRTCR2siSjjPVF8KF4kJ 3/NP6WnRq1uGUJ7w89ZYqh3e2Q2IQzM= -----END CERTIFICATE-----Generated at Wed Oct 29 07:18:26 2025 by rpki-client