$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25c314cf-2bca-3a5b-9cb9-e8a5b7602459.roa File: 25c314cf-2bca-3a5b-9cb9-e8a5b7602459.roa (raw, json) Hash identifier: 0p3BFyRzVBfO1WzsEgC5QAk3RDABSnXuxXItVr7IPK4= Subject key identifier: AA:06:97:48:39:56:B5:7C:AD:15:70:04:87:C7:A3:ED:57:E8:CC:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DCA0831402147D3CF7B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25c314cf-2bca-3a5b-9cb9-e8a5b7602459.roa Signing time: Tue 26 Aug 2025 12:32:15 +0000 ROA not before: Tue 26 Aug 2025 12:32:15 +0000 ROA not after: Mon 24 Nov 2025 13:32:15 +0000 asID: 396571 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:ca:08:31:40:21:47:d3:cf:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:15 2025 GMT Not After : Nov 24 13:32:15 2025 GMT Subject: CN=9318f02a-666f-4452-bf0c-2e1fbbe431c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9c:04:63:4b:df:5b:f6:75:a3:5d:90:45:1a: 31:15:5a:4c:20:a8:7e:f4:20:91:e8:30:7a:7e:76: e7:39:87:3c:a2:80:61:94:1b:f1:81:dd:62:81:68: 57:63:86:04:30:e6:62:31:b4:6f:6e:c7:0f:9f:43: 69:54:d7:1b:3c:66:71:ca:29:bc:c5:5f:0c:bd:be: 72:8f:7c:15:b1:f3:a7:17:01:bd:e3:16:e6:8c:6a: 97:a0:5a:9a:11:c7:0a:5d:c5:1f:55:da:ce:dd:02: 90:e0:6e:03:aa:ed:0c:65:17:72:da:8f:60:25:46: eb:45:48:6a:b6:66:61:7b:98:fc:8f:83:06:1c:7c: 77:5f:9c:8c:ca:9b:39:d4:97:94:6b:03:10:ea:d0: 85:0f:c6:04:b2:6c:37:d6:27:25:af:63:60:75:06: 77:df:3d:2b:14:f9:42:db:4d:72:e7:dd:24:83:3f: 8d:54:21:c4:5c:56:15:13:9e:d9:3e:68:f8:19:ef: 8f:ae:a9:05:ca:ec:52:88:a6:68:19:27:63:26:bc: 37:0d:e4:7e:7f:69:7e:50:dc:49:64:09:c5:9c:52: 04:16:d8:9d:c2:06:77:05:0e:9a:45:8d:f5:d6:11: 2d:08:cf:56:54:59:ea:7f:2e:f2:71:c8:98:0c:5d: 76:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:06:97:48:39:56:B5:7C:AD:15:70:04:87:C7:A3:ED:57:E8:CC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25c314cf-2bca-3a5b-9cb9-e8a5b7602459.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:47:36:8c:14:d6:d4:06:a9:6a:ae:94:f1:70:b5:3b:58:cd: ef:6e:58:73:d7:97:fa:06:8e:90:cc:a5:1b:89:e9:92:c4:bb: 70:0c:bd:53:87:8c:0f:79:58:c1:19:63:69:f7:0d:5a:c5:8b: 10:07:c3:cc:fb:14:47:b0:b7:2e:bc:eb:62:b1:40:b9:88:c1: 72:c7:e5:75:18:0f:8c:a2:2a:2e:2b:02:6c:a8:56:c1:43:7c: 82:21:5c:ac:80:de:c9:0e:03:83:87:16:63:f9:81:19:12:20: 27:66:ee:7f:ec:1b:29:3e:f9:cd:de:c2:e4:33:5d:ee:9c:4b: 27:79:1e:c3:49:32:c4:bf:74:52:fc:07:42:d0:56:5f:0c:cd: 29:6f:8b:e7:b3:f5:e3:d6:14:4c:70:16:9d:13:a8:4c:38:f0: 3a:dd:04:11:13:d6:82:69:51:1f:bc:6a:4b:9f:9f:39:81:fa: fe:db:c1:b0:e7:cd:c3:a8:2b:f9:f3:b1:56:df:cd:56:e3:0e: 6d:34:82:5c:20:b3:bc:f8:b1:18:68:a4:2f:53:25:56:56:a5: 56:c3:68:c3:6c:ea:33:18:b3:69:df:0f:cf:71:36:e8:49:0a: c0:60:7c:5b:9d:24:40:0d:9a:ac:3a:ff:e4:3f:9a:80:92:f9: 50:11:9e:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcoIMUAhR9PPewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNVoXDTI1MTEyNDEzMzIxNVowLzEtMCsGA1UEAxMk OTMxOGYwMmEtNjY2Zi00NDUyLWJmMGMtMmUxZmJiZTQzMWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpwEY0vfW/Z1o12QRRoxFVpMIKh+9CCR6DB6 fnbnOYc8ooBhlBvxgd1igWhXY4YEMOZiMbRvbscPn0NpVNcbPGZxyim8xV8Mvb5y j3wVsfOnFwG94xbmjGqXoFqaEccKXcUfVdrO3QKQ4G4Dqu0MZRdy2o9gJUbrRUhq tmZhe5j8j4MGHHx3X5yMyps51JeUawMQ6tCFD8YEsmw31iclr2NgdQZ33z0rFPlC 201y590kgz+NVCHEXFYVE57ZPmj4Ge+PrqkFyuxSiKZoGSdjJrw3DeR+f2l+UNxJ ZAnFnFIEFtidwgZ3BQ6aRY311hEtCM9WVFnqfy7ycciYDF12dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoGl0g5VrV8rRVwBIfHo+1X6MyhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjVjMzE0Y2YtMmJjYS0z YTViLTljYjktZThhNWI3NjAyNDU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJHNowU1tQGqWqulPFwtTtYze9uWHPXl/oGjpDMpRuJ6ZLEu3AMvVOH jA95WMEZY2n3DVrFixAHw8z7FEewty6862KxQLmIwXLH5XUYD4yiKi4rAmyoVsFD fIIhXKyA3skOA4OHFmP5gRkSICdm7n/sGyk++c3ewuQzXe6cSyd5HsNJMsS/dFL8 B0LQVl8MzSlvi+ez9ePWFExwFp0TqEw48DrdBBET1oJpUR+8akufnzmB+v7bwbDn zcOoK/nzsVbfzVbjDm00glwgs7z4sRhopC9TJVZWpVbDaMNs6jMYs2nfD89xNuhJ CsBgfFudJEANmqw6/+Q/moCS+VARnsI= -----END CERTIFICATE-----Generated at Wed Sep 10 17:57:40 2025 by rpki-client