$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25f64d97-be5b-33a0-930c-482d14f06365.roa File: 25f64d97-be5b-33a0-930c-482d14f06365.roa (raw, json) Hash identifier: Fbo3muvHDPpwv8p6+VqU/lIyYryqmmR+RnPal7EOwe0= Subject key identifier: 59:5F:A9:C4:E4:D9:A4:B7:21:08:0D:FB:46:B2:7A:7C:68:49:81:B5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F6292BF3CE9C633DDB7D94620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25f64d97-be5b-33a0-930c-482d14f06365.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 396540 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:bf:3c:e9:c6:33:dd:b7:d9:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=0d5c40de-a938-492e-aca2-646afe8b4b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:be:56:00:eb:4d:3d:6b:2b:ed:78:d3:6b: 6e:6a:3b:a3:eb:6a:e5:41:3a:a6:2b:af:68:79:da: 63:4d:52:7f:a7:88:fe:31:b4:b1:82:57:61:90:65: c8:74:f5:20:c0:45:f3:ec:59:26:e3:4c:a9:e0:74: 8e:4c:5d:52:cd:51:95:14:11:da:de:bd:24:e1:26: f5:92:37:4a:fe:4c:72:49:33:b9:27:f3:06:10:3b: a0:b1:77:2f:3d:0a:dc:41:20:12:33:17:6a:06:72: 56:bf:62:8e:52:4b:36:a9:9a:ad:0a:79:4a:64:f5: 85:c3:9e:89:2e:17:68:e9:a3:96:08:d2:4e:b6:f3: 60:e9:64:49:11:ac:25:9b:3d:77:a7:76:ff:0e:c6: 71:ff:e2:80:7d:32:e1:fb:c9:d9:5d:67:17:1f:cb: 0a:00:5b:4f:60:2b:cc:9a:30:b4:5b:e9:04:99:47: 49:a1:99:c8:70:d1:83:a3:02:6f:e7:94:55:ab:22: 42:30:fe:6b:57:1a:be:14:ed:74:f0:b7:c4:6c:4d: 47:79:e5:fc:29:2d:8b:91:53:42:18:5b:ac:73:ba: db:a7:a7:f3:8a:84:75:9c:bf:e0:e9:8c:60:6d:2c: 6d:68:29:d4:38:a9:e4:28:80:8a:51:39:3b:ca:a7: d5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5F:A9:C4:E4:D9:A4:B7:21:08:0D:FB:46:B2:7A:7C:68:49:81:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25f64d97-be5b-33a0-930c-482d14f06365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:66:a7:29:7a:09:c6:26:09:ab:9c:33:31:be:88:1b:4e:a2: 65:f0:b9:11:92:6f:75:c7:e4:df:04:6b:da:53:80:7a:78:33: ae:10:47:ce:8a:08:a4:ce:3c:16:cf:25:a4:65:bf:e6:3c:75: 08:7b:4c:0e:16:23:c4:74:91:ab:14:51:95:40:8a:76:2e:26: 53:bb:08:f7:3d:a1:f4:90:ae:1c:72:f2:68:a0:c3:b7:17:55: 9b:e7:c3:36:1e:cb:42:9a:4d:a0:ca:75:07:5d:56:10:b0:76: 8e:cb:f6:f3:10:27:85:a7:91:66:73:f7:0b:e7:fd:bb:a4:d9: dd:5d:1e:a4:ae:70:d6:77:db:59:90:a0:6d:63:e8:1b:18:82: 18:99:0d:67:28:50:d0:ea:6f:a3:e9:1f:3a:c2:42:21:cd:21: f2:a4:17:9b:22:48:60:24:ae:26:9f:f2:67:70:a0:bb:2d:c3: 75:21:21:e6:58:28:f4:6a:8d:95:11:d8:31:a4:6b:1a:b2:1e: 27:d3:0d:be:3b:30:79:d7:56:ff:dc:6d:b7:39:58:af:73:75: 9e:b4:14:07:2f:17:5d:95:6a:48:41:45:0d:d6:ee:ac:77:4b: a9:e0:44:b1:43:e0:92:27:16:cf:bd:0d:71:b1:97:be:27:a2: 28:3e:c1:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikr886cYz3bfZRiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk MGQ1YzQwZGUtYTkzOC00OTJlLWFjYTItNjQ2YWZlOGI0YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvW+VgDrTT1rK+1402tuajuj62rlQTqmK69o edpjTVJ/p4j+MbSxgldhkGXIdPUgwEXz7Fkm40yp4HSOTF1SzVGVFBHa3r0k4Sb1 kjdK/kxySTO5J/MGEDugsXcvPQrcQSASMxdqBnJWv2KOUks2qZqtCnlKZPWFw56J Lhdo6aOWCNJOtvNg6WRJEawlmz13p3b/DsZx/+KAfTLh+8nZXWcXH8sKAFtPYCvM mjC0W+kEmUdJoZnIcNGDowJv55RVqyJCMP5rVxq+FO108LfEbE1HeeX8KS2LkVNC GFusc7rbp6fzioR1nL/g6YxgbSxtaCnUOKnkKICKUTk7yqfVGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlfqcTk2aS3IQgN+0ayenxoSYG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjVmNjRkOTctYmU1Yi0z M2EwLTkzMGMtNDgyZDE0ZjA2MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVmpyl6CcYmCaucMzG+iBtOomXwuRGSb3XH5N8Ea9pTgHp4M64QR86K CKTOPBbPJaRlv+Y8dQh7TA4WI8R0kasUUZVAinYuJlO7CPc9ofSQrhxy8migw7cX VZvnwzYey0KaTaDKdQddVhCwdo7L9vMQJ4WnkWZz9wvn/buk2d1dHqSucNZ321mQ oG1j6BsYghiZDWcoUNDqb6PpHzrCQiHNIfKkF5siSGAkriaf8mdwoLstw3UhIeZY KPRqjZUR2DGkaxqyHifTDb47MHnXVv/cbbc5WK9zdZ60FAcvF12VakhBRQ3W7qx3 S6ngRLFD4JInFs+9DXGxl74noig+wYM= -----END CERTIFICATE-----Generated at Tue Oct 6 21:13:26 2026 by rpki-client