$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa File: 355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa (raw, json) Hash identifier: fY1BN0x1A91QXSeXXi7Re1CGtqERUCQEMQpkRmY/Lk0= Subject key identifier: 24:73:BB:37:05:B2:56:7C:A6:A6:26:40:E3:8B:66:34:DE:E8:C7:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52765280D51D08ABC07500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396630 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:76:52:80:d5:1d:08:ab:c0:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=d7eaca4a-4572-4431-a911-b1d44b17c95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:1c:a5:71:2c:da:e1:e9:ed:36:84:89:4a: ea:f3:e1:db:6c:33:58:9f:14:12:3f:0e:82:6a:91: f0:0d:83:fa:e8:30:c6:7d:5d:84:36:79:4e:07:b2: 06:ee:ff:60:ee:0b:cf:5f:fd:1f:a0:7f:8c:c8:86: 09:c8:3f:25:55:0b:9e:07:4a:4c:75:6d:9e:88:08: 05:eb:46:36:77:e6:ab:47:76:99:c1:f1:56:d5:01: 28:a4:1e:c8:42:99:21:8e:86:f1:63:f8:6b:32:ab: 2a:4d:c2:a7:f1:6c:c3:42:c2:aa:23:53:f5:bf:12: 4a:bf:1d:69:8f:24:6e:6f:ff:b5:64:01:71:d8:f3: 9c:8c:03:05:d7:83:9a:3d:32:53:e1:d8:08:54:2d: 48:06:a1:ce:c8:9b:a6:a6:a3:bc:de:d0:14:c2:af: 25:cf:56:6b:04:00:45:00:73:cd:47:05:76:20:f6: b8:c1:73:d4:9e:3a:4d:7d:fa:c3:a6:14:25:20:0c: b8:af:1c:d1:a6:49:d9:ea:98:3f:93:99:8d:71:ad: 40:b5:d2:0d:f5:be:23:dd:39:5e:74:8e:de:f3:f9: 27:06:d0:84:3f:88:5e:ae:83:65:06:31:0e:ea:04: 57:a7:0d:b4:1f:36:b1:4c:6b:cb:ad:c8:ff:ea:3b: dd:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:BB:37:05:B2:56:7C:A6:A6:26:40:E3:8B:66:34:DE:E8:C7:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/355df51a-631b-35fc-a99b-fcbf1daa4d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:5a:36:02:ce:14:95:70:c1:a8:3c:a2:cc:51:9d:8e:44:11: f7:e9:71:3d:ce:1c:b7:7e:71:51:11:91:67:24:0f:de:9a:a0: b6:74:a7:5c:46:65:84:db:9d:42:68:32:db:76:fd:1f:63:82: d7:7d:ff:7a:1e:8e:19:d5:a4:99:75:f1:37:21:07:b5:68:23: 8f:06:4f:08:bb:8b:1a:67:76:96:18:fd:c8:79:2c:2b:5e:85: de:6f:7d:bd:72:2c:a3:62:17:09:10:c9:87:49:97:d7:b6:8a: fb:8c:4d:27:49:f8:33:92:18:da:d3:6f:87:9d:04:44:4a:2d: ca:e5:0d:e5:b6:b0:5a:55:a9:cb:2b:85:0c:7a:4c:5e:68:4a: 4b:75:c9:74:6b:ef:36:8d:27:6b:38:79:c5:15:0e:af:84:02: 19:1e:37:f4:92:13:b0:b2:dd:7e:56:6e:f3:8a:d0:9e:33:d8: bc:a1:8e:70:a8:10:fe:8d:13:f0:93:2f:ec:96:c3:b5:fc:9e: 40:a8:27:53:4d:40:d5:0f:04:60:b8:a9:40:7d:c8:57:de:0c: d5:6d:82:33:6d:4e:bc:1c:01:ba:5b:9d:39:ec:5e:57:bd:4b: ec:d2:79:dd:17:db:67:a2:d7:e0:21:3b:d6:0f:2b:9c:0c:70: 11:4b:11:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnZSgNUdCKvAdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk ZDdlYWNhNGEtNDU3Mi00NDMxLWE5MTEtYjFkNDRiMTdjOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTocpXEs2uHp7TaEiUrq8+HbbDNYnxQSPw6C apHwDYP66DDGfV2ENnlOB7IG7v9g7gvPX/0foH+MyIYJyD8lVQueB0pMdW2eiAgF 60Y2d+arR3aZwfFW1QEopB7IQpkhjobxY/hrMqsqTcKn8WzDQsKqI1P1vxJKvx1p jyRub/+1ZAFx2POcjAMF14OaPTJT4dgIVC1IBqHOyJumpqO83tAUwq8lz1ZrBABF AHPNRwV2IPa4wXPUnjpNffrDphQlIAy4rxzRpknZ6pg/k5mNca1AtdIN9b4j3Tle dI7e8/knBtCEP4heroNlBjEO6gRXpw20HzaxTGvLrcj/6jvd0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRzuzcFslZ8pqYmQOOLZjTe6MfwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzU1ZGY1MWEtNjMxYi0z NWZjLWE5OWItZmNiZjFkYWE0ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5aNgLOFJVwwag8osxRnY5EEffpcT3OHLd+cVERkWckD96aoLZ0p1xG ZYTbnUJoMtt2/R9jgtd9/3oejhnVpJl18TchB7VoI48GTwi7ixpndpYY/ch5LCte hd5vfb1yLKNiFwkQyYdJl9e2ivuMTSdJ+DOSGNrTb4edBERKLcrlDeW2sFpVqcsr hQx6TF5oSkt1yXRr7zaNJ2s4ecUVDq+EAhkeN/SSE7Cy3X5WbvOK0J4z2LyhjnCo EP6NE/CTL+yWw7X8nkCoJ1NNQNUPBGC4qUB9yFfeDNVtgjNtTrwcAbpbnTnsXle9 S+zSed0X22ei1+AhO9YPK5wMcBFLEfY= -----END CERTIFICATE-----Generated at Wed Oct 29 07:12:16 2025 by rpki-client