$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db37761-b25d-3730-8c8a-885a5f32e592.roa File: 3db37761-b25d-3730-8c8a-885a5f32e592.roa (raw, json) Hash identifier: l0n9EVS5jw8lswNkpnLgrCknBtHdjExI6VZgT7MpFq0= Subject key identifier: E3:ED:35:48:D6:0F:4E:13:5C:A2:B7:E7:34:6B:34:93:2F:A4:D5:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B01A849F2920DBA5F34D9EDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db37761-b25d-3730-8c8a-885a5f32e592.roa Signing time: Thu 28 Aug 2025 12:42:35 +0000 ROA not before: Thu 28 Aug 2025 12:42:35 +0000 ROA not after: Wed 26 Nov 2025 13:42:35 +0000 asID: 396543 IP address blocks: 192.48.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:a8:49:f2:92:0d:ba:5f:34:d9:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 12:42:35 2025 GMT Not After : Nov 26 13:42:35 2025 GMT Subject: CN=bc9add72-136c-4a07-84c4-48145e9f6b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ca:63:91:b3:3b:50:3a:5c:d7:e6:bb:9d:9e: c6:a0:9b:c2:4b:82:02:31:b7:b6:ee:5f:25:8d:2d: 54:74:9f:3f:ce:7c:a4:84:05:92:a2:64:86:90:60: 9a:f5:74:38:e0:59:c5:24:67:07:a1:58:7d:0a:ba: 70:8a:21:9f:26:80:55:8b:99:05:df:05:9f:72:b5: 00:1e:7a:d4:67:28:04:74:bb:57:a2:d9:e6:c6:4f: 7f:ee:18:0f:c5:a7:68:dd:16:15:87:56:83:49:6b: cf:ad:4e:b4:e9:e8:ca:a2:88:f1:5f:69:ad:20:d0: 25:e6:fd:28:26:2b:86:9f:ad:a9:bd:d7:25:f7:9a: d1:d2:d6:8f:9a:25:f7:7f:db:dd:59:11:7a:2e:1a: 44:ca:31:32:15:ea:da:3e:0b:84:0f:18:1f:da:8b: db:fd:9d:01:9f:a2:11:d8:0f:93:09:70:c4:61:cc: a0:57:af:15:e2:75:47:9a:44:5c:da:cb:8b:f3:3c: 1c:88:10:c3:55:4a:d4:3d:dc:21:7f:2b:b7:e7:59: a8:bd:c8:58:27:41:98:6b:4c:f9:08:97:34:db:67: 15:0d:e0:bc:b1:f8:67:a2:9a:55:fd:2c:f2:b4:96: 22:8d:98:98:0d:26:b5:12:be:3f:97:1b:37:f9:b4: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:ED:35:48:D6:0F:4E:13:5C:A2:B7:E7:34:6B:34:93:2F:A4:D5:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3db37761-b25d-3730-8c8a-885a5f32e592.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.48.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:a7:cb:47:98:4c:b6:40:d7:44:31:0a:6f:7b:e0:66:60:93: ea:28:59:ee:7d:47:60:da:81:ec:c3:24:c1:5d:0d:fc:51:58: 4b:a3:bd:95:13:1e:5d:d5:3a:73:b4:00:f2:3c:e9:e5:6e:78: 71:20:98:c3:2e:34:bc:94:39:62:e6:02:c0:53:01:c7:90:46: 6b:ab:05:ad:f9:4e:d1:d1:0f:b6:d8:fa:33:ea:25:46:6c:76: 29:6e:6b:ba:9e:78:92:96:c8:31:c8:d8:ee:f7:6b:69:e9:24: 09:2a:a1:d8:99:fd:45:03:15:6f:44:f0:9a:d7:44:1e:28:06: 3c:18:e6:b5:ce:04:ea:bf:e1:e5:ff:c3:4a:ca:7f:14:42:ff: 13:c7:bf:ef:c3:27:79:2e:0c:39:e7:a1:0c:98:3f:b0:9d:98: 8d:64:7f:73:44:b4:b6:a0:fc:30:44:f7:71:ea:8a:53:c6:75: db:cc:bb:b6:f3:78:d9:11:f1:3e:67:62:c2:ab:8f:9a:36:7c: 12:07:d7:c4:16:5f:62:a9:45:16:8a:18:21:6c:64:f3:48:23: e6:06:c1:88:4a:e4:00:fa:95:19:90:f2:32:a7:b6:ed:54:d2: c5:a8:c6:52:c5:bf:6f:02:c4:c9:fb:33:cf:aa:e1:f2:cb:f1: d0:e4:68:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBqEnykg26XzTZ7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODEyNDIzNVoXDTI1MTEyNjEzNDIzNVowLzEtMCsGA1UEAxMk YmM5YWRkNzItMTM2Yy00YTA3LTg0YzQtNDgxNDVlOWY2YjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8pjkbM7UDpc1+a7nZ7GoJvCS4ICMbe27l8l jS1UdJ8/znykhAWSomSGkGCa9XQ44FnFJGcHoVh9CrpwiiGfJoBVi5kF3wWfcrUA HnrUZygEdLtXotnmxk9/7hgPxado3RYVh1aDSWvPrU606ejKoojxX2mtINAl5v0o JiuGn62pvdcl95rR0taPmiX3f9vdWRF6LhpEyjEyFeraPguEDxgf2ovb/Z0Bn6IR 2A+TCXDEYcygV68V4nVHmkRc2suL8zwciBDDVUrUPdwhfyu351movchYJ0GYa0z5 CJc022cVDeC8sfhnoppV/SzytJYijZiYDSa1Er4/lxs3+bQa0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPtNUjWD04TXKK35zRrNJMvpNUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RiMzc3NjEtYjI1ZC0z NzMwLThjOGEtODg1YTVmMzJlNTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCny0eYTLZA10QxCm974GZgk+ooWe59R2DagezDJMFdDfxRWEujvZUT Hl3VOnO0API86eVueHEgmMMuNLyUOWLmAsBTAceQRmurBa35TtHRD7bY+jPqJUZs dilua7qeeJKWyDHI2O73a2npJAkqodiZ/UUDFW9E8JrXRB4oBjwY5rXOBOq/4eX/ w0rKfxRC/xPHv+/DJ3kuDDnnoQyYP7CdmI1kf3NEtLag/DBE93HqilPGddvMu7bz eNkR8T5nYsKrj5o2fBIH18QWX2KpRRaKGCFsZPNII+YGwYhK5AD6lRmQ8jKntu1U 0sWoxlLFv28CxMn7M8+q4fLL8dDkaOQ= -----END CERTIFICATE-----Generated at Wed Sep 10 18:02:16 2025 by rpki-client