$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa File: 3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa (raw, json) Hash identifier: lcutkO2R48Xx6CzDYAbls6Y8OMTbsO6jPFFMts5jcI8= Subject key identifier: 33:6B:8A:DA:16:7C:BF:AE:E0:2D:21:7B:B2:71:5E:AC:50:21:6D:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC571F708571D151DE5E8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa Signing time: Tue 26 Aug 2025 12:32:13 +0000 ROA not before: Tue 26 Aug 2025 12:32:13 +0000 ROA not after: Mon 24 Nov 2025 13:32:13 +0000 asID: 396562 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c5:71:f7:08:57:1d:15:1d:e5:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:13 2025 GMT Not After : Nov 24 13:32:13 2025 GMT Subject: CN=72e65ef9-e958-46ae-b5b2-8fb4dfbab033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:f5:2e:4f:7a:a0:35:4e:b2:7c:c4:2f:02: 14:ad:75:a6:6d:f0:07:ec:22:93:14:60:39:76:88: 59:34:8c:06:36:e3:e6:19:54:ae:d6:59:53:2e:9c: 07:ab:25:0b:d3:60:70:bc:19:cf:51:ea:0f:34:e4: fe:ee:ae:ab:7d:7b:f4:7f:ac:a5:b1:37:eb:2a:18: 1e:5f:8c:42:ff:7f:97:c2:40:a2:e1:a2:27:ef:74: 16:da:a2:34:d0:6b:a2:91:65:76:20:36:cc:4a:5e: 9d:0f:3e:5f:a6:f6:35:9f:71:ed:6a:67:80:23:1c: 20:9c:aa:70:7a:60:48:89:3b:5c:fb:75:22:d2:5f: 44:df:da:06:4c:d3:c8:bb:11:d5:fa:79:a3:74:ea: a4:a0:3c:71:12:cd:2d:dc:4d:62:2c:82:68:69:70: e2:97:26:84:86:59:57:de:55:66:b3:35:39:d8:83: 70:91:52:57:70:e8:7b:31:be:df:56:cb:8c:8f:71: aa:58:90:c3:85:fe:3d:5b:86:8a:20:c5:a6:b6:17: 5f:c2:41:02:8e:56:0c:a4:92:09:ce:fa:b8:64:cd: cd:17:cc:8c:69:bd:24:fe:c3:56:90:e6:ae:72:01: 0b:48:37:c9:19:cd:89:55:d4:22:2e:a8:95:8d:06: a1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6B:8A:DA:16:7C:BF:AE:E0:2D:21:7B:B2:71:5E:AC:50:21:6D:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1a217-0288-3e24-8d85-6fade3bc96c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:eb:9d:68:02:1f:4a:a2:80:95:46:03:7d:79:a0:f1:48:9e: 73:23:91:22:44:12:9b:52:30:f4:92:c6:33:22:59:a7:14:bd: b9:ce:21:75:3f:42:3e:fb:d3:90:f1:ef:12:b1:7f:b3:2d:1c: 84:33:02:c2:6d:bc:f7:73:52:04:a1:96:1b:4a:f6:7c:38:30: 93:fa:5e:a5:d7:46:6c:cb:4a:48:a8:0d:c9:9a:0a:9f:a2:30: 3f:cd:4b:e5:88:1a:c6:2b:74:85:b1:bb:13:9f:f2:81:bd:7c: 7b:b6:bb:b1:d1:7d:b3:87:a8:e7:ae:1a:86:21:4b:4b:db:25: e2:3a:c7:3d:74:a2:ae:b4:73:d8:6c:d7:41:01:2b:47:c3:e1: 33:83:80:ea:41:24:9c:ec:3c:c2:26:16:8f:46:b5:72:a4:c3: 70:b2:89:d6:c9:68:fb:7a:d3:11:1f:f0:48:31:eb:e1:19:67: 25:52:72:16:91:7c:03:08:4c:11:64:5f:d0:0b:bf:71:9c:36: 87:9e:ca:b0:30:0d:8c:b2:a0:0a:5c:36:f5:48:d0:43:65:5d: 3f:4c:26:e7:ec:63:cd:cd:0c:c8:d3:bb:3a:c7:75:0a:ca:30: b2:36:de:f0:b1:80:92:38:26:e3:fe:64:d8:41:25:e6:2d:1b: 7f:cc:56:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcVx9whXHRUd5egwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxM1oXDTI1MTEyNDEzMzIxM1owLzEtMCsGA1UEAxMk NzJlNjVlZjktZTk1OC00NmFlLWI1YjItOGZiNGRmYmFiMDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBz1Lk96oDVOsnzELwIUrXWmbfAH7CKTFGA5 dohZNIwGNuPmGVSu1llTLpwHqyUL02BwvBnPUeoPNOT+7q6rfXv0f6ylsTfrKhge X4xC/3+XwkCi4aIn73QW2qI00GuikWV2IDbMSl6dDz5fpvY1n3HtameAIxwgnKpw emBIiTtc+3Ui0l9E39oGTNPIuxHV+nmjdOqkoDxxEs0t3E1iLIJoaXDilyaEhllX 3lVmszU52INwkVJXcOh7Mb7fVsuMj3GqWJDDhf49W4aKIMWmthdfwkECjlYMpJIJ zvq4ZM3NF8yMab0k/sNWkOaucgELSDfJGc2JVdQiLqiVjQahiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNritoWfL+u4C0he7JxXqxQIW0rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZhMWEyMTctMDI4OC0z ZTI0LThkODUtNmZhZGUzYmM5NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrrnWgCH0qigJVGA315oPFInnMjkSJEEptSMPSSxjMiWacUvbnOIXU/ Qj7705Dx7xKxf7MtHIQzAsJtvPdzUgShlhtK9nw4MJP6XqXXRmzLSkioDcmaCp+i MD/NS+WIGsYrdIWxuxOf8oG9fHu2u7HRfbOHqOeuGoYhS0vbJeI6xz10oq60c9hs 10EBK0fD4TODgOpBJJzsPMImFo9GtXKkw3CyidbJaPt60xEf8Egx6+EZZyVSchaR fAMITBFkX9ALv3GcNoeeyrAwDYyyoApcNvVI0ENlXT9MJufsY83NDMjTuzrHdQrK MLI23vCxgJI4JuP+ZNhBJeYtG3/MVtM= -----END CERTIFICATE-----Generated at Wed Sep 10 17:50:22 2025 by rpki-client