$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa File: 3fa1b4c6-55dc-35af-b992-4101ab414964.roa (raw, json) Hash identifier: /OibZfKLpqAMZngqCJV46r+EQDCzrELbHYVDX2LaOco= Subject key identifier: 83:B8:7E:C1:59:7D:5E:C3:AE:0F:25:4D:01:3F:AF:7B:A1:9B:32:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA97B65C7B8E3A43B4D1ABC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396590 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b6:5c:7b:8e:3a:43:b4:d1:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=c83a7e87-95e0-4995-b5dc-e00e5f509de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:d9:6b:15:95:e4:40:3d:78:56:3b:07:b9: a1:46:7b:e7:13:d8:ec:06:b8:2d:7e:29:90:91:cc: c3:12:29:98:f2:bb:ed:d8:48:a8:b5:c2:2b:06:34: ff:e7:6c:ac:49:db:5d:e5:31:42:d7:42:04:2a:d2: 05:07:8b:26:ba:cf:28:80:cb:19:ab:ce:c4:7b:49: 2c:f2:1f:cc:cd:d4:20:4b:d0:14:34:5b:58:3f:99: c8:95:3b:d0:d0:a4:1d:7e:6d:de:ab:94:e2:97:c2: 3c:a1:5e:11:0d:30:82:7d:c5:f1:a4:28:af:3c:ca: 06:42:a9:bf:c6:4c:01:19:57:de:9c:ea:ce:24:85: ed:5c:3a:00:1d:29:19:14:d8:a8:d9:8e:97:ba:ee: bc:1e:58:80:99:71:67:0e:af:18:73:e5:9a:20:54: 11:4a:bf:0c:93:8c:dc:16:45:17:25:8d:f2:e4:5a: 08:12:63:8b:dd:eb:6b:a0:b6:de:9c:59:49:0e:0d: a0:3e:4a:9b:84:c6:fc:68:79:d6:52:77:4d:b4:04: 7c:cf:a1:26:f9:c6:22:bc:74:7a:da:84:41:3b:c2: ab:57:10:aa:c1:ac:71:90:e4:31:fb:bc:aa:7d:e2: ac:34:31:21:6d:35:e8:50:ee:1c:e5:b4:4c:24:df: 0b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B8:7E:C1:59:7D:5E:C3:AE:0F:25:4D:01:3F:AF:7B:A1:9B:32:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3fa1b4c6-55dc-35af-b992-4101ab414964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:45:62:85:ef:aa:6c:e3:be:72:9e:5a:9d:5d:98:56:c9:bb: f4:76:cb:23:3b:29:ae:43:c6:25:23:4d:ec:bd:f3:a4:78:8c: 92:9c:84:9d:42:2e:2b:58:02:9d:99:9c:b5:81:45:b0:ab:87: 5c:19:9c:b1:c4:70:72:50:2f:30:59:ec:c8:5d:7c:0b:2e:c3: 9a:3c:d3:6d:cb:6f:8e:89:fc:a9:ef:ab:8c:08:10:ca:cc:55: 56:d9:16:10:a7:f3:54:48:b3:a9:ed:5f:34:ea:2e:c1:03:da: 78:f2:44:44:f7:32:4e:e0:24:0c:e4:ff:a0:d9:cf:81:f4:38: c6:ec:55:5e:5c:4d:7e:bc:52:ee:8e:9f:86:f4:98:46:0f:76: ee:89:83:67:e2:3b:ae:ca:b3:40:65:a1:4f:bb:44:f4:d3:21: bd:d3:c4:77:ba:bf:86:99:3f:f6:69:ad:a1:ce:67:ab:2b:1b: 84:d5:3d:fa:da:01:ba:91:2a:31:7a:94:3f:a3:39:9c:7f:77: 1c:d3:f5:e6:f4:99:23:ed:43:ab:6b:98:1d:5c:f2:a0:31:fc: 38:c6:b4:d5:6f:2f:b6:01:1a:27:72:bc:69:ae:4b:bb:23:2f: aa:3e:b4:cd:11:cf:48:ce:40:dd:4f:a3:0b:0d:c5:5e:65:d5: 39:95:33:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7Zce446Q7TRq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk YzgzYTdlODctOTVlMC00OTk1LWI1ZGMtZTAwZTVmNTA5ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMvZaxWV5EA9eFY7B7mhRnvnE9jsBrgtfimQ kczDEimY8rvt2EiotcIrBjT/52ysSdtd5TFC10IEKtIFB4smus8ogMsZq87Ee0ks 8h/MzdQgS9AUNFtYP5nIlTvQ0KQdfm3eq5Til8I8oV4RDTCCfcXxpCivPMoGQqm/ xkwBGVfenOrOJIXtXDoAHSkZFNio2Y6Xuu68HliAmXFnDq8Yc+WaIFQRSr8Mk4zc FkUXJY3y5FoIEmOL3etroLbenFlJDg2gPkqbhMb8aHnWUndNtAR8z6Em+cYivHR6 2oRBO8KrVxCqwaxxkOQx+7yqfeKsNDEhbTXoUO4c5bRMJN8LnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO4fsFZfV7Drg8lTQE/r3uhmzKLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2ZhMWI0YzYtNTVkYy0z NWFmLWI5OTItNDEwMWFiNDE0OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhFYoXvqmzjvnKeWp1dmFbJu/R2yyM7Ka5DxiUjTey986R4jJKchJ1C LitYAp2ZnLWBRbCrh1wZnLHEcHJQLzBZ7MhdfAsuw5o8023Lb46J/Knvq4wIEMrM VVbZFhCn81RIs6ntXzTqLsED2njyRET3Mk7gJAzk/6DZz4H0OMbsVV5cTX68Uu6O n4b0mEYPdu6Jg2fiO67Ks0BloU+7RPTTIb3TxHe6v4aZP/ZpraHOZ6srG4TVPfra AbqRKjF6lD+jOZx/dxzT9eb0mSPtQ6trmB1c8qAx/DjGtNVvL7YBGidyvGmuS7sj L6o+tM0Rz0jOQN1PowsNxV5l1TmVM4g= -----END CERTIFICATE-----Generated at Wed Oct 29 07:19:11 2025 by rpki-client