$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/409b85a2-e176-35c3-a787-40f7b938417a.roa File: 409b85a2-e176-35c3-a787-40f7b938417a.roa (raw, json) Hash identifier: SWfBy6xT5+iZJI2Y9j0FGxBkVsfIarQUYPgok9FEBzU= Subject key identifier: 66:EF:01:41:25:0C:BF:06:09:0A:DB:9B:A3:6E:37:E4:0E:A2:D0:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA9793E2053851C3C91CA900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/409b85a2-e176-35c3-a787-40f7b938417a.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396614 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:93:e2:05:38:51:c3:c9:1c:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=e0ced544-eac6-4d41-8ac4-b2947b949a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:2b:72:48:9a:1f:27:48:3d:41:51:48:9f: 04:13:15:3f:3d:52:a3:a8:3d:f8:05:9d:9b:08:ef: 15:5d:a9:74:88:bd:fa:b2:84:4c:27:65:be:17:61: fc:43:81:23:d7:93:c4:f7:00:9a:ab:e7:34:da:b0: fd:05:15:d1:5b:35:b1:89:6c:f8:48:d9:70:08:9b: c0:3a:92:be:64:85:75:db:c0:81:cd:78:5f:78:fc: 15:95:f6:9f:1a:15:2d:2b:9b:93:2f:d6:d5:83:dd: e4:a7:44:4f:71:c2:72:c8:74:cc:f9:b0:71:bb:f2: ca:d1:ab:0d:c3:02:ff:ea:72:ab:64:06:24:8f:6b: a5:57:ef:6c:0a:95:4a:d0:3a:e0:42:55:31:f3:db: 23:54:16:9f:b0:3e:eb:87:21:ea:bb:5b:d5:8b:05: 6a:23:9c:1e:85:43:09:b7:e8:62:89:05:52:27:22: cc:a3:5c:37:23:ad:33:90:69:9c:05:f6:86:2e:b2: bd:6d:dd:34:77:46:19:52:d9:bf:03:3b:f0:78:72: 60:87:91:7a:e6:46:bb:36:7d:df:f6:d6:67:6c:19: 2a:85:1f:c2:af:2a:dd:77:d9:47:d5:a4:12:b2:d6: ae:aa:1e:b8:7f:eb:7a:19:7d:f8:63:34:9a:6b:e2: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:EF:01:41:25:0C:BF:06:09:0A:DB:9B:A3:6E:37:E4:0E:A2:D0:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/409b85a2-e176-35c3-a787-40f7b938417a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:5d:62:90:d7:7c:3f:48:cb:dc:ee:bd:7e:7d:cf:09:d9:da: c3:51:0d:29:31:4e:eb:29:1f:bd:8a:1a:e2:84:84:1d:d3:80: 21:00:ec:33:df:26:05:62:f3:b5:f0:46:30:5c:fe:b3:40:41: f9:74:38:a6:8d:e2:77:ea:42:4f:65:8a:20:22:03:b4:ef:93: aa:2b:19:76:aa:62:1f:9a:85:81:3a:f2:bf:a5:fd:67:4d:f7: 12:11:88:3a:99:52:6f:f6:94:99:75:ef:cf:e2:ba:70:06:10: 62:1f:ea:03:eb:03:16:0c:6d:10:b7:a8:87:93:21:0f:51:76: e8:e8:31:f8:b7:7a:da:70:58:61:e7:56:0a:0f:69:63:c6:cc: bb:71:a5:12:01:e0:af:46:fc:9e:33:62:31:e3:22:be:48:28: 3b:d9:31:22:28:87:cc:d7:9a:d0:f9:7d:71:98:d4:00:03:4a: e3:f0:26:90:ad:57:3e:ef:c5:10:c2:b6:95:ea:8d:37:76:36: 5a:a0:4d:3c:50:9d:88:04:d7:98:87:e6:01:6c:9e:e6:c9:11: 41:3c:b4:e3:af:d1:dc:46:f1:41:a4:5c:51:09:32:03:17:f2: c9:2f:3c:8e:70:df:09:00:9f:c6:4c:9c:f5:67:4a:d5:3b:0a: 9a:f3:cb:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5PiBThRw8kcqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZTBjZWQ1NDQtZWFjNi00ZDQxLThhYzQtYjI5NDdiOTQ5YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0srckiaHydIPUFRSJ8EExU/PVKjqD34BZ2b CO8VXal0iL36soRMJ2W+F2H8Q4Ej15PE9wCaq+c02rD9BRXRWzWxiWz4SNlwCJvA OpK+ZIV128CBzXhfePwVlfafGhUtK5uTL9bVg93kp0RPccJyyHTM+bBxu/LK0asN wwL/6nKrZAYkj2ulV+9sCpVK0DrgQlUx89sjVBafsD7rhyHqu1vViwVqI5wehUMJ t+hiiQVSJyLMo1w3I60zkGmcBfaGLrK9bd00d0YZUtm/AzvweHJgh5F65ka7Nn3f 9tZnbBkqhR/Cryrdd9lH1aQSstauqh64f+t6GX34YzSaa+Ke7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbvAUElDL8GCQrbm6NuN+QOotBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA5Yjg1YTItZTE3Ni0z NWMzLWE3ODctNDBmN2I5Mzg0MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZdYpDXfD9Iy9zuvX59zwnZ2sNRDSkxTuspH72KGuKEhB3TgCEA7DPf JgVi87XwRjBc/rNAQfl0OKaN4nfqQk9liiAiA7Tvk6orGXaqYh+ahYE68r+l/WdN 9xIRiDqZUm/2lJl178/iunAGEGIf6gPrAxYMbRC3qIeTIQ9RdujoMfi3etpwWGHn VgoPaWPGzLtxpRIB4K9G/J4zYjHjIr5IKDvZMSIoh8zXmtD5fXGY1AADSuPwJpCt Vz7vxRDCtpXqjTd2NlqgTTxQnYgE15iH5gFsnubJEUE8tOOv0dxG8UGkXFEJMgMX 8skvPI5w3wkAn8ZMnPVnStU7Cprzyz0= -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:12 2025 by rpki-client