$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40c43641-38a1-30ca-922b-e2185664d80b.roa File: 40c43641-38a1-30ca-922b-e2185664d80b.roa (raw, json) Hash identifier: SoPPxD7jvZVF5HbNWDFuVioAmIKkTdoOh2dPh30sVdQ= Subject key identifier: 29:05:79:56:70:96:FA:A5:99:C7:DE:87:EA:2A:BA:4A:93:34:BE:54 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DCC286E063D2F832C59C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40c43641-38a1-30ca-922b-e2185664d80b.roa Signing time: Tue 26 Aug 2025 12:32:16 +0000 ROA not before: Tue 26 Aug 2025 12:32:16 +0000 ROA not after: Mon 24 Nov 2025 13:32:16 +0000 asID: 396566 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:cc:28:6e:06:3d:2f:83:2c:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:16 2025 GMT Not After : Nov 24 13:32:16 2025 GMT Subject: CN=f33cea3f-d2f8-4e3d-b1a1-fb8a831bbad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3b:4e:e7:06:1f:4d:4b:70:85:6a:03:df:01: bf:6b:81:54:d9:4e:67:4d:33:b9:0f:e7:e6:37:fc: d4:61:08:fc:e8:0d:41:00:82:23:bd:ed:b6:a1:aa: 56:46:84:0f:5b:4a:ea:85:ab:f9:7b:24:a7:ec:09: 8f:d3:4e:ad:f0:24:4a:92:78:5f:a9:d1:ed:48:1d: 58:90:86:d7:92:46:75:9f:9e:e7:0c:ce:90:85:a4: e1:4c:96:c7:47:5a:22:e8:14:06:7f:5f:9f:6f:4f: f6:e6:a8:51:a1:93:7a:56:23:56:14:e8:4a:d1:89: 5f:4b:c4:70:ca:34:03:71:bc:e9:65:20:02:a7:d9: 0f:ca:46:69:0d:b1:14:63:77:48:fd:7c:12:9e:c0: 51:fe:15:f3:66:fa:4e:e1:50:20:46:92:e2:b9:02: 17:57:aa:ea:6f:12:14:fe:94:36:dd:48:31:84:c6: a6:34:02:c2:b5:17:a1:79:50:b0:3a:8e:6f:3d:45: a0:cc:6e:ab:71:34:ef:1d:0d:f3:4c:70:ae:5e:92: 43:20:b6:3f:9c:c1:9c:79:c9:c4:8d:bc:2b:d5:23: 15:b1:d1:a4:90:a8:08:ed:27:3a:a1:46:21:6a:fd: b0:21:1f:a2:f0:50:af:22:ac:79:f1:76:f7:bd:df: 88:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:05:79:56:70:96:FA:A5:99:C7:DE:87:EA:2A:BA:4A:93:34:BE:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40c43641-38a1-30ca-922b-e2185664d80b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0f:2d:65:8e:73:d5:53:57:4c:02:41:90:1b:ae:3d:ea:d1: f0:f0:31:9b:2a:c0:9e:0e:59:72:74:95:aa:cb:06:f6:f0:ec: cb:16:86:d9:28:06:61:07:e2:3c:7e:1c:c8:7b:09:f2:7a:aa: 98:c9:93:e3:b9:6e:8e:c3:bc:61:a0:fa:29:19:fc:21:d3:f0: f2:7d:e7:40:bb:9f:72:00:6a:45:5a:58:18:65:7d:a8:26:c1: 7c:4e:28:c8:17:63:37:46:9c:51:21:d2:74:98:47:bd:72:49: 15:d7:25:90:aa:35:f7:70:e7:b5:c4:03:3f:31:bb:f4:10:80: 11:c3:3d:cf:28:f1:66:38:1b:9b:50:60:84:4f:2f:a4:da:33: 46:ef:27:86:9c:62:36:14:f9:d0:a0:05:5e:52:7e:45:61:c4: 88:32:dc:99:aa:44:c0:b9:49:b4:9c:63:1c:42:8d:35:55:42: 2d:d3:cb:e7:c9:cd:e1:77:68:59:1f:10:b8:4f:fc:79:b7:2f: 52:ce:3d:dd:a0:c4:f4:88:d3:99:d9:c7:e8:e3:52:7e:26:df: 44:21:3e:4c:60:64:e5:86:e5:71:7c:46:44:1a:0a:1a:5e:34: 73:1d:c6:57:58:db:3a:6f:87:dd:a5:74:05:8a:b1:e1:e0:9c: e5:5a:94:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcwobgY9L4MsWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNloXDTI1MTEyNDEzMzIxNlowLzEtMCsGA1UEAxMk ZjMzY2VhM2YtZDJmOC00ZTNkLWIxYTEtZmI4YTgzMWJiYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjtO5wYfTUtwhWoD3wG/a4FU2U5nTTO5D+fm N/zUYQj86A1BAIIjve22oapWRoQPW0rqhav5eySn7AmP006t8CRKknhfqdHtSB1Y kIbXkkZ1n57nDM6QhaThTJbHR1oi6BQGf1+fb0/25qhRoZN6ViNWFOhK0YlfS8Rw yjQDcbzpZSACp9kPykZpDbEUY3dI/XwSnsBR/hXzZvpO4VAgRpLiuQIXV6rqbxIU /pQ23UgxhMamNALCtReheVCwOo5vPUWgzG6rcTTvHQ3zTHCuXpJDILY/nMGcecnE jbwr1SMVsdGkkKgI7Sc6oUYhav2wIR+i8FCvIqx58Xb3vd+IdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkFeVZwlvqlmcfeh+oqukqTNL5UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBjNDM2NDEtMzhhMS0z MGNhLTkyMmItZTIxODU2NjRkODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEPLWWOc9VTV0wCQZAbrj3q0fDwMZsqwJ4OWXJ0larLBvbw7MsWhtko BmEH4jx+HMh7CfJ6qpjJk+O5bo7DvGGg+ikZ/CHT8PJ950C7n3IAakVaWBhlfagm wXxOKMgXYzdGnFEh0nSYR71ySRXXJZCqNfdw57XEAz8xu/QQgBHDPc8o8WY4G5tQ YIRPL6TaM0bvJ4acYjYU+dCgBV5SfkVhxIgy3JmqRMC5SbScYxxCjTVVQi3Ty+fJ zeF3aFkfELhP/Hm3L1LOPd2gxPSI05nZx+jjUn4m30QhPkxgZOWG5XF8RkQaChpe NHMdxldY2zpvh92ldAWKseHgnOValOk= -----END CERTIFICATE-----Generated at Wed Sep 10 17:57:55 2025 by rpki-client