$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa File: 4b23ea7f-4e90-393f-be13-bb683e21ab71.roa (raw, json) Hash identifier: aprALE0HXwTUcjIeAjIkIebsuP9qGhp1UdHcb7vbnvs= Subject key identifier: 16:DC:03:7F:26:C7:A3:4B:C7:E8:05:8A:91:EA:10:CE:97:E2:74:E0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61DD68746FF3F9A0BBC280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396827 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:dd:68:74:6f:f3:f9:a0:bb:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=05e91b2d-63c4-4a03-afc6-4d8e3a4bfc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6e:b9:e7:de:38:00:d8:ca:39:46:72:81:c5: 69:14:08:16:ae:b8:ee:11:40:62:43:f4:9c:53:3d: 2b:7f:aa:42:5a:21:d0:ee:57:2d:0f:f2:b7:f2:1c: 54:b4:63:6a:9d:88:fa:06:e4:ad:5e:d0:99:1c:4d: 6d:a0:c8:ff:4b:d9:54:e0:ba:22:0f:ac:8a:bb:21: 08:e2:eb:c4:7f:12:15:c5:c7:67:52:cb:c2:79:e5: ec:f6:6c:82:5e:07:8d:f4:d7:17:c0:97:62:99:9a: 86:90:ac:d2:76:7c:2c:eb:66:64:4e:43:86:73:7f: 75:0c:1a:0c:1f:db:63:bd:6b:51:fd:2e:54:0d:cb: aa:5f:e1:d6:90:8f:9b:d3:b9:03:33:0c:1e:39:41: 68:01:b7:94:e6:26:b3:b4:c4:2a:f7:5e:83:bc:55: 08:7e:8a:5c:f0:89:3d:92:f4:2e:47:7d:fa:1e:fa: 12:92:1c:f8:2a:36:df:3f:93:44:b4:a9:16:53:7f: 83:10:fb:3d:d6:dc:e9:ab:59:8d:e7:2d:b4:0c:79: fd:53:73:0f:44:6c:5d:2c:da:5b:4f:88:3e:78:2c: d4:f7:7f:0c:48:92:01:82:37:d4:9c:7e:eb:00:24: fb:1f:25:c1:cb:8d:eb:43:2d:b3:29:0d:16:6f:e3: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DC:03:7F:26:C7:A3:4B:C7:E8:05:8A:91:EA:10:CE:97:E2:74:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b23ea7f-4e90-393f-be13-bb683e21ab71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4b:30:3d:24:28:e1:b8:6b:1c:88:a6:c3:33:d0:de:cb:35: a7:46:07:80:9a:06:53:b3:5b:9b:dc:b0:ce:97:ae:d2:b5:71: 11:58:c5:e3:46:77:1e:98:6b:e7:6f:da:bd:65:fd:ea:0f:39: ec:e1:e4:b9:b4:87:c0:e8:93:2f:1e:ee:3a:07:4c:fe:9a:3b: 18:6b:bd:ac:f3:20:93:bf:e0:ea:72:6b:34:60:9c:5a:66:48: 7b:1e:f3:bd:5a:35:65:62:6c:16:12:61:b1:db:6a:be:4f:13: 79:7f:28:c6:95:d6:a7:4e:00:72:66:74:45:16:a4:1d:f8:d2: 04:62:6b:29:91:60:b9:34:0a:e7:71:51:85:2f:09:0e:71:c3: 8b:6f:b2:49:7c:5a:9f:c8:1f:5c:5b:b9:90:af:23:b8:8e:7d: a1:80:98:12:99:9e:c7:24:e3:74:36:4a:fe:28:83:83:09:87: fb:76:a5:ed:62:2e:3a:92:04:00:ef:74:c1:08:cc:66:c3:1d: d4:53:58:55:12:ef:25:52:e3:88:ac:3a:d0:1e:07:41:15:9f: 43:2a:be:dd:8e:b0:5a:7b:be:26:bf:87:ad:a6:97:b5:8a:6f: 8c:62:c1:6a:b5:91:92:2f:3a:09:f0:fb:ae:6b:55:10:72:8a: 83:f3:82:fc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYd1odG/z+aC7woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MDVlOTFiMmQtNjNjNC00YTAzLWFmYzYtNGQ4ZTNhNGJmYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG655944ANjKOUZygcVpFAgWrrjuEUBiQ/Sc Uz0rf6pCWiHQ7lctD/K38hxUtGNqnYj6BuStXtCZHE1toMj/S9lU4LoiD6yKuyEI 4uvEfxIVxcdnUsvCeeXs9myCXgeN9NcXwJdimZqGkKzSdnws62ZkTkOGc391DBoM H9tjvWtR/S5UDcuqX+HWkI+b07kDMwweOUFoAbeU5iaztMQq916DvFUIfopc8Ik9 kvQuR336HvoSkhz4KjbfP5NEtKkWU3+DEPs91tzpq1mN5y20DHn9U3MPRGxdLNpb T4g+eCzU938MSJIBgjfUnH7rACT7HyXBy43rQy2zKQ0Wb+NHZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBbcA38mx6NLx+gFipHqEM6X4nTgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGIyM2VhN2YtNGU5MC0z OTNmLWJlMTMtYmI2ODNlMjFhYjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBzSzA9JCjhuGsciKbDM9DeyzWnRgeAmgZTs1ub3LDOl67StXERWMXj RncemGvnb9q9Zf3qDzns4eS5tIfA6JMvHu46B0z+mjsYa72s8yCTv+Dqcms0YJxa Zkh7HvO9WjVlYmwWEmGx22q+TxN5fyjGldanTgByZnRFFqQd+NIEYmspkWC5NArn cVGFLwkOccOLb7JJfFqfyB9cW7mQryO4jn2hgJgSmZ7HJON0Nkr+KIODCYf7dqXt Yi46kgQA73TBCMxmwx3UU1hVEu8lUuOIrDrQHgdBFZ9DKr7djrBae74mv4etppe1 im+MYsFqtZGSLzoJ8Puua1UQcoqD84L8 -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:29 2025 by rpki-client