$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b8541a9-7bee-357f-9a6d-8de0af0315a0.roa File: 4b8541a9-7bee-357f-9a6d-8de0af0315a0.roa (raw, json) Hash identifier: guQf6+BZaMggiYz+VDf3cY2bhrl1SsI4Urcr2kjNjW4= Subject key identifier: 76:5F:7F:37:74:72:5D:07:D2:6E:C6:A8:94:FF:7E:C0:FC:47:F6:83 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B01A848A16131358B110D1F68 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b8541a9-7bee-357f-9a6d-8de0af0315a0.roa Signing time: Thu 28 Aug 2025 12:42:35 +0000 ROA not before: Thu 28 Aug 2025 12:42:35 +0000 ROA not after: Wed 26 Nov 2025 13:42:35 +0000 asID: 397209 IP address blocks: 192.48.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:a8:48:a1:61:31:35:8b:11:0d:1f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 12:42:35 2025 GMT Not After : Nov 26 13:42:35 2025 GMT Subject: CN=4c648681-c3da-4215-b99d-91b19a1b9b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:25:82:03:f3:f1:01:fb:fe:a4:e6:db:9f:2f: d9:84:b9:ca:0f:69:00:e8:2b:46:12:23:48:a4:e7: e8:18:c1:31:f2:e9:a5:61:3d:84:bd:fe:16:25:fb: 87:c1:7e:63:d4:b7:ed:bf:c9:be:ea:9d:52:c3:d6: 3d:c8:b2:03:6d:b0:39:21:d3:e1:c3:66:a3:35:d9: 8d:75:31:67:5d:9d:69:f1:9f:26:0f:e8:79:8f:73: 62:b1:36:32:f1:8f:85:e2:22:a3:7a:ea:ca:07:bb: b6:41:43:b3:b5:48:69:d4:21:7c:4f:18:e2:ee:ee: 62:d3:b5:6c:69:23:d7:76:64:7f:a1:75:d6:36:ee: 6b:fe:9a:56:b4:5a:3e:e9:59:45:c4:95:85:c6:3a: 3b:8d:7e:37:04:21:29:fc:88:2a:eb:c1:9e:b8:27: 14:b3:1a:ef:d1:7f:89:a1:b1:ff:d1:bb:30:9f:60: ee:a8:db:82:22:d2:b8:f8:d4:cd:3f:13:19:35:a3: eb:57:2b:42:87:0f:15:cd:e0:e1:35:c9:4c:f7:2f: fc:6f:21:b8:74:08:f2:c8:77:c1:9a:84:fc:1a:80: e3:bd:ec:8d:78:e0:c4:5a:17:53:21:3a:dd:ae:e8: 3f:ec:31:70:ac:73:a0:07:e6:93:51:e4:5c:f2:e6: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5F:7F:37:74:72:5D:07:D2:6E:C6:A8:94:FF:7E:C0:FC:47:F6:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b8541a9-7bee-357f-9a6d-8de0af0315a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.48.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:5b:f8:2d:c5:c3:bf:66:fa:17:6e:6d:e0:db:2f:72:be:06: 05:c4:0b:f2:ab:35:89:b2:4d:d8:63:a0:4e:03:d0:b9:50:11: 71:fe:64:73:0b:e7:12:d2:6a:db:4e:08:f3:85:89:84:2e:6c: 22:f0:41:8c:d8:99:58:e6:b4:03:40:73:ac:d7:61:35:61:83: 3f:b3:b4:fc:99:3d:9c:d6:dd:a9:da:82:ca:d9:f7:58:f4:96: 83:b8:d0:b6:8f:b1:d8:8c:68:79:4f:bc:94:4f:3e:9a:0f:aa: 95:fe:50:14:15:05:c1:bd:dc:ee:e1:97:a8:0c:8f:6f:84:c1: 13:a6:96:4d:30:70:21:46:b3:1d:6d:a6:93:59:3c:82:a0:98: db:c2:8a:22:7e:a7:dd:00:cd:5a:63:23:d8:ee:8a:63:47:31: 80:88:d4:c8:67:0b:71:bf:96:89:b1:eb:3f:30:ba:78:cf:62: 0c:4c:6b:d2:be:32:fc:0b:25:ff:a7:3f:52:e7:f9:36:81:75: 77:a4:d3:43:c2:64:15:7c:16:6a:d6:ba:f0:d5:51:b1:f8:79: 62:c1:6c:6f:f6:ac:1c:04:15:52:5e:a9:23:fc:ae:8a:60:45: b5:7e:9e:0c:77:6b:6b:7f:a6:1d:76:f7:04:dc:3a:3d:b1:f2: ca:6e:6c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBqEihYTE1ixENH2gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODEyNDIzNVoXDTI1MTEyNjEzNDIzNVowLzEtMCsGA1UEAxMk NGM2NDg2ODEtYzNkYS00MjE1LWI5OWQtOTFiMTlhMWI5YjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyWCA/PxAfv+pObbny/ZhLnKD2kA6CtGEiNI pOfoGMEx8umlYT2Evf4WJfuHwX5j1Lftv8m+6p1Sw9Y9yLIDbbA5IdPhw2ajNdmN dTFnXZ1p8Z8mD+h5j3NisTYy8Y+F4iKjeurKB7u2QUOztUhp1CF8Txji7u5i07Vs aSPXdmR/oXXWNu5r/ppWtFo+6VlFxJWFxjo7jX43BCEp/Igq68GeuCcUsxrv0X+J obH/0bswn2DuqNuCItK4+NTNPxMZNaPrVytChw8VzeDhNclM9y/8byG4dAjyyHfB moT8GoDjveyNeODEWhdTITrdrug/7DFwrHOgB+aTUeRc8uaVIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZffzd0cl0H0m7GqJT/fsD8R/aDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGI4NTQxYTktN2JlZS0z NTdmLTlhNmQtOGRlMGFmMDMxNWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpb+C3Fw79m+hdubeDbL3K+BgXEC/KrNYmyTdhjoE4D0LlQEXH+ZHML 5xLSattOCPOFiYQubCLwQYzYmVjmtANAc6zXYTVhgz+ztPyZPZzW3anagsrZ91j0 loO40LaPsdiMaHlPvJRPPpoPqpX+UBQVBcG93O7hl6gMj2+EwROmlk0wcCFGsx1t ppNZPIKgmNvCiiJ+p90AzVpjI9juimNHMYCI1MhnC3G/lomx6z8wunjPYgxMa9K+ MvwLJf+nP1Ln+TaBdXek00PCZBV8FmrWuvDVUbH4eWLBbG/2rBwEFVJeqSP8ropg RbV+ngx3a2t/ph129wTcOj2x8spubDg= -----END CERTIFICATE-----Generated at Wed Sep 10 18:00:46 2025 by rpki-client