$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f466e66-52b2-3787-b0eb-17f623fd246b.roa File: 4f466e66-52b2-3787-b0eb-17f623fd246b.roa (raw, json) Hash identifier: JXmbCoaH0+2M3m2iXfsv5PbRQT9QEixKY5V5hxBzv9I= Subject key identifier: 8E:14:17:60:9C:36:7E:A0:63:36:AD:DF:D3:95:6D:43:77:D3:F4:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF6869E0D02005F7DE0E68800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f466e66-52b2-3787-b0eb-17f623fd246b.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 396596 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:9e:0d:02:00:5f:7d:e0:e6:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=a151bc7e-0394-4ad3-be19-e96d1c96e6f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:55:06:f7:dd:69:88:96:a4:10:96:f4:ed: 26:af:fd:e6:e4:51:4a:52:23:15:a4:6e:c5:ad:55: 72:aa:08:f0:f1:ef:7c:d2:75:09:9c:5f:8c:07:22: f6:90:0a:3a:ed:79:d5:df:fd:8c:11:4e:83:af:07: 6e:2c:78:c4:33:30:63:c0:ec:92:6b:40:3d:7d:3c: e5:55:7b:6e:80:e2:37:4c:b2:f1:29:b0:2b:a2:1c: 66:90:8b:45:55:0a:4c:a4:65:bd:9e:49:5e:ac:d4: 2c:66:5b:ba:8b:d5:5b:04:84:8b:bd:2a:81:28:88: 28:78:28:91:85:d6:54:a2:ca:6a:3a:36:84:19:0b: 70:a6:87:f2:11:5e:fc:7c:4e:0d:0e:f5:49:9e:b0: 83:2a:cd:43:3f:c0:1b:47:49:6e:e0:a6:2f:09:8c: da:64:fe:20:b6:fa:14:3a:99:9b:63:1d:d3:25:bf: a4:86:e7:61:f5:27:44:92:0d:f5:ed:fd:a7:39:2f: 59:a0:72:36:a8:b7:ee:28:4e:00:c4:1e:36:6e:ce: c0:6e:b8:e9:ef:6e:e0:1e:5b:ef:90:74:83:1d:93: 51:b8:78:e0:e9:6a:17:da:99:2b:dc:cd:0d:54:3d: 8b:4c:ce:31:46:f1:94:77:20:f9:16:87:4d:7c:65: 00:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:14:17:60:9C:36:7E:A0:63:36:AD:DF:D3:95:6D:43:77:D3:F4:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4f466e66-52b2-3787-b0eb-17f623fd246b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:40:83:85:3c:79:1e:6f:99:51:37:a4:50:5b:5f:ef:f5:2b: 1c:4b:c3:b3:5d:de:d9:28:07:30:8a:8f:6a:80:96:bc:1b:54: b8:66:59:0e:84:7b:7a:30:30:19:d1:f1:af:ad:85:e9:e9:8c: 84:6d:20:d9:b1:f1:96:4e:0e:af:f9:0c:14:0d:0e:17:f6:33: 2b:99:57:3d:2d:2d:3e:14:da:02:fa:d2:38:01:a6:a8:73:a0: df:49:00:20:7a:95:07:d9:cd:54:99:b7:45:48:fe:4b:e6:9b: 89:37:03:5b:cf:25:c1:c2:c9:29:2a:93:c4:b3:c7:37:dd:bf: b2:e0:52:be:9e:a9:ff:a5:6b:81:ce:77:e7:c8:83:f7:e1:af: 24:31:18:d1:90:8f:97:54:a6:3d:64:b1:a1:1f:53:e5:85:a2: 27:85:c2:1f:1e:f8:f4:54:39:bc:04:02:ad:cc:32:7d:80:4e: 4c:65:83:4c:a2:3d:a6:89:c1:64:a8:a1:f2:7b:6e:e0:79:d3: 6f:a2:8a:dd:30:a7:6e:1c:91:96:28:3c:02:22:a1:cb:10:4c: c7:48:1d:ec:88:58:3d:88:10:66:6a:8c:88:1b:5b:01:5c:ad: 93:b7:ea:61:20:8f:f3:75:7d:ba:51:8c:42:b9:1c:59:9c:e9: 77:fb:ba:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hp4NAgBffeDmiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk YTE1MWJjN2UtMDM5NC00YWQzLWJlMTktZTk2ZDFjOTZlNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+dVBvfdaYiWpBCW9O0mr/3m5FFKUiMVpG7F rVVyqgjw8e980nUJnF+MByL2kAo67XnV3/2MEU6DrwduLHjEMzBjwOySa0A9fTzl VXtugOI3TLLxKbArohxmkItFVQpMpGW9nklerNQsZlu6i9VbBISLvSqBKIgoeCiR hdZUospqOjaEGQtwpofyEV78fE4NDvVJnrCDKs1DP8AbR0lu4KYvCYzaZP4gtvoU OpmbYx3TJb+khudh9SdEkg317f2nOS9ZoHI2qLfuKE4AxB42bs7Abrjp727gHlvv kHSDHZNRuHjg6WoX2pkr3M0NVD2LTM4xRvGUdyD5FodNfGUA9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4UF2CcNn6gYzat39OVbUN30/QTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGY0NjZlNjYtNTJiMi0z Nzg3LWIwZWItMTdmNjIzZmQyNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlAg4U8eR5vmVE3pFBbX+/1KxxLw7Nd3tkoBzCKj2qAlrwbVLhmWQ6E e3owMBnR8a+thenpjIRtINmx8ZZODq/5DBQNDhf2MyuZVz0tLT4U2gL60jgBpqhz oN9JACB6lQfZzVSZt0VI/kvmm4k3A1vPJcHCySkqk8Szxzfdv7LgUr6eqf+la4HO d+fIg/fhryQxGNGQj5dUpj1ksaEfU+WFoieFwh8e+PRUObwEAq3MMn2ATkxlg0yi PaaJwWSoofJ7buB502+iit0wp24ckZYoPAIiocsQTMdIHeyIWD2IEGZqjIgbWwFc rZO36mEgj/N1fbpRjEK5HFmc6Xf7ug8= -----END CERTIFICATE-----Generated at Wed Oct 29 07:21:55 2025 by rpki-client