$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa File: 56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa (raw, json) Hash identifier: wK4qS0naBJePiPLvCKVOIr0uV1NUjVFTLsDAfG3kX2M= Subject key identifier: D1:19:B7:59:3C:AE:1A:3B:7A:86:66:F5:84:D1:B6:1D:EC:F3:B3:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F52777029AA111285DCC000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397193 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:77:70:29:aa:11:12:85:dc:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=46edfbc5-889f-4fe1-a923-f557e89881f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:83:09:73:1b:58:78:9a:3e:c6:9b:18:5f:96: ac:e9:a5:5a:4f:59:de:2e:c9:e9:b4:a1:5b:9e:fd: 54:ad:0a:80:a2:de:91:34:6a:d4:68:f2:bb:cf:50: 09:fb:8a:c5:62:54:59:cc:57:0a:5e:af:3f:dc:7b: cc:f8:18:e1:ae:77:5b:88:9e:66:89:1b:0a:14:44: ec:6d:73:80:71:9c:83:3d:49:a2:af:35:40:59:dc: 89:46:56:5c:bb:57:56:de:65:00:62:be:3a:32:2c: 2f:f7:ff:04:ea:00:e4:cd:be:6d:da:43:e4:ad:c0: c7:cf:9f:c3:1f:ab:54:5f:a2:3b:39:41:37:fd:a9: e5:17:a9:9d:fe:ba:22:c8:96:5e:54:48:ce:42:fe: 57:a9:a0:80:82:b5:31:c3:bf:54:ed:67:bc:4a:6b: 3b:48:bb:66:a8:c4:98:d0:d1:ce:b2:c8:95:9e:cd: 69:5b:a9:f2:c3:76:15:05:be:c4:1d:da:ba:53:8e: df:96:31:74:20:04:d3:4d:4d:3d:a1:54:db:dc:34: f7:fb:cb:b3:f2:80:ba:a6:95:62:45:fd:3d:8d:d0: 7a:e9:80:2c:68:26:95:51:f8:e1:99:2c:d2:24:98: f4:76:ac:a0:45:ce:83:80:d3:a6:7e:a9:55:f9:bc: cc:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:19:B7:59:3C:AE:1A:3B:7A:86:66:F5:84:D1:B6:1D:EC:F3:B3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/56fdbeda-efa6-3218-9bb6-57b3e9a333b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:80:a6:a5:19:36:66:48:21:4a:8d:a6:d0:20:70:9c:47:8e: 8f:23:c1:10:55:5d:00:ef:a3:d9:d5:d7:3a:4c:cc:13:fe:be: c0:d2:87:13:04:98:99:cd:cb:78:25:e2:1a:25:62:0b:a4:a9: 73:aa:9e:b5:2e:26:aa:be:9a:f5:de:9a:53:c8:d6:6b:2c:f8: b9:45:0a:9c:29:7b:a5:d2:57:ff:78:b5:aa:0c:a6:74:05:d7: fe:0f:77:fe:bb:2a:9f:8a:a2:ca:b2:8a:3d:ad:ae:7e:2f:59: 68:1f:b0:77:ce:f5:7f:36:4b:fc:ab:40:8d:34:84:06:28:45: 34:80:5f:eb:52:60:65:0b:fe:74:61:95:26:e4:13:35:20:5d: 70:1e:4e:60:98:f7:28:bd:19:17:aa:67:fe:8b:1b:d8:30:9f: 8c:3f:6c:13:a7:0f:3b:27:29:8a:72:a8:ec:13:bb:cb:6b:a6: 59:03:94:54:b6:8b:35:59:02:2a:68:7f:cd:23:fe:a2:56:b2: 46:ac:09:6e:b3:45:63:a7:fb:92:8d:7d:ba:b7:e6:72:2e:42: b2:15:71:2a:38:de:27:8e:d8:ed:f5:9b:12:09:0e:b8:e5:37: a3:7a:4c:a8:60:62:7a:71:f3:6b:97:32:9c:7e:44:a4:87:51: 35:98:7f:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UndwKaoREoXcwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NDZlZGZiYzUtODg5Zi00ZmUxLWE5MjMtZjU1N2U4OTg4MWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5oMJcxtYeJo+xpsYX5as6aVaT1neLsnptKFb nv1UrQqAot6RNGrUaPK7z1AJ+4rFYlRZzFcKXq8/3HvM+BjhrndbiJ5miRsKFETs bXOAcZyDPUmirzVAWdyJRlZcu1dW3mUAYr46Miwv9/8E6gDkzb5t2kPkrcDHz5/D H6tUX6I7OUE3/anlF6md/roiyJZeVEjOQv5XqaCAgrUxw79U7We8Sms7SLtmqMSY 0NHOssiVns1pW6nyw3YVBb7EHdq6U47fljF0IATTTU09oVTb3DT3+8uz8oC6ppVi Rf09jdB66YAsaCaVUfjhmSzSJJj0dqygRc6DgNOmfqlV+bzM+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEZt1k8rho7eoZm9YTRth3s87ORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTZmZGJlZGEtZWZhNi0z MjE4LTliYjYtNTdiM2U5YTMzM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuApqUZNmZIIUqNptAgcJxHjo8jwRBVXQDvo9nV1zpMzBP+vsDShxME mJnNy3gl4holYgukqXOqnrUuJqq+mvXemlPI1mss+LlFCpwpe6XSV/94taoMpnQF 1/4Pd/67Kp+Kosqyij2trn4vWWgfsHfO9X82S/yrQI00hAYoRTSAX+tSYGUL/nRh lSbkEzUgXXAeTmCY9yi9GReqZ/6LG9gwn4w/bBOnDzsnKYpyqOwTu8trplkDlFS2 izVZAipof80j/qJWskasCW6zRWOn+5KNfbq35nIuQrIVcSo43ieO2O31mxIJDrjl N6N6TKhgYnpx82uXMpx+RKSHUTWYf2s= -----END CERTIFICATE-----Generated at Wed Oct 29 09:17:07 2025 by rpki-client