$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/635123bf-8b6a-3774-b6d4-bdeb2b4c739a.roa File: 635123bf-8b6a-3774-b6d4-bdeb2b4c739a.roa (raw, json) Hash identifier: pECOipSLH723tXoK0zGPPMP13n/2sGVW5P/0kRZ0lnk= Subject key identifier: E7:4E:2D:97:D7:3E:4B:8A:F9:80:7D:70:BA:02:D4:1C:95:4D:CC:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC67404D5518F6CC72740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/635123bf-8b6a-3774-b6d4-bdeb2b4c739a.roa Signing time: Tue 26 Aug 2025 12:32:13 +0000 ROA not before: Tue 26 Aug 2025 12:32:13 +0000 ROA not after: Mon 24 Nov 2025 13:32:13 +0000 asID: 396577 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c6:74:04:d5:51:8f:6c:c7:27:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:13 2025 GMT Not After : Nov 24 13:32:13 2025 GMT Subject: CN=6342658e-32ed-49af-be49-a26f291c1ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:1e:7f:54:0c:05:d6:cb:fe:08:bc:55:77: 8e:b5:a7:02:8d:fb:55:29:a4:c0:18:9b:2e:41:a8: bf:ae:d1:47:7d:44:d9:7b:1f:25:6f:9f:19:fb:09: 2b:a0:d5:0f:fe:cc:62:09:84:33:0c:25:11:f1:c1: fc:8c:bc:3e:8a:68:49:f3:3e:49:a5:15:84:21:29: 7a:da:e7:19:cc:95:23:b0:19:2a:d6:f7:8f:7b:10: 8b:f2:f0:59:83:ab:e5:c9:5b:1e:3d:6e:f0:f5:57: 3b:3b:79:a6:3e:90:de:64:db:41:ab:79:ca:b2:39: 38:e3:40:84:e2:0c:77:97:84:2f:65:55:21:70:80: 38:d9:6b:54:27:1d:e4:a7:6f:c4:51:b5:f0:a0:4b: 20:ed:c6:bc:25:42:d3:9a:3d:d7:a3:42:76:f7:02: 93:0d:f4:ce:9f:83:45:96:17:fd:66:1c:47:6f:da: c0:46:e8:68:40:8b:5d:35:e8:98:60:bf:77:76:56: 46:24:e5:8d:a0:73:a8:e9:b9:8e:9c:60:ac:d3:39: b0:d8:15:f1:60:f8:2b:33:50:c8:e9:27:93:ba:fd: fc:f0:b9:fe:9d:8f:9c:c6:dc:b0:83:68:ca:5c:91: c6:b6:4a:b5:63:53:54:25:81:2e:c4:5f:a2:dc:33: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:4E:2D:97:D7:3E:4B:8A:F9:80:7D:70:BA:02:D4:1C:95:4D:CC:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/635123bf-8b6a-3774-b6d4-bdeb2b4c739a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f5:ef:3c:4f:04:6b:8d:84:44:e8:7a:3e:44:1d:1c:bb:9a: b5:f6:e6:14:98:d5:8f:aa:d6:1c:4c:76:ac:41:f2:b0:e2:a0: a0:1e:bc:98:42:c5:8d:15:03:56:71:62:fd:3d:9b:77:d1:0f: 23:32:8d:e5:8e:f1:dd:4e:8a:ff:be:88:9b:cc:e2:f3:31:d4: 03:13:dc:33:6d:a9:fd:c4:05:65:fb:eb:7e:3d:c2:7c:23:e4: b8:ff:b2:5f:fa:a5:ad:ca:1c:47:47:ac:81:ff:12:65:ad:e3: 97:58:8d:99:9e:00:41:0f:de:88:a9:07:e5:d6:3b:82:82:d0: 01:27:ed:ae:72:b4:42:72:32:8e:e4:3d:f4:fe:08:14:15:ff: 1a:a0:47:e3:9d:e2:56:3d:8a:97:ab:2e:93:c0:bd:94:a0:8c: 81:89:b7:75:4e:43:c5:19:e9:bb:da:6f:56:84:24:71:62:0b: fe:be:26:d3:ce:ad:0c:fc:85:30:85:1a:fc:b0:dc:1c:59:fb: bc:03:f4:03:ba:d4:e2:92:89:00:7b:a7:09:ee:0a:a7:d6:e8: 09:e0:54:d0:a8:af:d5:aa:6b:87:79:e2:23:c7:71:f3:64:76: 67:9d:b8:03:94:54:f3:86:e8:dc:27:9a:d1:2b:92:3d:4d:ca: 04:af:3e:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcZ0BNVRj2zHJ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxM1oXDTI1MTEyNDEzMzIxM1owLzEtMCsGA1UEAxMk NjM0MjY1OGUtMzJlZC00OWFmLWJlNDktYTI2ZjI5MWMxZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Ief1QMBdbL/gi8VXeOtacCjftVKaTAGJsu Qai/rtFHfUTZex8lb58Z+wkroNUP/sxiCYQzDCUR8cH8jLw+imhJ8z5JpRWEISl6 2ucZzJUjsBkq1vePexCL8vBZg6vlyVsePW7w9Vc7O3mmPpDeZNtBq3nKsjk440CE 4gx3l4QvZVUhcIA42WtUJx3kp2/EUbXwoEsg7ca8JULTmj3Xo0J29wKTDfTOn4NF lhf9ZhxHb9rARuhoQItdNeiYYL93dlZGJOWNoHOo6bmOnGCs0zmw2BXxYPgrM1DI 6SeTuv388Ln+nY+cxtywg2jKXJHGtkq1Y1NUJYEuxF+i3DNB3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdOLZfXPkuK+YB9cLoC1ByVTcwZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjM1MTIzYmYtOGI2YS0z Nzc0LWI2ZDQtYmRlYjJiNGM3MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACX17zxPBGuNhEToej5EHRy7mrX25hSY1Y+q1hxMdqxB8rDioKAevJhC xY0VA1ZxYv09m3fRDyMyjeWO8d1Oiv++iJvM4vMx1AMT3DNtqf3EBWX76349wnwj 5Lj/sl/6pa3KHEdHrIH/EmWt45dYjZmeAEEP3oipB+XWO4KC0AEn7a5ytEJyMo7k PfT+CBQV/xqgR+Od4lY9iperLpPAvZSgjIGJt3VOQ8UZ6bvab1aEJHFiC/6+JtPO rQz8hTCFGvyw3BxZ+7wD9AO61OKSiQB7pwnuCqfW6AngVNCor9Wqa4d54iPHcfNk dmeduAOUVPOG6NwnmtErkj1NygSvPrc= -----END CERTIFICATE-----Generated at Wed Sep 10 17:58:11 2025 by rpki-client