$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d872a5e-7709-3278-97b3-f807f52f3a0a.roa File: 6d872a5e-7709-3278-97b3-f807f52f3a0a.roa (raw, json) Hash identifier: 8kEZwQTC/ivQkZy6+rnIwoDkd576ry9Qe2cVd6GFZXg= Subject key identifier: 11:CA:41:86:F8:FF:B8:89:35:AC:42:CB:85:75:AB:BA:91:B7:CB:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA979715A8691B06AA300740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d872a5e-7709-3278-97b3-f807f52f3a0a.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396564 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:97:15:a8:69:1b:06:aa:30:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=3fe240dc-2819-4bf0-b446-5435a6ce4d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:ef:1e:92:ad:7a:3f:02:2c:c6:d2:fa:74: 83:47:ac:a7:8d:07:31:57:0e:c9:38:fd:2a:db:35: a1:72:23:2c:c7:8b:d3:c0:74:b7:47:b7:9a:b8:64: d6:62:4a:d9:33:e0:9d:64:00:c6:7c:56:b4:46:0a: 3e:08:92:13:cf:c1:02:f7:84:36:29:bb:17:09:b4: 17:65:07:40:82:14:ad:8c:4e:20:ee:c0:ea:21:e5: ac:58:cc:25:36:69:d2:72:6c:8a:f7:77:8a:bd:c0: 32:1a:3e:17:08:07:ad:4b:6b:13:2c:e3:38:28:7b: ae:7e:66:0b:6e:5f:07:f2:a7:c8:37:00:57:3b:44: ec:0c:90:29:21:8a:30:b0:62:3d:8a:79:73:92:25: 17:fb:b0:a8:8e:1c:30:3d:9c:f9:60:05:62:eb:93: b6:ec:a5:f0:8d:40:46:72:f1:2e:1c:12:8d:77:f0: d7:f1:9e:8a:cc:4f:45:4d:8c:ac:1e:69:69:a9:33: 07:c5:cc:5b:1f:39:43:89:0a:78:5f:0c:a3:ea:97: e6:95:d6:c9:75:51:49:d3:eb:e0:19:a6:13:09:26: ec:d6:04:69:70:7c:b8:13:28:31:87:a8:9a:92:ef: 83:04:5f:02:92:d4:89:cf:b2:a1:f1:4b:ff:99:d9: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CA:41:86:F8:FF:B8:89:35:AC:42:CB:85:75:AB:BA:91:B7:CB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6d872a5e-7709-3278-97b3-f807f52f3a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:14:21:f4:27:cf:d1:44:e8:a6:43:67:22:01:01:2d:5b:cb: 6d:9b:be:46:a0:a7:e8:4c:b7:1e:f4:f9:09:ff:9d:67:ca:31: 16:b3:ab:e8:b0:aa:31:b9:59:ec:99:a7:0c:06:f4:00:d0:55: 59:d8:ca:72:01:98:7c:7a:2b:a4:ae:cf:1b:57:b9:2a:48:77: 5a:92:5c:90:0c:07:95:f3:44:90:99:fa:e2:36:23:e6:1c:6f: fc:a5:08:cb:40:04:24:b5:f0:85:75:9a:26:83:2c:47:b1:fa: 57:1a:93:ec:db:2b:cf:90:e7:2c:b4:83:e0:dc:9f:e0:8b:12: 40:fc:01:58:3a:db:f5:3e:25:09:ed:d2:56:35:67:bd:77:a9: a0:8d:6f:d1:41:e0:ef:02:52:16:6b:6b:df:77:20:3a:1d:3a: 16:4d:33:09:fc:ef:d8:12:c7:9d:6e:3e:46:cd:b3:86:aa:8a: 94:0e:50:a4:1e:97:fa:aa:78:d3:e1:35:69:dd:04:77:91:16: 65:37:53:8d:2e:07:b7:f0:cc:f8:65:c1:cd:af:f1:46:77:3a: f7:1e:58:f0:bf:59:9c:e4:94:2f:cd:2a:16:b9:d5:e6:0f:b1: 86:6c:7a:2a:33:9a:ad:55:0e:e9:c1:91:a6:a6:f4:e6:a5:b8: f2:5d:04:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql5cVqGkbBqowB0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk M2ZlMjQwZGMtMjgxOS00YmYwLWI0NDYtNTQzNWE2Y2U0ZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlezvHpKtej8CLMbS+nSDR6ynjQcxVw7JOP0q 2zWhciMsx4vTwHS3R7eauGTWYkrZM+CdZADGfFa0Rgo+CJITz8EC94Q2KbsXCbQX ZQdAghStjE4g7sDqIeWsWMwlNmnScmyK93eKvcAyGj4XCAetS2sTLOM4KHuufmYL bl8H8qfINwBXO0TsDJApIYowsGI9inlzkiUX+7CojhwwPZz5YAVi65O27KXwjUBG cvEuHBKNd/DX8Z6KzE9FTYysHmlpqTMHxcxbHzlDiQp4Xwyj6pfmldbJdVFJ0+vg GaYTCSbs1gRpcHy4Eygxh6iaku+DBF8CktSJz7Kh8Uv/mdlwHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHKQYb4/7iJNaxCy4V1q7qRt8uzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmQ4NzJhNWUtNzcwOS0z Mjc4LTk3YjMtZjgwN2Y1MmYzYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4UIfQnz9FE6KZDZyIBAS1by22bvkagp+hMtx70+Qn/nWfKMRazq+iw qjG5WeyZpwwG9ADQVVnYynIBmHx6K6SuzxtXuSpId1qSXJAMB5XzRJCZ+uI2I+Yc b/ylCMtABCS18IV1miaDLEex+lcak+zbK8+Q5yy0g+Dcn+CLEkD8AVg62/U+JQnt 0lY1Z713qaCNb9FB4O8CUhZra993IDodOhZNMwn879gSx51uPkbNs4aqipQOUKQe l/qqeNPhNWndBHeRFmU3U40uB7fwzPhlwc2v8UZ3OvceWPC/WZzklC/NKha51eYP sYZseiozmq1VDunBkaam9OaluPJdBMY= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:44 2025 by rpki-client