$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70dab20c-68b6-3d01-994a-e87e2e7ce582.roa File: 70dab20c-68b6-3d01-994a-e87e2e7ce582.roa (raw, json) Hash identifier: oadrKESYC+RxfdD1G+kCFYGTR3180ic9wEenCWiP2G4= Subject key identifier: 95:A8:A9:27:EC:7D:FC:D2:1B:2F:6E:1C:DF:5C:F9:19:1D:2A:9F:BE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC0C616CAF2A26BDCEC58 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70dab20c-68b6-3d01-994a-e87e2e7ce582.roa Signing time: Tue 26 Aug 2025 12:32:11 +0000 ROA not before: Tue 26 Aug 2025 12:32:11 +0000 ROA not after: Mon 24 Nov 2025 13:32:11 +0000 asID: 396564 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c0:c6:16:ca:f2:a2:6b:dc:ec:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:11 2025 GMT Not After : Nov 24 13:32:11 2025 GMT Subject: CN=fd3f1c61-8a9e-41e6-acd2-0c142cbd486f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:de:d0:fa:97:b3:d7:cd:dd:5e:bd:dd:39: 49:d0:af:40:73:72:28:42:3a:1f:24:a9:db:1b:9c: ac:c0:73:c6:19:15:91:d3:ae:46:36:df:48:d1:ae: ec:7c:fe:5f:94:4c:b4:98:1e:dd:90:1b:7d:da:f2: 29:86:7b:e2:f9:69:0c:ba:30:a4:47:da:0e:3e:d3: 49:23:e6:8d:a9:39:9e:44:b9:29:a5:cf:1d:75:06: 2a:24:21:18:ab:f9:75:70:eb:19:8a:53:45:1c:20: 4d:20:d6:ea:ff:69:13:2e:84:c6:1a:b3:e7:e5:e4: 59:91:7c:0a:56:16:ba:17:64:c2:b0:c9:96:55:d1: 86:77:fa:ad:3f:73:82:5a:0d:06:10:3a:45:a8:9b: cd:b3:95:b5:22:f3:9b:b2:78:21:ce:4f:4e:07:21: bd:44:38:37:df:f3:65:cd:f3:6e:83:e4:b0:cb:0d: cd:e8:de:e3:43:31:27:56:5e:12:8e:69:49:35:36: df:f4:c8:57:f2:de:d4:a7:fd:fb:c6:2e:91:b9:25: 28:d6:fe:23:79:47:31:0a:ac:f0:d7:39:85:2f:00: 17:56:34:c6:a4:39:bf:a0:0d:3d:4f:a0:8b:94:b8: 4e:1a:c7:8d:dd:74:03:c9:1b:2c:8b:aa:8e:37:3a: 90:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A8:A9:27:EC:7D:FC:D2:1B:2F:6E:1C:DF:5C:F9:19:1D:2A:9F:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70dab20c-68b6-3d01-994a-e87e2e7ce582.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:60:fd:e4:70:a2:a1:60:b0:23:9a:b8:ba:1f:9d:fe:32:cf: bf:0c:49:f7:57:36:10:59:88:7c:f3:30:9e:0d:70:f9:d8:c1: 2f:0a:04:b8:f9:ec:c6:9f:ed:d8:59:b3:56:57:2f:3b:9c:33: df:2d:93:d2:d4:43:9b:90:e2:b7:b4:71:05:97:4e:ea:70:b6: a8:dd:b8:ca:42:f0:a3:af:06:a5:6b:11:49:08:75:45:93:92: af:03:a0:22:a8:37:a8:b7:92:47:94:85:e2:39:16:b8:f7:f0: 97:c3:80:99:c0:0c:ab:80:61:45:18:7e:14:27:39:54:e6:66: a2:07:af:99:6a:46:b2:17:e3:4a:e7:2f:92:ce:e7:74:ed:6a: c5:5c:c0:bb:d0:1d:62:5d:c1:e2:dc:c1:92:0c:e6:ba:bd:88: 1c:22:cc:07:f1:c8:a0:a1:e4:dc:36:fc:7a:7a:17:2b:ac:40: 61:fa:8d:c2:35:19:c1:50:dd:dd:65:40:52:2d:76:f1:6d:ad: 5b:91:85:7b:cb:15:95:23:dc:42:80:b2:dc:69:0b:ab:2f:5e: ad:21:52:30:ea:a1:f2:ca:89:9a:48:a2:8d:52:ff:ca:67:e2: 6f:d1:bd:30:ab:76:2d:a0:56:a2:6e:fc:d4:ba:a3:1e:b2:d4: 78:04:10:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcDGFsryomvc7FgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMVoXDTI1MTEyNDEzMzIxMVowLzEtMCsGA1UEAxMk ZmQzZjFjNjEtOGE5ZS00MWU2LWFjZDItMGMxNDJjYmQ0ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEve0PqXs9fN3V693TlJ0K9Ac3IoQjofJKnb G5yswHPGGRWR065GNt9I0a7sfP5flEy0mB7dkBt92vIphnvi+WkMujCkR9oOPtNJ I+aNqTmeRLkppc8ddQYqJCEYq/l1cOsZilNFHCBNINbq/2kTLoTGGrPn5eRZkXwK Vha6F2TCsMmWVdGGd/qtP3OCWg0GEDpFqJvNs5W1IvObsnghzk9OByG9RDg33/Nl zfNug+Swyw3N6N7jQzEnVl4SjmlJNTbf9MhX8t7Up/37xi6RuSUo1v4jeUcxCqzw 1zmFLwAXVjTGpDm/oA09T6CLlLhOGseN3XQDyRssi6qONzqQaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWoqSfsffzSGy9uHN9c+RkdKp++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBkYWIyMGMtNjhiNi0z ZDAxLTk5NGEtZTg3ZTJlN2NlNTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9g/eRwoqFgsCOauLofnf4yz78MSfdXNhBZiHzzMJ4NcPnYwS8KBLj5 7Maf7dhZs1ZXLzucM98tk9LUQ5uQ4re0cQWXTupwtqjduMpC8KOvBqVrEUkIdUWT kq8DoCKoN6i3kkeUheI5Frj38JfDgJnADKuAYUUYfhQnOVTmZqIHr5lqRrIX40rn L5LO53TtasVcwLvQHWJdweLcwZIM5rq9iBwizAfxyKCh5Nw2/Hp6FyusQGH6jcI1 GcFQ3d1lQFItdvFtrVuRhXvLFZUj3EKAstxpC6svXq0hUjDqofLKiZpIoo1S/8pn 4m/RvTCrdi2gVqJu/NS6ox6y1HgEECQ= -----END CERTIFICATE-----Generated at Wed Sep 10 17:54:27 2025 by rpki-client