$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/815ebd87-7245-360f-bf88-249ff754c7a4.roa File: 815ebd87-7245-360f-bf88-249ff754c7a4.roa (raw, json) Hash identifier: mJfiLf6fNdZEQzDlEOqxrexn98Y451U8f30agJfWuBg= Subject key identifier: 89:48:8F:AA:C1:0F:AE:A4:15:A0:26:F5:E0:91:DB:EC:CE:1A:56:52 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC49FAC15555A4239DD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/815ebd87-7245-360f-bf88-249ff754c7a4.roa Signing time: Tue 26 Aug 2025 12:32:12 +0000 ROA not before: Tue 26 Aug 2025 12:32:12 +0000 ROA not after: Mon 24 Nov 2025 13:32:12 +0000 asID: 36632 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c4:9f:ac:15:55:5a:42:39:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:12 2025 GMT Not After : Nov 24 13:32:12 2025 GMT Subject: CN=01fee1d5-e63f-4cff-833f-c032f8189a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:00:fc:49:70:66:06:42:0b:72:f1:00:82:c1: d1:b1:cb:83:5e:fb:0d:39:b0:74:c8:5c:18:59:f7: aa:db:71:81:22:91:fa:53:39:23:ed:ec:5b:90:b0: b9:7b:1e:8b:47:99:3e:26:99:f6:4c:18:46:1f:99: b0:85:c7:8d:10:51:89:dd:52:63:67:60:6a:18:2b: 83:10:01:f5:22:1a:1a:f9:41:5c:32:dc:28:3e:b0: 2f:05:42:93:cf:0a:0b:39:10:4a:94:30:d8:00:42: f8:8e:5d:ae:30:2a:98:da:ca:e4:62:6d:93:30:04: 94:e3:7d:a2:1e:2c:4e:4c:ac:cc:8a:4a:d4:0e:35: f7:96:14:4a:8f:b8:2e:1a:3d:91:26:53:e6:bb:b8: a4:50:12:c4:6c:df:aa:47:64:a6:4a:b5:2a:fe:97: 6e:6f:13:e3:e1:61:d7:af:14:49:2a:3b:4b:33:a7: 8e:a1:c6:4f:3f:42:ca:f5:0c:d2:51:c4:16:85:9b: c4:26:a7:6d:2c:2a:0a:33:16:f9:62:6c:6b:3f:d6: 78:9f:4f:2b:e9:e7:5f:76:02:48:b2:fc:ab:b9:3e: 1f:14:c0:28:c4:a6:fb:74:1a:eb:db:be:d4:a1:87: 2c:be:4e:4d:4c:74:60:5d:3e:80:00:86:9e:9d:e5: 4d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:48:8F:AA:C1:0F:AE:A4:15:A0:26:F5:E0:91:DB:EC:CE:1A:56:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/815ebd87-7245-360f-bf88-249ff754c7a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cf:53:61:82:b3:28:6b:27:0f:15:6b:a3:f0:f1:f3:21:92: 04:ab:5e:b3:5a:c7:f9:d4:5a:1e:b4:51:3c:7b:46:47:a8:e8: d2:8d:40:5a:75:d8:cd:07:6d:46:b7:58:99:b2:c0:b4:42:7e: bf:48:56:07:3e:cb:35:75:1b:02:3d:89:43:28:b7:87:74:1e: f9:6d:63:7a:b0:a5:fe:b0:2d:b3:92:2b:72:21:35:cc:af:b0: 84:d2:c6:9b:d5:d9:21:ce:4a:25:8b:a5:1a:81:f3:7e:ee:c1: 2b:d3:ed:ac:1c:c8:8e:c2:04:d8:19:a6:3c:71:61:f2:91:f0: 94:19:1c:09:89:e9:eb:19:0c:08:1f:74:cb:84:d8:77:38:ce: db:77:4b:90:f2:5b:b6:67:21:33:b5:10:85:3f:b2:89:35:c6: 15:8a:72:20:b6:6f:46:84:c6:81:d2:65:e4:12:55:af:66:20: 22:13:16:89:48:2c:90:a3:77:b2:0e:8b:6f:ab:ec:49:d1:39: 9c:8d:6c:4e:3c:81:ff:4d:08:aa:dc:a8:0e:cb:37:65:ca:6f: dd:15:d9:d6:29:8d:ee:cc:35:ae:bd:98:84:ff:51:47:d2:f4: a9:30:f1:f2:77:aa:ea:12:2d:04:52:cf:6e:fc:fd:84:21:a0: a7:a7:a7:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcSfrBVVWkI53YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMloXDTI1MTEyNDEzMzIxMlowLzEtMCsGA1UEAxMk MDFmZWUxZDUtZTYzZi00Y2ZmLTgzM2YtYzAzMmY4MTg5YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gD8SXBmBkILcvEAgsHRscuDXvsNObB0yFwY Wfeq23GBIpH6Uzkj7exbkLC5ex6LR5k+Jpn2TBhGH5mwhceNEFGJ3VJjZ2BqGCuD EAH1Ihoa+UFcMtwoPrAvBUKTzwoLORBKlDDYAEL4jl2uMCqY2srkYm2TMASU432i HixOTKzMikrUDjX3lhRKj7guGj2RJlPmu7ikUBLEbN+qR2SmSrUq/pdubxPj4WHX rxRJKjtLM6eOocZPP0LK9QzSUcQWhZvEJqdtLCoKMxb5YmxrP9Z4n08r6edfdgJI svyruT4fFMAoxKb7dBrr277UoYcsvk5NTHRgXT6AAIaeneVNFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlIj6rBD66kFaAm9eCR2+zOGlZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODE1ZWJkODctNzI0NS0z NjBmLWJmODgtMjQ5ZmY3NTRjN2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDPU2GCsyhrJw8Va6Pw8fMhkgSrXrNax/nUWh60UTx7Rkeo6NKNQFp1 2M0HbUa3WJmywLRCfr9IVgc+yzV1GwI9iUMot4d0HvltY3qwpf6wLbOSK3IhNcyv sITSxpvV2SHOSiWLpRqB837uwSvT7awcyI7CBNgZpjxxYfKR8JQZHAmJ6esZDAgf dMuE2Hc4ztt3S5DyW7ZnITO1EIU/sok1xhWKciC2b0aExoHSZeQSVa9mICITFolI LJCjd7IOi2+r7EnROZyNbE48gf9NCKrcqA7LN2XKb90V2dYpje7MNa69mIT/UUfS 9Kkw8fJ3quoSLQRSz278/YQhoKenp/k= -----END CERTIFICATE-----Generated at Wed Sep 10 17:59:45 2025 by rpki-client