$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa File: 8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa (raw, json) Hash identifier: +cbckrIqEYR0geeLMqfAsnTYxHj18s+JPsH6VO5nsoY= Subject key identifier: 2B:EC:FD:6C:B6:58:85:78:67:4D:D0:EC:7E:E5:EA:43:D6:46:59:56 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5263F1102C7B49361DFD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397212 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:63:f1:10:2c:7b:49:36:1d:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=37066adf-ed87-496d-90ff-77324c418f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:c9:8a:f3:64:d8:5f:db:60:2e:04:56:a3: 62:9c:f3:cf:53:b7:c3:89:4d:e6:1a:4c:4c:a5:ff: 3c:b4:2a:ec:66:01:01:bc:01:12:8a:c3:a1:82:fd: 4b:1d:99:1b:39:1d:86:25:81:7f:f3:52:06:ab:bb: f5:91:cf:19:81:33:69:6d:29:fb:8e:c6:78:cb:9b: 29:06:d7:7d:65:2a:87:08:ab:77:4d:93:82:b8:74: 63:bc:57:1f:f4:91:65:5b:44:c0:f3:58:f8:e6:31: d4:79:29:49:3e:d0:cc:57:3a:59:6b:9c:07:2a:3f: 60:83:18:7a:43:20:45:5d:2e:72:58:63:6a:73:6a: 66:9d:f2:35:f7:e8:9b:95:66:4e:22:28:f4:ac:8f: b5:87:c9:25:7a:6d:89:4d:86:f4:79:e8:bb:dc:56: c4:51:04:ae:73:53:a6:44:b5:32:1d:96:e6:a3:4d: 64:c6:80:2f:75:87:69:a9:5a:82:37:78:d3:24:41: a0:04:40:ed:46:a9:b1:38:d2:23:91:a8:ed:ca:e4: 41:46:83:9e:e3:45:8d:bc:f3:87:09:f2:4a:25:c0: d2:a2:00:6d:14:06:8a:6e:af:66:ba:b7:b8:5e:d1: ef:88:a2:d9:42:9d:6c:97:eb:1f:32:02:44:26:e7: 87:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EC:FD:6C:B6:58:85:78:67:4D:D0:EC:7E:E5:EA:43:D6:46:59:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8417b82b-c126-36f4-8f8a-c1b64786aa2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d6:23:2d:2a:49:31:ae:ab:f1:c5:9c:8b:3c:ba:da:69:42: 3d:a1:ce:55:85:d9:3a:9a:6d:43:63:4e:c6:ec:3d:c9:66:c9: 31:64:ec:89:a0:97:a5:e3:30:f1:c8:88:24:bd:9f:e4:24:a4: bf:ac:27:42:98:01:3b:b1:3b:87:73:1e:ec:5f:48:4a:10:3a: fc:cb:03:ee:03:fd:3d:4d:9c:d9:1c:23:de:35:f4:a5:5c:2b: f9:b9:46:08:d0:bf:5e:61:ff:e4:59:2d:6f:61:4b:c6:81:39: 9a:21:8b:87:63:d7:8a:3b:69:e3:0f:2d:e7:a3:89:4a:7f:ed: 68:14:ad:d2:5c:5e:48:36:e3:4a:fe:ac:ec:28:61:72:8e:d3: 17:e8:48:2d:b1:a6:b3:b5:74:3f:29:9f:b2:89:60:a5:38:21: 6f:13:15:61:8d:f8:6b:31:6b:8d:3b:dd:6a:f0:8a:4b:1e:0a: 0a:4f:e9:52:94:d9:97:cf:72:6c:00:a3:f0:28:20:a5:7f:1c: 7f:ce:6c:fb:cd:94:2f:b9:ad:60:7d:15:7d:c3:a7:dc:89:32: 17:13:96:89:cc:48:a9:b6:cb:d5:61:0c:d0:d7:78:3f:07:53: 72:8f:37:63:aa:f1:9f:ba:98:8a:65:7c:97:93:cd:9e:48:38: 06:db:9c:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UmPxECx7STYd/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MzcwNjZhZGYtZWQ4Ny00OTZkLTkwZmYtNzczMjRjNDE4ZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyILJivNk2F/bYC4EVqNinPPPU7fDiU3mGkxM pf88tCrsZgEBvAESisOhgv1LHZkbOR2GJYF/81IGq7v1kc8ZgTNpbSn7jsZ4y5sp Btd9ZSqHCKt3TZOCuHRjvFcf9JFlW0TA81j45jHUeSlJPtDMVzpZa5wHKj9ggxh6 QyBFXS5yWGNqc2pmnfI19+iblWZOIij0rI+1h8klem2JTYb0eei73FbEUQSuc1Om RLUyHZbmo01kxoAvdYdpqVqCN3jTJEGgBEDtRqmxONIjkajtyuRBRoOe40WNvPOH CfJKJcDSogBtFAaKbq9mure4XtHviKLZQp1sl+sfMgJEJueHwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvs/Wy2WIV4Z03Q7H7l6kPWRllWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQxN2I4MmItYzEyNi0z NmY0LThmOGEtYzFiNjQ3ODZhYTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvWIy0qSTGuq/HFnIs8utppQj2hzlWF2TqabUNjTsbsPclmyTFk7Img l6XjMPHIiCS9n+QkpL+sJ0KYATuxO4dzHuxfSEoQOvzLA+4D/T1NnNkcI9419KVc K/m5RgjQv15h/+RZLW9hS8aBOZohi4dj14o7aeMPLeejiUp/7WgUrdJcXkg240r+ rOwoYXKO0xfoSC2xprO1dD8pn7KJYKU4IW8TFWGN+Gsxa4073WrwikseCgpP6VKU 2ZfPcmwAo/AoIKV/HH/ObPvNlC+5rWB9FX3Dp9yJMhcTlonMSKm2y9VhDNDXeD8H U3KPN2Oq8Z+6mIplfJeTzZ5IOAbbnFU= -----END CERTIFICATE-----Generated at Wed Oct 29 09:05:24 2025 by rpki-client