$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f89c5ef-6ad4-38a5-9ece-3fd15f2fff13.roa File: 8f89c5ef-6ad4-38a5-9ece-3fd15f2fff13.roa (raw, json) Hash identifier: Zwx2VhfAwScT3eeWgLTmdGxL9xD08V0cnWHyAJTYBRE= Subject key identifier: B7:DD:69:36:E8:DB:43:7A:2C:8F:6E:40:E3:D1:32:D4:C9:6B:05:2A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACF71164DE37F9BF9EABC0D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f89c5ef-6ad4-38a5-9ece-3fd15f2fff13.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 36622 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:16:4d:e3:7f:9b:f9:ea:bc:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=a1ce56ea-bae5-410b-bcb5-a93fcedd5c13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:12:2c:a7:a5:76:75:7c:c0:a2:81:80:61:c5: 0b:72:08:77:cc:83:2e:df:96:d1:86:ae:66:83:18: 64:8e:1f:c6:2b:35:d8:e2:78:f8:9f:12:79:1d:ef: 72:6e:f6:e7:ce:20:24:b3:9f:7b:71:e1:aa:98:59: 3d:64:fd:fe:2e:71:dd:d9:9c:57:7d:cb:10:e0:82: 23:c3:41:5a:e6:54:3f:6c:7e:18:87:6a:9d:53:6d: 85:7e:57:84:a9:d5:b3:e2:a3:d9:57:86:ea:bf:23: 90:23:b0:c5:b2:e7:13:9b:45:cb:c6:be:81:a4:51: e2:4f:17:e2:ed:4d:d4:ce:e3:3c:c4:9d:a6:d9:d2: ff:df:f1:f5:f6:34:86:c2:6b:97:2c:b5:84:2a:2e: 17:4c:c1:ba:01:68:18:ba:5a:91:98:31:8f:90:75: e2:a8:1b:76:2f:47:5d:bd:cb:ac:22:1e:07:f0:c0: 87:16:9b:22:9e:5d:c4:8c:21:0a:cc:95:f1:cf:cb: aa:94:c3:42:d0:bd:61:66:71:cb:0a:3c:d7:b0:ce: 55:be:99:41:6e:29:60:c1:c2:7a:df:01:17:b6:a9: e7:8f:ba:e7:90:47:10:38:1f:a2:30:3e:50:fd:64: 56:60:b1:84:d0:99:b1:e5:8a:a5:89:33:6f:2e:ab: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DD:69:36:E8:DB:43:7A:2C:8F:6E:40:E3:D1:32:D4:C9:6B:05:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8f89c5ef-6ad4-38a5-9ece-3fd15f2fff13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:04:5b:db:91:cb:49:c2:53:27:47:fc:6e:d2:7f:e4:8d:48: 87:d0:66:4a:98:c3:d8:ee:98:68:32:1e:5b:2e:9b:96:69:2d: 4d:87:b7:58:1a:62:3a:7f:2c:1a:85:37:a4:14:56:21:75:59: 42:ff:73:e9:18:31:62:a5:1b:f8:ac:b3:c7:18:1c:3a:5c:93: 25:c8:2b:37:f7:7f:c8:43:29:d4:e0:c8:85:ce:cf:68:bd:42: e5:fd:e8:2e:d5:11:a1:f2:aa:58:5d:f7:b8:51:15:ea:94:cd: 99:ce:f7:98:ef:58:cd:0e:28:3e:59:73:f1:f4:2f:40:ce:66: ce:82:33:5f:cc:2b:31:56:42:06:e6:25:01:ca:f0:55:d9:0f: cb:a7:53:14:c7:b0:17:af:3a:d9:f9:76:09:68:a7:c0:64:79: 36:8f:3c:20:12:00:c3:d3:4e:54:95:be:bd:58:84:5d:e7:54: 15:60:ec:18:6d:75:9b:19:de:19:d0:29:dd:2b:f6:18:96:c1: 83:3d:1f:84:10:55:03:0f:61:c3:2f:21:7d:42:20:85:52:d9: 93:94:78:14:89:4f:92:80:a0:a5:cd:85:15:cd:2d:8d:61:0b: 93:fa:54:f7:01:43:8e:d3:14:71:0c:88:12:d4:95:dc:ae:86: cd:2a:72:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcRZN43+b+eq8DQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk YTFjZTU2ZWEtYmFlNS00MTBiLWJjYjUtYTkzZmNlZGQ1YzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxIsp6V2dXzAooGAYcULcgh3zIMu35bRhq5m gxhkjh/GKzXY4nj4nxJ5He9ybvbnziAks597ceGqmFk9ZP3+LnHd2ZxXfcsQ4IIj w0Fa5lQ/bH4Yh2qdU22FfleEqdWz4qPZV4bqvyOQI7DFsucTm0XLxr6BpFHiTxfi 7U3UzuM8xJ2m2dL/3/H19jSGwmuXLLWEKi4XTMG6AWgYulqRmDGPkHXiqBt2L0dd vcusIh4H8MCHFpsinl3EjCEKzJXxz8uqlMNC0L1hZnHLCjzXsM5VvplBbilgwcJ6 3wEXtqnnj7rnkEcQOB+iMD5Q/WRWYLGE0Jmx5YqliTNvLqs21wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfdaTbo20N6LI9uQOPRMtTJawUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGY4OWM1ZWYtNmFkNC0z OGE1LTllY2UtM2ZkMTVmMmZmZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoEW9uRy0nCUydH/G7Sf+SNSIfQZkqYw9jumGgyHlsum5ZpLU2Ht1ga Yjp/LBqFN6QUViF1WUL/c+kYMWKlG/iss8cYHDpckyXIKzf3f8hDKdTgyIXOz2i9 QuX96C7VEaHyqlhd97hRFeqUzZnO95jvWM0OKD5Zc/H0L0DOZs6CM1/MKzFWQgbm JQHK8FXZD8unUxTHsBevOtn5dglop8BkeTaPPCASAMPTTlSVvr1YhF3nVBVg7Bht dZsZ3hnQKd0r9hiWwYM9H4QQVQMPYcMvIX1CIIVS2ZOUeBSJT5KAoKXNhRXNLY1h C5P6VPcBQ47TFHEMiBLUldyuhs0qcs0= -----END CERTIFICATE-----Generated at Wed Oct 29 09:04:47 2025 by rpki-client