$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d290989-c6b5-3216-98cb-f415d15b66c5.roa File: 9d290989-c6b5-3216-98cb-f415d15b66c5.roa (raw, json) Hash identifier: EIlu1I/TpnW2t6TcVjl+H/HgcH1M1srPc8HmE4uD/T8= Subject key identifier: 57:7D:1A:C8:DE:28:C1:39:23:44:E1:6A:FC:B1:38:46:C6:21:33:8F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AF686A671E5BDDB530912F480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d290989-c6b5-3216-98cb-f415d15b66c5.roa Signing time: Sun 24 Aug 2025 13:00:42 +0000 ROA not before: Sun 24 Aug 2025 13:00:42 +0000 ROA not after: Sat 22 Nov 2025 14:00:42 +0000 asID: 20362 IP address blocks: 192.34.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f6:86:a6:71:e5:bd:db:53:09:12:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 24 13:00:42 2025 GMT Not After : Nov 22 14:00:42 2025 GMT Subject: CN=8649ed11-d26e-4f9b-a2b9-0ba1a41fca89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8f:ab:4f:c3:38:e6:84:bb:c0:55:92:bd:61: fb:a3:ee:60:ec:84:57:06:67:0a:10:16:df:07:e6: 48:8a:0a:b2:fd:dc:36:cf:a4:e5:67:f5:08:5b:56: ce:a0:d1:d9:86:f5:4d:26:79:b4:98:a0:74:ec:99: 89:ea:c3:6c:0d:c3:ab:af:d3:78:48:2b:aa:4a:56: 4d:76:fb:e9:77:be:24:b9:bd:6e:8a:12:cb:3e:02: a3:5d:47:ba:81:1c:49:7e:53:18:41:f8:25:54:d3: b7:6e:94:37:b4:3e:2b:b8:f6:7e:3f:d5:b8:6b:49: 49:ca:cf:18:c1:39:78:86:c9:01:28:6b:12:fd:90: c1:50:18:ee:1d:4b:1a:7a:05:35:f5:4b:21:a6:cc: 7c:41:28:80:d5:1d:7c:20:10:fc:27:78:d6:19:c5: e6:90:d8:33:49:0d:1d:3c:4a:79:03:ce:d1:4b:bf: 76:b7:02:86:a9:72:0a:d3:92:f3:81:54:f6:a9:ab: 15:9c:55:ac:3d:e8:df:dc:fa:a5:91:3b:9b:8b:eb: f4:3e:7b:0c:4c:a6:a8:fc:11:6a:c1:d0:d2:39:34: af:13:c0:62:56:06:f3:b0:99:9a:dd:32:b3:8a:6b: e9:ef:62:01:2f:05:2c:51:df:68:03:f2:c9:a0:c7: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7D:1A:C8:DE:28:C1:39:23:44:E1:6A:FC:B1:38:46:C6:21:33:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d290989-c6b5-3216-98cb-f415d15b66c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ba:92:d4:ed:fc:77:28:6a:d4:2c:ce:e3:34:f0:bb:d8:8b: 86:9a:06:bd:3a:41:b5:3b:d8:a2:ca:59:44:49:ef:f0:c5:0b: ef:66:bb:3e:70:76:11:7b:72:c4:e9:b0:90:19:55:5b:0f:cc: c8:3d:05:c0:84:9f:5e:51:0f:74:be:6d:61:91:6a:0d:da:0b: d5:c3:d1:2a:32:2c:86:d7:e0:eb:e4:cd:0e:27:10:0f:07:b5: 01:ab:25:3d:2b:2b:6f:3a:d6:c4:04:fa:62:ae:f8:a1:a4:cb: 7f:0a:39:12:66:46:98:3c:0c:02:68:bb:26:6d:9e:37:6c:21: 47:95:e3:82:5f:33:dc:97:d1:e3:a1:c8:30:f1:ba:d0:2a:87: e5:24:20:e8:07:f8:98:da:2d:39:4b:7f:75:e8:a9:16:e1:5c: e2:5a:ca:b6:fa:0b:2f:2e:a9:30:66:ca:e8:8a:f8:a8:cc:15: 56:41:7a:55:05:16:c1:e8:57:27:dd:fa:e2:b8:3e:1a:9f:b1: 3b:dc:97:35:44:a3:00:9a:d2:5f:2d:69:9c:0b:13:8a:63:d8: 12:2d:7c:97:33:7b:6a:1a:82:24:75:30:31:aa:d0:55:59:ae: c2:fe:3b:6d:f5:32:80:73:b5:3e:a4:d7:44:aa:d8:dc:0b:51: 42:3b:f8:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr2hqZx5b3bUwkS9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNDEzMDA0MloXDTI1MTEyMjE0MDA0MlowLzEtMCsGA1UEAxMk ODY0OWVkMTEtZDI2ZS00ZjliLWEyYjktMGJhMWE0MWZjYTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhY+rT8M45oS7wFWSvWH7o+5g7IRXBmcKEBbf B+ZIigqy/dw2z6TlZ/UIW1bOoNHZhvVNJnm0mKB07JmJ6sNsDcOrr9N4SCuqSlZN dvvpd74kub1uihLLPgKjXUe6gRxJflMYQfglVNO3bpQ3tD4ruPZ+P9W4a0lJys8Y wTl4hskBKGsS/ZDBUBjuHUsaegU19Ushpsx8QSiA1R18IBD8J3jWGcXmkNgzSQ0d PEp5A87RS792twKGqXIK05LzgVT2qasVnFWsPejf3PqlkTubi+v0PnsMTKao/BFq wdDSOTSvE8BiVgbzsJma3TKzimvp72IBLwUsUd9oA/LJoMdGbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd9GsjeKME5I0ThavyxOEbGITOPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWQyOTA5ODktYzZiNS0z MjE2LTk4Y2ItZjQxNWQxNWI2NmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH26ktTt/HcoatQszuM08LvYi4aaBr06QbU72KLKWURJ7/DFC+9muz5w dhF7csTpsJAZVVsPzMg9BcCEn15RD3S+bWGRag3aC9XD0SoyLIbX4OvkzQ4nEA8H tQGrJT0rK2861sQE+mKu+KGky38KORJmRpg8DAJouyZtnjdsIUeV44JfM9yX0eOh yDDxutAqh+UkIOgH+JjaLTlLf3XoqRbhXOJayrb6Cy8uqTBmyuiK+KjMFVZBelUF FsHoVyfd+uK4PhqfsTvclzVEowCa0l8taZwLE4pj2BItfJcze2oagiR1MDGq0FVZ rsL+O231MoBztT6k10Sq2NwLUUI7+Ao= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:44 2025 by rpki-client