$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1eaeced-4e47-34fe-99d1-9671b44f376a.roa File: a1eaeced-4e47-34fe-99d1-9671b44f376a.roa (raw, json) Hash identifier: 7NRIQhJ7XzONmgMQRGVjawD2SGQDn0NQVbOZJHVUXPI= Subject key identifier: 69:DB:17:36:7B:3C:4A:50:B2:AC:33:0A:29:D9:7A:F2:0E:1B:79:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC43E17E075DB52148880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1eaeced-4e47-34fe-99d1-9671b44f376a.roa Signing time: Tue 26 Aug 2025 12:32:12 +0000 ROA not before: Tue 26 Aug 2025 12:32:12 +0000 ROA not after: Mon 24 Nov 2025 13:32:12 +0000 asID: 397210 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c4:3e:17:e0:75:db:52:14:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:12 2025 GMT Not After : Nov 24 13:32:12 2025 GMT Subject: CN=2529b5c2-33bc-4a8d-ac66-1b42eff4b9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:3c:1b:83:0d:f0:ed:5d:35:be:50:45:6f: 23:d9:03:44:0b:83:bd:3b:67:6f:6f:5d:66:ed:b7: e4:65:71:b1:34:02:ac:48:46:7c:86:0c:b0:3c:30: 45:ab:a9:bd:8a:41:c4:dd:62:56:72:47:48:ad:87: 2a:1d:cc:d3:0e:5a:b0:5d:70:00:34:8f:2f:8f:bf: 1f:3f:29:69:9f:8e:96:1d:48:2d:07:00:1b:94:23: 25:20:30:aa:80:38:25:a9:1f:78:4a:b6:43:19:e0: 80:c9:94:f2:4a:96:68:c7:d4:d5:63:c9:b7:c5:fd: 2e:e8:e0:fb:48:df:c9:7d:b3:dd:f9:da:50:96:56: 4b:61:e7:79:f8:41:94:3d:05:c2:64:6c:73:10:b3: 08:22:67:b0:a4:47:a9:c2:66:0a:04:27:d5:0c:57: b5:cb:87:66:27:71:fd:69:a2:85:b7:89:ec:e2:95: 68:7d:0c:2d:71:bc:64:49:a1:2c:81:72:fa:8e:2b: 95:c8:2e:61:ad:9e:57:7e:79:ab:5d:b3:da:56:b7: 66:73:38:c4:b7:36:46:19:c9:2c:3c:8b:f1:53:a1: d6:a7:1b:7e:f9:04:2d:4c:ae:ed:27:dd:de:56:81: 5b:a7:37:cc:bf:2e:ec:2c:67:18:03:6b:8f:b0:1f: e2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:DB:17:36:7B:3C:4A:50:B2:AC:33:0A:29:D9:7A:F2:0E:1B:79:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1eaeced-4e47-34fe-99d1-9671b44f376a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:22:ca:c6:be:8a:51:32:3e:8b:2f:40:a2:2d:3f:f7:d2:ce: 0c:8b:d2:18:66:6e:39:74:d3:cf:f0:8d:f3:80:80:a5:07:86: c1:b4:f7:76:49:88:1d:a2:56:e1:99:27:40:3e:3d:94:b1:61: a5:5c:48:75:a0:ab:05:9b:c4:97:42:a7:88:eb:d1:37:83:65: 18:d3:0f:c5:ac:82:22:f4:0a:c2:50:63:0f:3f:5c:e4:e0:62: b4:4f:38:a7:96:3d:fb:f1:89:a9:6e:c5:1a:02:cc:c5:a0:ce: 81:5e:63:d6:98:57:8e:53:51:61:69:13:3f:54:d2:02:42:cf: 83:2b:27:6e:08:a2:5a:b8:78:a5:01:f8:fd:51:d7:47:31:37: 45:6a:1e:16:e0:ee:f9:b9:3c:fe:73:7b:43:1d:53:72:15:3f: 62:07:f8:d1:f1:f7:4b:13:ea:13:04:f2:aa:41:a5:49:c1:b8: c9:5a:04:2c:89:20:47:d2:25:ab:c0:4a:35:05:f5:3d:5c:73: 90:c8:a5:63:21:23:41:1b:fc:fd:50:95:71:24:e6:4a:04:79: f0:9a:27:d5:ec:5c:50:67:93:a1:20:4d:c9:61:da:7f:a5:93: 70:c9:a2:01:76:ed:80:9a:0a:e8:19:bc:0e:6d:97:5b:5c:ba: 2d:b8:90:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcQ+F+B121IUiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMloXDTI1MTEyNDEzMzIxMlowLzEtMCsGA1UEAxMk MjUyOWI1YzItMzNiYy00YThkLWFjNjYtMWI0MmVmZjRiOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEU8G4MN8O1dNb5QRW8j2QNEC4O9O2dvb11m 7bfkZXGxNAKsSEZ8hgywPDBFq6m9ikHE3WJWckdIrYcqHczTDlqwXXAANI8vj78f Pylpn46WHUgtBwAblCMlIDCqgDglqR94SrZDGeCAyZTySpZox9TVY8m3xf0u6OD7 SN/JfbPd+dpQllZLYed5+EGUPQXCZGxzELMIImewpEepwmYKBCfVDFe1y4dmJ3H9 aaKFt4ns4pVofQwtcbxkSaEsgXL6jiuVyC5hrZ5XfnmrXbPaVrdmczjEtzZGGcks PIvxU6HWpxt++QQtTK7tJ93eVoFbpzfMvy7sLGcYA2uPsB/idwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnbFzZ7PEpQsqwzCinZevIOG3mpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFlYWVjZWQtNGU0Ny0z NGZlLTk5ZDEtOTY3MWI0NGYzNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0iysa+ilEyPosvQKItP/fSzgyL0hhmbjl008/wjfOAgKUHhsG093ZJ iB2iVuGZJ0A+PZSxYaVcSHWgqwWbxJdCp4jr0TeDZRjTD8WsgiL0CsJQYw8/XOTg YrRPOKeWPfvxialuxRoCzMWgzoFeY9aYV45TUWFpEz9U0gJCz4MrJ24Iolq4eKUB +P1R10cxN0VqHhbg7vm5PP5ze0MdU3IVP2IH+NHx90sT6hME8qpBpUnBuMlaBCyJ IEfSJavASjUF9T1cc5DIpWMhI0Eb/P1QlXEk5koEefCaJ9XsXFBnk6EgTclh2n+l k3DJogF27YCaCugZvA5tl1tcui24kJc= -----END CERTIFICATE-----Generated at Wed Oct 29 07:03:09 2025 by rpki-client