$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa File: a849975a-8490-3533-b5a2-2658fda4ea2b.roa (raw, json) Hash identifier: pf9qfZRkY7OBIjW9IRw9oXGaQV/ArjRB9WZCoQ0oPD8= Subject key identifier: 21:B6:3E:6F:BC:77:1C:A1:5D:54:99:47:D7:9B:1E:A7:D4:FB:20:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA979F23D349942BA3E2E880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396585 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:9f:23:d3:49:94:2b:a3:e2:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=4a60f237-eca7-4499-b9e4-9a9ad5ed68e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b9:48:29:85:56:b6:d9:e1:8b:b1:a5:9b:d3: 35:67:1d:83:fb:df:38:14:b4:3f:ad:ce:8b:0f:e7: 83:6a:30:9b:a4:89:f6:5e:0b:7e:26:1f:0b:64:3f: 99:82:44:db:e1:39:7e:2a:e0:18:ae:d7:22:c5:36: 28:ea:40:4c:a5:c9:27:25:9c:7e:72:e6:64:aa:d1: 20:86:b9:b0:cd:c2:99:b1:4d:4d:e8:c3:bf:f9:e7: 72:c5:7d:4b:69:a7:8f:de:e8:0a:fd:fa:42:a7:52: c6:2b:8d:d6:86:2d:4f:41:31:9b:71:b6:6a:c6:54: 7c:c1:1a:36:25:0a:03:a0:31:e5:37:5b:a6:6f:ed: c0:1e:b7:89:01:30:99:f6:42:67:b9:b9:de:a1:ae: b9:4f:80:f8:a6:7b:c5:e3:34:01:ab:da:01:6b:8a: e3:ec:45:6b:1c:fc:7d:34:5c:ae:e4:e9:83:86:32: 1a:44:47:de:8c:ee:df:44:82:d9:26:a0:b5:b5:4a: 12:83:c2:53:b6:79:c9:63:b5:9b:87:6f:dc:1e:fc: 75:4a:83:58:ee:29:3e:45:e1:60:80:20:df:76:25: f2:19:e6:e0:8e:02:28:d9:af:07:6d:08:d0:06:20: 6d:68:cf:1d:28:ca:26:6a:49:ae:6a:1b:98:6d:52: 35:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B6:3E:6F:BC:77:1C:A1:5D:54:99:47:D7:9B:1E:A7:D4:FB:20:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9c:92:05:76:cf:a8:a7:54:5b:27:0b:c8:de:ae:96:1b:70: 0a:ed:cd:3e:dd:5f:4c:13:30:27:41:bc:66:1a:bd:c0:98:c7: a0:78:87:46:7a:67:4a:5a:69:a2:43:95:9f:04:7f:53:43:b1: c4:d6:5c:4f:7b:d8:fb:9d:f6:86:19:a1:a8:97:6f:20:23:4c: af:0a:4d:f1:ea:13:e3:de:51:9d:86:9e:3d:cc:7a:87:50:e3: b9:3a:c3:89:33:64:bb:91:1a:9d:3e:45:20:9e:68:e1:5f:29: 46:53:70:33:45:2d:4f:e6:75:75:1b:08:bc:a0:11:4c:2a:89: 32:4e:ec:a6:68:96:01:bc:75:cc:ea:b9:b7:59:58:22:5a:14: 7f:7a:71:1d:f8:b8:3c:64:75:0d:25:00:78:08:80:76:2f:99: 37:3e:f7:6e:c4:7e:8a:f2:34:21:3d:03:a3:60:e2:51:54:24: 93:3d:2b:33:0a:bf:5b:79:14:7e:ad:af:99:3c:01:cd:63:54: 39:f3:32:7c:29:53:b2:03:d3:54:13:fd:31:9b:91:aa:a1:e4: ab:5a:e4:7f:33:5d:53:c5:a6:c9:fa:c1:8b:6b:a3:63:4a:65: 8c:c2:42:c7:f0:a4:39:38:ad:f3:ef:43:77:47:a3:cb:37:92: 6e:6a:1f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql58j00mUK6Pi6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk NGE2MGYyMzctZWNhNy00NDk5LWI5ZTQtOWE5YWQ1ZWQ2OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLlIKYVWttnhi7Glm9M1Zx2D+984FLQ/rc6L D+eDajCbpIn2Xgt+Jh8LZD+ZgkTb4Tl+KuAYrtcixTYo6kBMpcknJZx+cuZkqtEg hrmwzcKZsU1N6MO/+edyxX1LaaeP3ugK/fpCp1LGK43Whi1PQTGbcbZqxlR8wRo2 JQoDoDHlN1umb+3AHreJATCZ9kJnubneoa65T4D4pnvF4zQBq9oBa4rj7EVrHPx9 NFyu5OmDhjIaREfejO7fRILZJqC1tUoSg8JTtnnJY7Wbh2/cHvx1SoNY7ik+ReFg gCDfdiXyGebgjgIo2a8HbQjQBiBtaM8dKMomakmuahuYbVI1bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCG2Pm+8dxyhXVSZR9ebHqfU+yCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg0OTk3NWEtODQ5MC0z NTMzLWI1YTItMjY1OGZkYTRlYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKckgV2z6inVFsnC8jerpYbcArtzT7dX0wTMCdBvGYavcCYx6B4h0Z6 Z0paaaJDlZ8Ef1NDscTWXE972Pud9oYZoaiXbyAjTK8KTfHqE+PeUZ2Gnj3MeodQ 47k6w4kzZLuRGp0+RSCeaOFfKUZTcDNFLU/mdXUbCLygEUwqiTJO7KZolgG8dczq ubdZWCJaFH96cR34uDxkdQ0lAHgIgHYvmTc+927EforyNCE9A6Ng4lFUJJM9KzMK v1t5FH6tr5k8Ac1jVDnzMnwpU7ID01QT/TGbkaqh5Kta5H8zXVPFpsn6wYtro2NK ZYzCQsfwpDk4rfPvQ3dHo8s3km5qH40= -----END CERTIFICATE-----Generated at Wed Oct 29 09:15:23 2025 by rpki-client