$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8df9516-24aa-3990-9b0e-3f2c5b448523.roa File: a8df9516-24aa-3990-9b0e-3f2c5b448523.roa (raw, json) Hash identifier: 9qsRjrUDLiYorvjEGie+CFSsllJRSE2awNEoLRAYSxc= Subject key identifier: 88:CD:CE:11:64:F1:30:6D:95:A5:9F:A7:F9:1F:18:5E:F2:82:0C:75 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA97B1E6D182E35602618A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8df9516-24aa-3990-9b0e-3f2c5b448523.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 397199 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b1:e6:d1:82:e3:56:02:61:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=69686878-4b3c-4e74-9df7-b6bda75d145b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:2f:a3:ad:70:8f:27:26:9a:c7:aa:7e:13: 52:39:a7:f7:1e:d1:de:32:e2:68:0a:d2:07:11:5f: 03:5c:e5:e2:aa:6c:79:ff:01:b8:82:a0:fe:bf:17: 60:59:8d:e1:25:71:ea:d8:36:ea:17:c6:af:d4:ca: 2e:b6:a3:ea:e2:da:1a:88:65:3d:56:52:9c:1a:4a: 6a:fa:ef:53:10:db:d5:8a:a0:61:b7:ad:d1:aa:e3: 73:ae:99:ed:ea:12:b8:ca:9d:e3:71:da:33:b9:57: 74:38:c5:cc:bb:a5:15:cf:f2:53:9d:bf:08:6c:a3: f8:e7:ff:56:0f:48:f5:bb:2c:cb:32:58:93:13:23: f1:05:ec:82:08:cb:35:51:67:a5:1e:2d:48:0b:1e: 9d:58:be:a3:ec:7e:c9:14:b6:8c:94:22:27:36:5e: 2a:21:da:48:bb:42:3f:83:9b:43:4c:cc:35:ec:e1: ef:86:44:fc:75:0b:5d:33:ad:bf:c5:52:8f:67:b8: a1:4a:7a:05:78:25:b3:f3:46:d0:62:c6:b0:17:ef: 8b:77:86:34:da:82:aa:40:76:f9:b7:13:26:9e:13: 80:3a:7a:f9:af:eb:a5:29:45:8f:7b:71:d1:80:23: 89:f3:6d:44:99:5f:3b:cd:25:19:98:19:8a:cb:cb: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:CD:CE:11:64:F1:30:6D:95:A5:9F:A7:F9:1F:18:5E:F2:82:0C:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8df9516-24aa-3990-9b0e-3f2c5b448523.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b8:9b:35:d7:89:42:f4:f8:07:8b:29:cd:2b:79:76:4a:4c: a2:fe:bb:92:52:ba:51:ef:73:16:ad:ed:d4:7f:3a:0d:a9:9d: 77:9e:0d:97:1f:a7:09:c4:01:96:3c:c3:ea:4a:c6:39:2f:cd: dc:23:4e:e1:ea:5f:11:45:f1:75:74:84:28:28:43:06:51:83: f1:da:65:a3:af:dd:53:8f:93:8e:11:36:4a:f4:be:7a:3e:79: 3a:a3:44:06:3c:85:a3:91:28:f7:75:2b:18:8d:46:cb:92:71: 02:cb:1c:41:ba:a9:6a:6c:65:f4:53:67:12:0b:97:ab:b4:39: c9:6e:17:70:84:d9:9f:b4:0a:9e:c9:ad:14:a1:2c:12:9e:3e: 8e:ca:4f:cd:87:4b:63:bc:4d:b3:54:07:08:7b:5b:45:fa:77: 06:36:f8:41:80:80:83:9e:b8:1b:80:81:d7:1a:2c:70:f8:3c: 7d:3e:7b:2c:3f:57:b4:fe:4a:d1:d9:a4:e5:f2:93:18:d9:36: b7:76:7b:2d:98:6d:43:45:ff:30:c2:d0:25:11:4f:2c:f7:be: c2:89:ec:0e:72:ca:cd:e2:39:d3:db:b0:dc:9f:ca:39:f3:b1: 4b:3a:ad:c7:2a:37:a7:00:3e:21:64:be:42:72:b6:8f:a5:07: 30:85:8f:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7Hm0YLjVgJhikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Njk2ODY4NzgtNGIzYy00ZTc0LTlkZjctYjZiZGE3NWQxNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj54vo61wjycmmseqfhNSOaf3HtHeMuJoCtIH EV8DXOXiqmx5/wG4gqD+vxdgWY3hJXHq2DbqF8av1MoutqPq4toaiGU9VlKcGkpq +u9TENvViqBht63RquNzrpnt6hK4yp3jcdozuVd0OMXMu6UVz/JTnb8IbKP45/9W D0j1uyzLMliTEyPxBeyCCMs1UWelHi1ICx6dWL6j7H7JFLaMlCInNl4qIdpIu0I/ g5tDTMw17OHvhkT8dQtdM62/xVKPZ7ihSnoFeCWz80bQYsawF++Ld4Y02oKqQHb5 txMmnhOAOnr5r+ulKUWPe3HRgCOJ821EmV87zSUZmBmKy8vJ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIjNzhFk8TBtlaWfp/kfGF7yggx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYThkZjk1MTYtMjRhYS0z OTkwLTliMGUtM2YyYzViNDQ4NTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK4mzXXiUL0+AeLKc0reXZKTKL+u5JSulHvcxat7dR/Og2pnXeeDZcf pwnEAZY8w+pKxjkvzdwjTuHqXxFF8XV0hCgoQwZRg/HaZaOv3VOPk44RNkr0vno+ eTqjRAY8haORKPd1KxiNRsuScQLLHEG6qWpsZfRTZxILl6u0OcluF3CE2Z+0Cp7J rRShLBKePo7KT82HS2O8TbNUBwh7W0X6dwY2+EGAgIOeuBuAgdcaLHD4PH0+eyw/ V7T+StHZpOXykxjZNrd2ey2YbUNF/zDC0CURTyz3vsKJ7A5yys3iOdPbsNyfyjnz sUs6rccqN6cAPiFkvkJyto+lBzCFj0Y= -----END CERTIFICATE-----Generated at Wed Oct 29 09:15:22 2025 by rpki-client