$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa732efd-acb6-3d80-9290-aa51583468d1.roa File: aa732efd-acb6-3d80-9290-aa51583468d1.roa (raw, json) Hash identifier: bnF4tkYvhL4m2k7wG+kZzkxnaXLA007FEPmoUvt4KWo= Subject key identifier: 56:E9:D4:5A:D2:89:6C:7A:10:3E:44:74:39:0F:61:55:65:CB:88:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACF711917DA525644342AF380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa732efd-acb6-3d80-9290-aa51583468d1.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 397203 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:19:17:da:52:56:44:34:2a:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=2e0267ce-2971-4978-bee0-6366f01dcea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b9:fa:bf:eb:2a:50:40:7c:42:68:f8:ba:3f: d4:76:79:15:2b:c3:70:6e:5c:02:e2:92:64:14:d4: 9b:5d:c2:49:3e:42:8a:79:d0:75:f1:14:6c:62:77: 38:a5:ac:f8:5d:8f:c7:e7:49:3f:75:9f:a6:b1:72: 76:aa:dc:2a:b9:cf:9d:f8:56:c0:0e:50:ad:19:98: f6:24:4a:34:65:0e:a8:51:7a:e0:7f:ee:96:61:c7: f3:7e:00:f1:8a:6b:dd:ba:1e:ff:2c:88:56:06:56: cc:dc:9f:0b:65:15:c2:1c:b1:99:2b:59:9e:e8:17: b9:fc:9f:08:54:91:6e:d0:d2:5e:65:a6:05:bc:3d: c3:8b:2d:2d:4c:94:3d:ae:5f:6e:b2:ad:c0:ec:29: 64:46:6c:3a:21:d8:15:a9:97:51:ba:d9:bb:b2:1c: ba:31:a0:c5:13:44:de:f1:64:90:36:13:2f:cf:3b: 92:e3:4f:bf:0d:92:7a:49:fd:c4:e7:07:cb:d3:b5: f9:70:55:57:2a:b4:26:17:4e:b7:ac:c7:b8:28:ed: 22:14:f8:cf:c2:8c:68:07:9d:41:b6:0a:e1:bd:df: ba:51:68:b9:77:51:03:3b:86:05:61:ed:45:54:8f: 95:e5:77:85:38:10:57:82:e6:1f:85:ee:72:e9:1b: b4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E9:D4:5A:D2:89:6C:7A:10:3E:44:74:39:0F:61:55:65:CB:88:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa732efd-acb6-3d80-9290-aa51583468d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:74:b9:65:87:cb:7f:86:fd:88:63:cb:72:05:f5:c1:46:0b: de:98:3c:60:2c:0c:93:a8:f7:5b:7e:74:8d:b3:23:33:11:14: 06:11:8f:61:22:1d:7b:05:ce:b2:93:e6:5b:1c:ba:83:33:1f: db:73:4f:25:d4:0d:fb:d6:e8:50:2c:ef:36:76:78:96:91:31: 27:74:30:fe:39:fc:1f:d4:79:ef:b8:c4:82:46:9b:fb:39:b8: eb:3e:25:0c:69:77:89:a7:88:02:76:3d:0b:5e:ff:00:44:22: e2:03:a4:b3:0d:37:f3:9f:9e:2f:d9:59:dd:cb:c2:a8:05:99: 04:60:73:57:76:80:f3:62:19:2f:c6:19:dc:16:71:84:0b:c1: 38:58:99:ba:9c:27:d3:e5:83:b4:92:4b:ca:67:37:2b:7f:b8: 4a:02:03:3b:8a:d6:36:ac:d6:48:fd:ff:01:c8:7d:70:18:e9: 61:db:b7:8e:89:f8:49:aa:11:ab:42:2d:ca:ae:e9:9c:fb:ff: 4f:b1:98:13:3f:1b:6b:e6:6d:9a:8b:10:6b:08:6c:a9:9f:2e: 16:d2:ed:c5:88:5b:55:ef:72:02:e7:64:d0:c2:cf:ac:9c:4a: 60:88:01:ca:b1:ce:35:a8:79:85:21:aa:4b:40:88:08:49:e3: de:95:d4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcRkX2lJWRDQq84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MmUwMjY3Y2UtMjk3MS00OTc4LWJlZTAtNjM2NmYwMWRjZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLn6v+sqUEB8Qmj4uj/UdnkVK8NwblwC4pJk FNSbXcJJPkKKedB18RRsYnc4paz4XY/H50k/dZ+msXJ2qtwquc+d+FbADlCtGZj2 JEo0ZQ6oUXrgf+6WYcfzfgDximvduh7/LIhWBlbM3J8LZRXCHLGZK1me6Be5/J8I VJFu0NJeZaYFvD3Diy0tTJQ9rl9usq3A7ClkRmw6IdgVqZdRutm7shy6MaDFE0Te 8WSQNhMvzzuS40+/DZJ6Sf3E5wfL07X5cFVXKrQmF063rMe4KO0iFPjPwoxoB51B tgrhvd+6UWi5d1EDO4YFYe1FVI+V5XeFOBBXguYfhe5y6Ru0jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbp1FrSiWx6ED5EdDkPYVVly4hVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE3MzJlZmQtYWNiNi0z ZDgwLTkyOTAtYWE1MTU4MzQ2OGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJp0uWWHy3+G/Yhjy3IF9cFGC96YPGAsDJOo91t+dI2zIzMRFAYRj2Ei HXsFzrKT5lscuoMzH9tzTyXUDfvW6FAs7zZ2eJaRMSd0MP45/B/Uee+4xIJGm/s5 uOs+JQxpd4mniAJ2PQte/wBEIuIDpLMNN/Ofni/ZWd3LwqgFmQRgc1d2gPNiGS/G GdwWcYQLwThYmbqcJ9Plg7SSS8pnNyt/uEoCAzuK1jas1kj9/wHIfXAY6WHbt46J +EmqEatCLcqu6Zz7/0+xmBM/G2vmbZqLEGsIbKmfLhbS7cWIW1XvcgLnZNDCz6yc SmCIAcqxzjWoeYUhqktAiAhJ496V1Ik= -----END CERTIFICATE-----Generated at Wed Oct 29 09:04:45 2025 by rpki-client