$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2cec4b-9aa5-3e68-8e0b-42973a1727f4.roa File: ab2cec4b-9aa5-3e68-8e0b-42973a1727f4.roa (raw, json) Hash identifier: PEJtCvikrG/zM6w9BbiaS4ueMt6vyOS3BveRFxUUUgw= Subject key identifier: D6:1E:15:06:0A:5A:C9:F4:BE:D8:74:98:5A:4D:AD:26:AF:9F:86:3F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC088D8FDDA01A3BC5C40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2cec4b-9aa5-3e68-8e0b-42973a1727f4.roa Signing time: Tue 26 Aug 2025 12:32:11 +0000 ROA not before: Tue 26 Aug 2025 12:32:11 +0000 ROA not after: Mon 24 Nov 2025 13:32:11 +0000 asID: 19836 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c0:88:d8:fd:da:01:a3:bc:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:11 2025 GMT Not After : Nov 24 13:32:11 2025 GMT Subject: CN=95d09d52-fd45-4d39-9574-3ea07bea5413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:bd:ce:50:8d:cf:d9:6e:1a:b7:16:59:0b: 17:8e:64:ca:31:52:dc:47:9b:82:29:1d:14:12:02: b7:d2:d0:fe:74:b0:ca:94:bc:6c:91:a7:15:c7:e1: 77:bb:2e:d9:65:20:10:e5:fa:f3:1f:3c:f5:7e:20: 24:5c:72:1f:cb:c8:3a:0b:6a:19:c1:14:40:03:b4: e9:65:ae:78:8f:5b:80:07:0e:ce:91:c7:aa:b0:8b: d9:94:7f:b8:66:60:21:f1:5c:c2:9d:45:0d:74:00: 2d:22:f8:aa:18:ce:e9:4a:fe:c7:f7:4b:00:72:5d: 9c:ba:1c:87:10:70:78:83:8c:5b:19:78:6d:2c:ab: 52:62:24:cf:e7:cb:d0:88:f4:54:6c:8b:59:59:34: 8c:e1:9c:05:2c:29:0c:53:c6:18:7e:72:92:48:ff: 92:ec:02:77:5c:05:01:77:f7:a8:b7:5a:68:13:7a: 9a:70:c6:f9:eb:93:2d:98:f8:93:79:0b:99:61:98: 9f:e2:b8:b9:86:b6:5f:a8:c0:be:6b:58:4e:34:5a: bb:91:75:05:73:78:68:23:ae:18:6b:5a:6e:23:a0: 77:12:15:80:6f:e9:64:15:2e:64:12:57:a4:fa:0d: 69:35:1b:4b:1d:bd:7f:80:54:04:df:7c:48:3a:4f: 02:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1E:15:06:0A:5A:C9:F4:BE:D8:74:98:5A:4D:AD:26:AF:9F:86:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2cec4b-9aa5-3e68-8e0b-42973a1727f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2c:f8:8b:ca:61:ba:a6:f4:21:90:32:fd:5d:6c:15:cc:05: d5:b7:da:76:d5:d3:65:cd:7f:84:8b:de:23:60:5f:2e:19:bb: 3d:57:2c:75:ce:2c:ac:c2:11:5d:01:3c:19:a1:4f:0d:17:0b: ea:03:55:8d:ce:f4:c2:9d:ad:d9:93:a8:72:05:5b:c5:cc:ed: bb:c9:80:48:27:92:8e:a4:e0:94:aa:ca:b3:1a:91:90:e3:8d: 72:be:42:80:9d:c5:62:51:37:65:b4:9f:5e:39:6f:7e:e6:b0: 73:3d:ef:21:69:1e:75:a0:c4:06:49:10:3c:6c:6d:77:bd:ca: ff:26:4b:e0:98:9e:f0:39:8a:51:04:7d:5b:c8:53:50:30:66: 03:c5:16:c7:7f:db:a5:df:5b:1b:53:70:c0:e9:63:78:ef:a2: 1b:25:f7:ac:af:8e:12:5c:58:28:cd:93:5c:68:f4:ba:ec:d2: fc:0f:af:c6:83:6e:1d:46:12:7a:b5:da:8b:c3:41:9c:9c:06: 3c:2d:19:15:e0:05:31:01:66:22:8c:41:dc:e5:3c:cd:e1:29: 46:96:55:a9:a7:51:ee:ae:85:00:49:46:ea:8a:fa:20:27:4a: 00:e1:8d:1e:d8:4e:1b:8e:72:7e:4d:b7:4a:2c:ae:fb:e2:10: a4:50:32:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcCI2P3aAaO8XEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMVoXDTI1MTEyNDEzMzIxMVowLzEtMCsGA1UEAxMk OTVkMDlkNTItZmQ0NS00ZDM5LTk1NzQtM2VhMDdiZWE1NDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfW9zlCNz9luGrcWWQsXjmTKMVLcR5uCKR0U EgK30tD+dLDKlLxskacVx+F3uy7ZZSAQ5frzHzz1fiAkXHIfy8g6C2oZwRRAA7Tp Za54j1uABw7OkceqsIvZlH+4ZmAh8VzCnUUNdAAtIviqGM7pSv7H90sAcl2cuhyH EHB4g4xbGXhtLKtSYiTP58vQiPRUbItZWTSM4ZwFLCkMU8YYfnKSSP+S7AJ3XAUB d/eot1poE3qacMb565MtmPiTeQuZYZif4ri5hrZfqMC+a1hONFq7kXUFc3hoI64Y a1puI6B3EhWAb+lkFS5kElek+g1pNRtLHb1/gFQE33xIOk8C4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYeFQYKWsn0vth0mFpNrSavn4Y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWIyY2VjNGItOWFhNS0z ZTY4LThlMGItNDI5NzNhMTcyN2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0s+IvKYbqm9CGQMv1dbBXMBdW32nbV02XNf4SL3iNgXy4Zuz1XLHXO LKzCEV0BPBmhTw0XC+oDVY3O9MKdrdmTqHIFW8XM7bvJgEgnko6k4JSqyrMakZDj jXK+QoCdxWJRN2W0n145b37msHM97yFpHnWgxAZJEDxsbXe9yv8mS+CYnvA5ilEE fVvIU1AwZgPFFsd/26XfWxtTcMDpY3jvohsl96yvjhJcWCjNk1xo9Lrs0vwPr8aD bh1GEnq12ovDQZycBjwtGRXgBTEBZiKMQdzlPM3hKUaWVamnUe6uhQBJRuqK+iAn SgDhjR7YThuOcn5Nt0osrvviEKRQMvc= -----END CERTIFICATE-----Generated at Wed Sep 10 18:00:27 2025 by rpki-client