$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abcfb767-46b9-3ff6-b4a4-09104beb3b77.roa File: abcfb767-46b9-3ff6-b4a4-09104beb3b77.roa (raw, json) Hash identifier: NdzCvxvZfpFiUQ66vAMIZZWsh6nriBk9zKgGTXKOsHI= Subject key identifier: F8:AD:7C:1C:99:AA:73:F3:5A:85:90:BE:AA:0D:00:D8:38:6C:6C:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA97B6A636813B99FBE5CDC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abcfb767-46b9-3ff6-b4a4-09104beb3b77.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 397210 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b6:a6:36:81:3b:99:fb:e5:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=e3a51f7e-04dc-496f-8a16-e9f31d54b232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c7:31:c5:13:1a:41:29:c6:bf:6d:d8:cd:b8: c8:af:b4:0d:bb:dd:aa:cb:ac:ea:3d:ae:74:e9:b2: a7:6a:9a:d5:bc:59:29:c7:5a:8c:82:e4:ff:a2:0a: f8:ef:2a:44:c7:d7:f9:31:ee:fa:e0:84:1e:97:ff: 6a:6f:8f:15:75:76:f9:69:d5:1a:9e:82:73:1a:88: 1c:50:ba:9d:50:ac:17:d0:56:70:4a:47:7a:7a:e5: bf:7c:89:de:9b:1e:f2:95:3b:a4:82:13:79:b6:01: 7e:77:1a:e5:7f:2c:bd:75:b4:81:43:9f:cc:de:76: 86:ad:32:c6:7c:83:f6:b7:d6:02:a8:c4:66:64:4f: d5:1f:d4:c1:1f:f2:82:93:9b:a8:1e:d3:a0:87:f2: 48:b1:d9:5a:c3:83:a0:7d:a3:a8:d1:2e:0a:42:42: 2c:a3:89:94:81:d5:7a:08:2f:ed:23:f7:8c:bd:57: d7:45:b5:9b:97:1d:c7:5e:27:9d:cf:1f:bc:df:fa: 90:fb:0f:b7:35:a4:80:4c:68:8a:0c:2d:bd:31:ac: 23:91:fe:65:1b:7d:b6:db:6e:07:71:ac:d9:6e:50: 00:db:9e:2d:f1:6e:75:27:00:07:4e:57:64:8b:89: 25:01:b3:9c:ef:07:60:c3:27:6c:3f:39:c1:db:f9: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AD:7C:1C:99:AA:73:F3:5A:85:90:BE:AA:0D:00:D8:38:6C:6C:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/abcfb767-46b9-3ff6-b4a4-09104beb3b77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:1f:c6:75:94:c3:24:38:79:ef:b8:0d:39:20:f5:4a:f4:c1: 8b:b8:75:6f:8e:bf:fc:64:48:90:b5:49:1a:0f:71:31:49:8f: f0:74:e5:26:53:f2:59:d7:bf:20:04:c6:f4:f7:7b:2b:13:b5: 8f:af:f8:99:d6:2d:e1:ae:f6:98:d5:f9:28:1b:01:bc:df:82: cb:e1:85:a0:85:a9:97:f6:4a:d9:5b:e4:c8:c0:c0:00:80:44: a1:16:36:3c:8a:f9:c4:81:9b:18:cd:3c:39:98:2d:2a:f0:af: 3b:a5:26:12:80:ec:96:e5:59:f4:82:5a:70:cd:4c:21:39:6b: 6e:94:19:1c:cb:70:ea:a9:29:42:d0:b0:04:7d:9f:54:a8:b8: 40:16:64:51:42:f7:5d:18:51:a5:d2:fe:b6:0a:9b:4c:60:02: 9b:e0:f3:52:93:af:de:ee:0b:49:1d:af:ff:e5:16:31:e8:95: 5a:63:de:af:f2:8a:60:a2:53:e1:cb:bc:36:02:bf:2b:72:5c: 47:db:27:b7:d3:3f:7d:f5:98:c9:08:71:71:c4:2f:0f:cb:83: 35:52:d3:8a:b8:c5:ab:42:23:4c:58:1a:e9:38:e3:28:50:23: 12:6d:b0:f1:12:36:68:84:93:f7:04:ea:2d:da:11:70:2e:25: a6:59:07:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7amNoE7mfvlzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZTNhNTFmN2UtMDRkYy00OTZmLThhMTYtZTlmMzFkNTRiMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMcxxRMaQSnGv23YzbjIr7QNu92qy6zqPa50 6bKnaprVvFkpx1qMguT/ogr47ypEx9f5Me764IQel/9qb48VdXb5adUanoJzGogc ULqdUKwX0FZwSkd6euW/fInemx7ylTukghN5tgF+dxrlfyy9dbSBQ5/M3naGrTLG fIP2t9YCqMRmZE/VH9TBH/KCk5uoHtOgh/JIsdlaw4OgfaOo0S4KQkIso4mUgdV6 CC/tI/eMvVfXRbWblx3HXiedzx+83/qQ+w+3NaSATGiKDC29Mawjkf5lG322224H cazZblAA254t8W51JwAHTldki4klAbOc7wdgwydsPznB2/n/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPitfByZqnPzWoWQvqoNANg4bGzNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWJjZmI3NjctNDZiOS0z ZmY2LWI0YTQtMDkxMDRiZWIzYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL0fxnWUwyQ4ee+4DTkg9Ur0wYu4dW+Ov/xkSJC1SRoPcTFJj/B05SZT 8lnXvyAExvT3eysTtY+v+JnWLeGu9pjV+SgbAbzfgsvhhaCFqZf2Stlb5MjAwACA RKEWNjyK+cSBmxjNPDmYLSrwrzulJhKA7JblWfSCWnDNTCE5a26UGRzLcOqpKULQ sAR9n1SouEAWZFFC910YUaXS/rYKm0xgApvg81KTr97uC0kdr//lFjHolVpj3q/y imCiU+HLvDYCvytyXEfbJ7fTP331mMkIcXHELw/LgzVS04q4xatCI0xYGuk44yhQ IxJtsPESNmiEk/cE6i3aEXAuJaZZB50= -----END CERTIFICATE-----Generated at Wed Oct 29 09:21:33 2025 by rpki-client