$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1bb2a4-771e-3a59-a8a8-cd1901b390ec.roa File: ac1bb2a4-771e-3a59-a8a8-cd1901b390ec.roa (raw, json) Hash identifier: dyprtyI9hvOK1w/ep8aWFDU8eI8AkEJAgVFd3NgSDCs= Subject key identifier: DA:87:B3:CE:A4:BE:94:03:5D:36:19:A6:4A:66:F0:D4:E8:74:63:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA97B0D7C9F0D890225CAB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1bb2a4-771e-3a59-a8a8-cd1901b390ec.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 397197 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b0:d7:c9:f0:d8:90:22:5c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=df130ebf-2506-49ff-9a0b-c00a7be325c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:f5:d6:38:ee:92:88:98:c4:20:7d:9e:ca: 0b:c3:79:b5:ee:0c:2b:96:1b:02:07:58:6f:47:2a: 62:ab:9a:de:54:eb:d5:31:2e:68:db:ad:9c:a9:45: ca:b4:6f:9b:c8:77:ba:c5:4f:34:2c:02:d0:8d:95: ce:54:1b:14:2b:3a:f9:24:1e:7c:28:0e:7e:8c:e7: 6e:0d:78:a8:02:f7:fe:ed:0c:24:2f:6a:0b:53:cd: 95:7b:c3:9d:07:01:5a:46:7b:4b:28:65:59:36:ac: 1c:5f:ad:0f:4d:1b:bb:d1:43:8f:bb:4c:99:c6:c1: 85:59:ba:64:fd:4c:66:33:bb:93:a4:9f:fd:3f:8d: 4d:3c:25:a8:a1:63:cd:26:8b:57:74:d8:27:b0:0c: 07:00:3f:3b:4c:15:fb:a7:65:c9:aa:3d:9e:bd:e8: 6c:e2:ed:d1:07:8e:ce:7a:d3:a2:b7:1d:0f:7b:4e: 54:a8:75:01:63:ef:a2:e3:c4:3c:10:a4:ee:56:07: af:de:41:dd:38:d9:48:bb:a4:77:62:62:da:e1:ce: 9d:5b:1a:be:ad:f4:40:3f:e2:09:6f:87:d5:ed:7b: a0:c6:e1:7e:cc:a9:0f:9e:60:c4:fa:59:2c:69:f0: 4e:26:46:a4:7d:ba:f3:f9:6e:ca:1e:00:16:33:d3: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:87:B3:CE:A4:BE:94:03:5D:36:19:A6:4A:66:F0:D4:E8:74:63:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ac1bb2a4-771e-3a59-a8a8-cd1901b390ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ef:cb:98:57:fa:68:84:59:4a:07:28:cd:08:78:6e:c2:eb: 25:d9:ff:f0:7d:0e:a8:ab:85:9b:7e:a7:9f:c8:51:f8:f5:a7: 92:a3:a1:eb:6f:58:21:eb:26:a5:f3:07:67:ea:96:32:41:63: a4:74:c7:55:24:0d:99:cf:50:49:be:7b:ee:93:84:5a:45:51: a7:82:85:eb:12:3e:c5:fe:95:90:98:94:47:f8:4d:62:12:89: 0d:a1:13:fc:3d:03:93:2b:22:51:c6:9c:9e:97:5d:14:63:36: c1:6b:9c:b8:64:d4:9f:25:81:b6:34:aa:04:5a:87:8b:a8:ea: 69:70:c0:5b:49:4b:a9:d0:77:26:cd:23:4d:7a:e2:fe:02:db: 36:42:89:da:f9:64:e3:20:02:71:47:be:f5:9a:2b:b0:22:31: 66:28:0b:c0:74:91:79:12:bc:c9:0b:37:a3:3d:6c:f4:0d:3f: da:51:d4:49:18:62:67:77:12:09:29:fe:41:ea:0a:be:27:d0: dd:b8:73:d5:29:83:89:e1:f1:e3:94:72:40:b3:4c:95:b2:32: eb:69:53:cc:7c:1c:a9:90:e6:e3:1e:0f:16:dc:3b:39:7c:d3: 54:68:be:3a:fd:1e:ca:7f:d8:2f:40:48:b0:9c:aa:d3:bd:bc: a6:2d:bf:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7DXyfDYkCJcqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZGYxMzBlYmYtMjUwNi00OWZmLTlhMGItYzAwYTdiZTMyNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2j11jjukoiYxCB9nsoLw3m17gwrlhsCB1hv Rypiq5reVOvVMS5o262cqUXKtG+byHe6xU80LALQjZXOVBsUKzr5JB58KA5+jOdu DXioAvf+7QwkL2oLU82Ve8OdBwFaRntLKGVZNqwcX60PTRu70UOPu0yZxsGFWbpk /UxmM7uTpJ/9P41NPCWooWPNJotXdNgnsAwHAD87TBX7p2XJqj2evehs4u3RB47O etOitx0Pe05UqHUBY++i48Q8EKTuVgev3kHdONlIu6R3YmLa4c6dWxq+rfRAP+IJ b4fV7XugxuF+zKkPnmDE+lksafBOJkakfbrz+W7KHgAWM9MFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqHs86kvpQDXTYZpkpm8NTodGNVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWMxYmIyYTQtNzcxZS0z YTU5LWE4YTgtY2QxOTAxYjM5MGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErvy5hX+miEWUoHKM0IeG7C6yXZ//B9DqirhZt+p5/IUfj1p5Kjoetv WCHrJqXzB2fqljJBY6R0x1UkDZnPUEm+e+6ThFpFUaeChesSPsX+lZCYlEf4TWIS iQ2hE/w9A5MrIlHGnJ6XXRRjNsFrnLhk1J8lgbY0qgRah4uo6mlwwFtJS6nQdybN I0164v4C2zZCidr5ZOMgAnFHvvWaK7AiMWYoC8B0kXkSvMkLN6M9bPQNP9pR1EkY Ymd3Egkp/kHqCr4n0N24c9Upg4nh8eOUckCzTJWyMutpU8x8HKmQ5uMeDxbcOzl8 01Rovjr9Hsp/2C9ASLCcqtO9vKYtv3Y= -----END CERTIFICATE-----Generated at Wed Oct 29 09:07:59 2025 by rpki-client