$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad76a798-8a71-35f2-82c1-88a655a17ec4.roa File: ad76a798-8a71-35f2-82c1-88a655a17ec4.roa (raw, json) Hash identifier: Y47Uo9jwkiZd++5I4jl1gGgivA87pwMh7eUIkEkdc3A= Subject key identifier: EA:22:95:A2:F5:74:40:0B:66:A5:5C:56:0C:AA:02:92:21:59:A6:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F5276CD0298489283BECD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad76a798-8a71-35f2-82c1-88a655a17ec4.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 396726 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:76:cd:02:98:48:92:83:be:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=59d6ee57-d41a-4788-9f93-0b6a73147af9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1a:90:db:cf:bd:0b:6a:55:7b:48:7e:53:09: cd:7c:5b:0e:97:57:66:b1:2b:25:ce:8d:15:48:bc: 36:08:dd:c0:f0:2d:c8:df:5f:dd:fa:21:52:0d:66: 8d:21:63:b3:5b:63:88:5a:d1:08:1e:f9:b8:60:82: 0e:0b:67:c2:9a:c0:82:b6:3e:5e:c5:7c:c4:d9:4b: a3:51:fe:f1:1a:06:39:2a:2a:a1:93:08:eb:3b:ee: f2:66:95:37:ef:07:d1:5c:3e:31:60:07:c9:5d:d0: 12:f4:60:dd:1e:ea:0f:44:d8:4a:13:79:29:66:17: 32:39:37:a1:7b:8e:80:ed:c8:98:2b:95:1c:4c:8c: 07:d4:08:e4:c4:b9:a6:8e:3f:68:54:ac:82:c6:98: 5b:20:fc:33:2f:b4:f1:1b:12:ca:ae:7c:cf:86:1b: 94:2a:37:68:85:40:78:a6:83:c3:cf:ce:1b:98:06: 5c:da:26:b7:d0:21:e7:e1:4b:be:94:0c:7d:bc:53: 53:6e:4c:a5:68:bc:d7:62:b1:f5:e1:dc:6f:2d:06: 30:8d:cf:82:76:a4:c4:58:d9:6e:6d:1e:65:a9:a1: 1e:84:fc:64:27:fa:d1:16:0c:28:c1:cc:bc:68:9d: d1:32:a9:ec:50:aa:56:0c:ac:7c:40:8e:71:be:57: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:22:95:A2:F5:74:40:0B:66:A5:5C:56:0C:AA:02:92:21:59:A6:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad76a798-8a71-35f2-82c1-88a655a17ec4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e5:b3:e2:f5:6f:c7:25:79:86:49:cb:ee:7b:3d:9b:17:67: 1d:e1:b1:9a:db:56:7c:fe:61:ef:0e:6d:ff:5e:2c:67:38:c5: 5d:b7:77:3c:13:7c:53:1a:cf:a6:24:3a:fb:d2:bc:5a:ed:16: d0:8e:70:b1:0d:0c:b5:56:d9:b1:e7:5d:86:95:c6:f0:07:93: 11:f5:0c:f1:df:a7:32:7d:e9:f0:39:c0:26:1f:a3:fa:b5:a0: c9:fc:e0:66:43:eb:5c:c0:c4:cf:fc:5a:25:42:35:a6:ca:3f: fd:b8:47:12:ed:97:80:c1:02:32:99:58:ea:54:54:cf:4d:6b: be:90:f2:98:b4:bb:4c:2e:11:54:80:d1:76:17:e5:c5:c4:fc: b0:6f:be:e0:75:44:19:5a:64:29:0b:fe:dc:4f:1f:f2:30:27: 01:7c:68:80:dd:df:23:e6:86:93:e6:eb:9d:92:94:23:51:1f: c7:d5:a2:e6:a3:b6:58:4d:1d:7b:31:9f:5e:40:3a:d9:36:c8: ab:cf:b2:27:c7:cd:86:e9:17:c0:5b:30:7d:0c:b7:c7:bb:56: ce:8f:e6:32:d2:11:0a:bc:fb:60:1c:47:3e:55:7a:3a:71:9b: 7f:99:ce:b2:c1:1d:76:65:d8:6e:2c:5c:fe:be:f4:6a:36:f1: 9f:c9:c1:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UnbNAphIkoO+zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk NTlkNmVlNTctZDQxYS00Nzg4LTlmOTMtMGI2YTczMTQ3YWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhqQ28+9C2pVe0h+UwnNfFsOl1dmsSslzo0V SLw2CN3A8C3I31/d+iFSDWaNIWOzW2OIWtEIHvm4YIIOC2fCmsCCtj5exXzE2Uuj Uf7xGgY5KiqhkwjrO+7yZpU37wfRXD4xYAfJXdAS9GDdHuoPRNhKE3kpZhcyOTeh e46A7ciYK5UcTIwH1AjkxLmmjj9oVKyCxphbIPwzL7TxGxLKrnzPhhuUKjdohUB4 poPDz84bmAZc2ia30CHn4Uu+lAx9vFNTbkylaLzXYrH14dxvLQYwjc+CdqTEWNlu bR5lqaEehPxkJ/rRFgwowcy8aJ3RMqnsUKpWDKx8QI5xvldOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoilaL1dEALZqVcVgyqApIhWaZVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ3NmE3OTgtOGE3MS0z NWYyLTgyYzEtODhhNjU1YTE3ZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3ls+L1b8cleYZJy+57PZsXZx3hsZrbVnz+Ye8Obf9eLGc4xV23dzwT fFMaz6YkOvvSvFrtFtCOcLENDLVW2bHnXYaVxvAHkxH1DPHfpzJ96fA5wCYfo/q1 oMn84GZD61zAxM/8WiVCNabKP/24RxLtl4DBAjKZWOpUVM9Na76Q8pi0u0wuEVSA 0XYX5cXE/LBvvuB1RBlaZCkL/txPH/IwJwF8aIDd3yPmhpPm652SlCNRH8fVouaj tlhNHXsxn15AOtk2yKvPsifHzYbpF8BbMH0Mt8e7Vs6P5jLSEQq8+2AcRz5Vejpx m3+ZzrLBHXZl2G4sXP6+9Go28Z/Jwdw= -----END CERTIFICATE-----Generated at Wed Oct 29 09:20:33 2025 by rpki-client