$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf37cd22-bd35-38e1-9b74-974b84668814.roa File: bf37cd22-bd35-38e1-9b74-974b84668814.roa (raw, json) Hash identifier: IlR3FUSmAiRiWAyXqsMP/WtpTp5/RZywt6D/zkO98G8= Subject key identifier: 8B:03:FB:F3:D5:92:60:3A:4D:7B:31:26:F8:95:7C:B2:05:33:67:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B7F526C39BC5F822E8F74DE80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf37cd22-bd35-38e1-9b74-974b84668814.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 397194 IP address blocks: 192.58.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:6c:39:bc:5f:82:2e:8f:74:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=3fc0255c-b2ed-4b8f-b905-5b17a3179767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fe:6e:35:8a:ae:d1:a1:83:fa:67:71:4a:eb: 79:91:86:ed:4e:4e:61:ed:ba:de:df:39:0d:ef:eb: 30:99:88:04:da:f9:f7:6c:66:43:b7:06:a1:38:a6: 5a:be:d7:44:57:fa:31:47:7c:1a:13:a6:b6:cb:1a: 88:f5:48:53:38:61:3a:ff:4b:56:bf:4a:d3:11:85: 37:5c:d9:18:aa:46:a4:73:ed:ee:0c:85:25:b4:6c: eb:b1:72:21:d2:de:31:2f:ef:bb:7a:5e:fe:b8:60: 92:8a:7d:20:63:55:f9:e1:93:4f:73:3e:1a:34:2f: 6a:62:36:e9:5d:bf:d0:ca:4f:76:f2:55:06:87:ef: b2:da:ab:35:97:8f:da:8e:0f:9c:20:07:f3:12:13: e0:bd:dd:24:6e:b3:f1:1c:c4:f8:95:8b:08:65:4f: b7:4a:fa:9e:1d:bb:07:34:05:5a:d7:ae:0d:52:b3: 45:f2:f5:84:1d:6e:57:da:ca:d8:41:20:51:bc:3e: 3e:6d:1e:03:e9:59:f7:5d:42:31:93:da:2d:a4:47: e1:c4:85:de:13:ae:7a:3c:b3:1b:e4:71:8a:d1:50: a3:b5:51:a9:e9:f9:00:d6:29:7f:87:3a:f7:22:09: f5:25:d5:3b:de:ca:db:42:44:97:25:e9:0a:3a:95: fb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:03:FB:F3:D5:92:60:3A:4D:7B:31:26:F8:95:7C:B2:05:33:67:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf37cd22-bd35-38e1-9b74-974b84668814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e0:50:5c:30:84:69:5c:d3:b2:4f:73:1e:72:a0:51:d4:22: 89:2c:e7:84:2d:f7:a7:44:b2:f9:d0:03:37:c8:41:08:30:b3: 43:87:b4:42:f4:a1:4d:18:0b:91:4f:71:de:c9:08:40:67:a5: 14:87:14:ab:ad:4a:21:e0:d0:18:cd:bb:24:97:36:5c:bb:b0: d3:e9:0a:ad:7a:68:6a:bd:5c:fb:15:d9:75:42:58:64:c0:9d: 40:a7:5e:31:29:14:4b:6d:48:03:f3:df:a0:ce:a6:b4:44:fe: 9a:10:71:f6:fb:95:7c:b7:3b:50:aa:46:67:a6:43:22:ac:e2: 64:08:75:71:29:84:08:e7:ac:d5:8c:93:13:a1:22:36:97:81: 87:5b:89:4f:03:fa:26:74:e2:85:b0:ef:9a:b0:4e:a4:90:7d: 1c:29:6a:8a:2b:7e:9b:04:bb:bc:c0:68:2a:3f:77:b2:f3:9a: 96:bd:bb:2e:1a:10:ea:73:76:1a:7b:87:30:40:6f:5c:fd:d5: aa:b0:12:67:12:62:97:45:69:0f:76:c8:b8:78:da:ff:e5:9d: 99:15:c6:c3:e4:21:da:64:68:53:7f:da:43:e9:7b:cd:2a:b0: f4:cf:36:3f:60:81:9c:b1:93:88:ba:d0:a3:6f:e7:d2:5a:a3: 8a:6b:2b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/Umw5vF+CLo903oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk M2ZjMDI1NWMtYjJlZC00YjhmLWI5MDUtNWIxN2EzMTc5NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf5uNYqu0aGD+mdxSut5kYbtTk5h7bre3zkN 7+swmYgE2vn3bGZDtwahOKZavtdEV/oxR3waE6a2yxqI9UhTOGE6/0tWv0rTEYU3 XNkYqkakc+3uDIUltGzrsXIh0t4xL++7el7+uGCSin0gY1X54ZNPcz4aNC9qYjbp Xb/Qyk928lUGh++y2qs1l4/ajg+cIAfzEhPgvd0kbrPxHMT4lYsIZU+3SvqeHbsH NAVa164NUrNF8vWEHW5X2srYQSBRvD4+bR4D6Vn3XUIxk9otpEfhxIXeE656PLMb 5HGK0VCjtVGp6fkA1il/hzr3Ign1JdU73srbQkSXJekKOpX7DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsD+/PVkmA6TXsxJviVfLIFM2c3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYzN2NkMjItYmQzNS0z OGUxLTliNzQtOTc0Yjg0NjY4ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7gUFwwhGlc07JPcx5yoFHUIoks54Qt96dEsvnQAzfIQQgws0OHtEL0 oU0YC5FPcd7JCEBnpRSHFKutSiHg0BjNuySXNly7sNPpCq16aGq9XPsV2XVCWGTA nUCnXjEpFEttSAPz36DOprRE/poQcfb7lXy3O1CqRmemQyKs4mQIdXEphAjnrNWM kxOhIjaXgYdbiU8D+iZ04oWw75qwTqSQfRwpaoorfpsEu7zAaCo/d7Lzmpa9uy4a EOpzdhp7hzBAb1z91aqwEmcSYpdFaQ92yLh42v/lnZkVxsPkIdpkaFN/2kPpe80q sPTPNj9ggZyxk4i60KNv59Jao4prK1w= -----END CERTIFICATE-----Generated at Wed Oct 29 09:21:38 2025 by rpki-client