$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c8cf4e-f02a-3060-af67-ae1b8707d322.roa File: c0c8cf4e-f02a-3060-af67-ae1b8707d322.roa (raw, json) Hash identifier: u6JaFVenb1/0zJwtD0jwJ1Jmz0NFyFnfgFr3gsYE/ZI= Subject key identifier: BB:EB:91:45:A7:5E:37:72:61:42:C4:45:A3:8B:56:B3:76:74:84:AE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DC40F72075A1C8C7643C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c8cf4e-f02a-3060-af67-ae1b8707d322.roa Signing time: Tue 26 Aug 2025 12:32:12 +0000 ROA not before: Tue 26 Aug 2025 12:32:12 +0000 ROA not after: Mon 24 Nov 2025 13:32:12 +0000 asID: 396605 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:c4:0f:72:07:5a:1c:8c:76:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:12 2025 GMT Not After : Nov 24 13:32:12 2025 GMT Subject: CN=d1ec37fc-5d4a-4872-8998-e5e97fa9b5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:1f:8f:b4:77:9b:f5:76:7f:66:87:92:a1: 6e:a9:1c:02:ad:41:0c:95:ba:19:19:9f:34:5f:01: 58:16:bf:ea:36:e6:4a:3e:4e:13:9c:8b:5a:fb:a2: 67:1f:ee:e5:95:3d:9c:dd:2a:58:f6:21:9e:6e:87: 09:f4:e1:df:6c:33:81:d8:72:9f:90:f5:0e:10:47: e2:12:6a:5a:08:67:72:ed:8e:90:d5:89:63:4e:af: bd:8e:50:68:19:47:bd:b3:09:1d:75:28:45:f0:2d: 82:20:25:17:89:6e:f0:4e:5c:19:34:87:f1:4c:bd: 91:6a:62:b2:ef:18:bd:28:21:e8:0e:5d:52:de:69: 28:f2:d2:4f:ed:9d:3d:e9:18:74:0b:a1:ec:37:d3: 9f:73:09:37:b7:f8:66:ec:e9:de:79:95:89:f9:b3: 02:a7:ed:ff:1e:4a:1a:90:2e:6c:cb:40:6a:b4:2b: ec:49:53:3d:fe:7b:53:7e:e8:cc:55:ae:c4:16:76: 5e:b1:28:e6:ca:18:85:90:25:ef:f4:bb:20:bc:01: fe:05:45:1c:01:56:7a:1d:10:07:15:28:fc:3d:03: 78:f2:d6:5e:3e:69:94:b0:5e:ad:24:50:fd:9f:45: 19:7c:68:fc:14:57:0e:38:2d:c8:62:7f:c1:49:ba: ba:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EB:91:45:A7:5E:37:72:61:42:C4:45:A3:8B:56:B3:76:74:84:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0c8cf4e-f02a-3060-af67-ae1b8707d322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:54:d8:12:20:e4:43:8d:c5:2f:f4:4e:43:8f:17:e5:ae:a4: 19:d6:d6:5e:44:f7:a4:ac:4a:22:59:4b:11:04:6f:72:1f:18: 40:38:32:7c:80:1a:0a:40:63:8a:24:64:64:86:84:07:4b:fa: 7e:dc:2d:90:0d:8f:17:fa:8f:d8:b8:73:9a:7b:eb:43:3d:31: 31:5e:4a:88:f4:70:75:0a:62:6c:63:f0:d9:e7:9f:24:e9:17: 21:99:f2:df:bd:50:e7:d8:a1:d9:6f:37:e0:5a:1d:16:c7:fb: 37:71:94:21:e0:62:a1:3a:bb:63:14:92:6d:4c:14:91:85:96: 45:22:f8:0f:8e:d9:e1:5a:e2:a4:15:a8:26:c7:77:d2:72:1b: bf:34:b7:48:23:80:ab:b7:b4:99:0a:c5:4a:09:dc:ab:fd:1e: 41:b8:d3:14:57:f8:f2:be:77:7d:d0:a8:38:da:11:24:ec:1e: 53:db:7c:09:7d:ca:ee:1b:7b:3b:f3:1c:99:13:e9:4f:6b:4b: b6:bc:33:ec:55:87:26:e3:c0:c4:9a:6d:f0:44:34:3f:15:ea: 3d:bd:ea:ae:fd:9a:05:61:f0:0d:08:7b:85:6a:19:9d:71:61: 82:01:c8:4c:d1:5b:15:f8:c3:33:84:b4:9e:e5:90:9c:5e:e2: e6:cb:da:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8DcQPcgdaHIx2Q8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxMloXDTI1MTEyNDEzMzIxMlowLzEtMCsGA1UEAxMk ZDFlYzM3ZmMtNWQ0YS00ODcyLTg5OTgtZTVlOTdmYTliNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0G4fj7R3m/V2f2aHkqFuqRwCrUEMlboZGZ80 XwFYFr/qNuZKPk4TnIta+6JnH+7llT2c3SpY9iGebocJ9OHfbDOB2HKfkPUOEEfi EmpaCGdy7Y6Q1YljTq+9jlBoGUe9swkddShF8C2CICUXiW7wTlwZNIfxTL2RamKy 7xi9KCHoDl1S3mko8tJP7Z096Rh0C6HsN9Ofcwk3t/hm7OneeZWJ+bMCp+3/Hkoa kC5sy0BqtCvsSVM9/ntTfujMVa7EFnZesSjmyhiFkCXv9LsgvAH+BUUcAVZ6HRAH FSj8PQN48tZePmmUsF6tJFD9n0UZfGj8FFcOOC3IYn/BSbq6KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvrkUWnXjdyYULERaOLVrN2dISuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzBjOGNmNGUtZjAyYS0z MDYwLWFmNjctYWUxYjg3MDdkMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlU2BIg5EONxS/0TkOPF+WupBnW1l5E96SsSiJZSxEEb3IfGEA4MnyA GgpAY4okZGSGhAdL+n7cLZANjxf6j9i4c5p760M9MTFeSoj0cHUKYmxj8NnnnyTp FyGZ8t+9UOfYodlvN+BaHRbH+zdxlCHgYqE6u2MUkm1MFJGFlkUi+A+O2eFa4qQV qCbHd9JyG780t0gjgKu3tJkKxUoJ3Kv9HkG40xRX+PK+d33QqDjaESTsHlPbfAl9 yu4bezvzHJkT6U9rS7a8M+xVhybjwMSabfBEND8V6j296q79mgVh8A0Ie4VqGZ1x YYIByEzRWxX4wzOEtJ7lkJxe4ubL2o8= -----END CERTIFICATE-----Generated at Wed Sep 10 17:53:31 2025 by rpki-client