$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c337f1e9-c785-37d5-bd4c-dae35a25411d.roa File: c337f1e9-c785-37d5-bd4c-dae35a25411d.roa (raw, json) Hash identifier: RpGEFsUUtmb7kyRI2Uxx0ZhJf7CbYvW9CCQl78tM2J0= Subject key identifier: 92:36:CE:B0:FD:59:75:F9:98:27:4F:2A:F2:DA:5E:85:4B:D5:86:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B01A847DECFE586114A98DD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c337f1e9-c785-37d5-bd4c-dae35a25411d.roa Signing time: Thu 28 Aug 2025 12:42:34 +0000 ROA not before: Thu 28 Aug 2025 12:42:34 +0000 ROA not after: Wed 26 Nov 2025 13:42:34 +0000 asID: 36624 IP address blocks: 192.48.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:01:a8:47:de:cf:e5:86:11:4a:98:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 28 12:42:34 2025 GMT Not After : Nov 26 13:42:34 2025 GMT Subject: CN=ee625da3-6387-4f5d-8781-6a15997f20ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:2f:0d:68:10:eb:d3:cb:66:fa:b9:53:c7: 3b:8c:bd:20:33:1f:25:89:81:71:2f:63:22:05:f4: b7:6a:ac:c9:ac:35:48:4b:5e:d0:22:60:17:28:7c: 20:1e:dd:c3:d3:b3:68:23:7e:54:75:53:0b:10:81: 62:68:f4:e7:e7:00:3b:75:14:0d:01:63:12:4d:ba: 90:6b:38:da:f4:27:c3:ab:d6:53:fd:23:a0:b7:42: 74:89:ee:6f:2a:a7:e3:67:d8:ea:23:14:bf:f0:d4: 51:9c:3d:98:b4:a0:60:9d:11:6c:70:43:20:0e:0f: 60:19:9d:ff:4e:4c:a2:6f:1e:27:17:38:61:f9:ac: f1:10:31:e2:17:d4:24:93:71:30:a9:b7:47:37:48: 14:9d:c7:d2:6b:9f:82:ea:06:26:24:97:24:18:05: 72:31:16:4a:2e:c4:72:5e:58:99:77:53:45:4a:e7: 47:ed:55:1a:2f:31:a8:dc:b6:3b:e6:53:79:ae:e5: 29:8d:07:53:47:37:6f:12:85:89:32:08:95:e9:37: 26:27:e3:89:98:44:d7:40:ed:77:ca:5a:20:3f:59: d1:c3:20:f9:08:78:c0:ea:1a:79:14:6b:ef:33:5a: d4:2b:73:83:ff:25:c1:1e:06:c7:30:63:f0:bc:6c: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:36:CE:B0:FD:59:75:F9:98:27:4F:2A:F2:DA:5E:85:4B:D5:86:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c337f1e9-c785-37d5-bd4c-dae35a25411d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.48.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:04:61:82:5c:f1:83:1a:36:1a:41:19:b0:98:a2:c4:51:19: 81:af:1f:5d:75:99:c6:dc:9e:ed:e2:d3:4b:5d:ee:ac:a0:d7: 71:8c:8e:d4:88:f4:11:de:dd:9b:0d:57:0e:15:8f:de:9e:5f: ea:4b:cc:d6:87:96:5b:13:2f:60:c2:7c:e1:45:7c:88:64:b7: 7f:48:ad:f5:ea:04:70:a6:c1:07:40:9f:e7:e1:f3:14:4e:35: 16:a3:b9:a7:a9:0a:be:d4:c7:e9:86:10:f7:fe:fe:38:8b:a1: 73:fa:c1:73:3e:36:d0:ae:dc:ed:0b:29:bd:6b:e3:d5:f8:48: 26:b5:d4:68:f5:e6:78:1f:84:27:10:fb:bd:67:89:7a:05:79: 2a:9a:91:f0:9d:da:d9:29:7e:ca:89:d4:d6:95:99:39:69:c5: e8:d8:ad:4f:33:9d:d9:be:e0:98:98:aa:a1:7a:f9:a6:bf:2e: b6:78:4a:f5:02:97:8f:1c:72:90:bc:6f:d0:c1:ab:d3:6e:1d: da:74:3a:f5:8c:b2:1a:41:63:04:0f:d4:c2:e9:0a:df:ab:6b: 30:64:c1:3e:de:fb:b6:27:50:e8:fe:aa:44:e4:1a:a7:bc:ce: fe:8b:b3:f4:e8:27:ac:e4:b3:cd:53:dd:e7:06:89:3e:14:bd: 0c:19:cc:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsBqEfez+WGEUqY3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyODEyNDIzNFoXDTI1MTEyNjEzNDIzNFowLzEtMCsGA1UEAxMk ZWU2MjVkYTMtNjM4Ny00ZjVkLTg3ODEtNmExNTk5N2YyMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdkvDWgQ69PLZvq5U8c7jL0gMx8liYFxL2Mi BfS3aqzJrDVIS17QImAXKHwgHt3D07NoI35UdVMLEIFiaPTn5wA7dRQNAWMSTbqQ azja9CfDq9ZT/SOgt0J0ie5vKqfjZ9jqIxS/8NRRnD2YtKBgnRFscEMgDg9gGZ3/ Tkyibx4nFzhh+azxEDHiF9Qkk3EwqbdHN0gUncfSa5+C6gYmJJckGAVyMRZKLsRy XliZd1NFSudH7VUaLzGo3LY75lN5ruUpjQdTRzdvEoWJMgiV6TcmJ+OJmETXQO13 ylogP1nRwyD5CHjA6hp5FGvvM1rUK3OD/yXBHgbHMGPwvGwklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJI2zrD9WXX5mCdPKvLaXoVL1YYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzMzN2YxZTktYzc4NS0z N2Q1LWJkNGMtZGFlMzVhMjU0MTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDBPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK8EYYJc8YMaNhpBGbCYosRRGYGvH111mcbcnu3i00td7qyg13GMjtSI 9BHe3ZsNVw4Vj96eX+pLzNaHllsTL2DCfOFFfIhkt39IrfXqBHCmwQdAn+fh8xRO NRajuaepCr7Ux+mGEPf+/jiLoXP6wXM+NtCu3O0LKb1r49X4SCa11Gj15ngfhCcQ +71niXoFeSqakfCd2tkpfsqJ1NaVmTlpxejYrU8zndm+4JiYqqF6+aa/LrZ4SvUC l48ccpC8b9DBq9NuHdp0OvWMshpBYwQP1MLpCt+razBkwT7e+7YnUOj+qkTkGqe8 zv6Ls/ToJ6zks81T3ecGiT4UvQwZzLc= -----END CERTIFICATE-----Generated at Wed Sep 10 17:49:54 2025 by rpki-client