$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc6139aa-624d-37e0-b47b-229b813dd0e8.roa File: cc6139aa-624d-37e0-b47b-229b813dd0e8.roa (raw, json) Hash identifier: OsI+SIlCNjaMO92E3wnxCXCF0AWQJtLqCsxtDm8WY1s= Subject key identifier: 3D:FC:E9:0A:8F:BA:03:D2:08:9B:33:73:56:F8:74:01:3D:E6:7B:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AFC0DCC39CC9E57454D579D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc6139aa-624d-37e0-b47b-229b813dd0e8.roa Signing time: Tue 26 Aug 2025 12:32:16 +0000 ROA not before: Tue 26 Aug 2025 12:32:16 +0000 ROA not after: Mon 24 Nov 2025 13:32:16 +0000 asID: 36624 IP address blocks: 192.54.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:0d:cc:39:cc:9e:57:45:4d:57:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 26 12:32:16 2025 GMT Not After : Nov 24 13:32:16 2025 GMT Subject: CN=0036b9f4-a2cb-44ff-a6d5-0f5c02b7cc70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bb:eb:d1:dc:8a:85:69:8d:6d:3c:a7:6a:04: 0b:dd:1e:9e:02:b9:e6:ae:56:5e:46:12:68:a9:49: 8d:24:0b:b9:e2:9d:47:36:9d:85:54:a9:7b:de:05: f8:19:56:a6:9b:98:83:29:61:b6:48:42:59:95:29: 5a:e1:22:d9:13:58:b3:5f:9c:ea:e4:50:b2:1c:cb: 02:45:3e:e9:ac:be:ba:4a:f7:86:54:7f:f7:3a:13: 54:61:48:21:22:0d:16:21:88:58:f9:7f:b0:ed:5d: 55:93:10:a1:6b:b6:a1:64:77:12:57:bb:13:54:5a: 5b:bd:8e:bf:5d:9a:de:02:8d:45:3c:9b:4d:67:1f: 76:09:24:11:33:ac:82:22:27:95:cf:52:ff:7f:49: c3:84:ac:49:a6:0e:82:28:01:b7:85:fd:b9:51:c0: d0:cc:2b:4f:e6:e8:2f:f1:b4:86:9d:32:09:27:fe: df:f7:97:3e:52:57:c5:e0:f9:99:35:2c:6a:9b:b2: df:08:3f:54:8b:c8:7b:b3:e4:52:f3:8c:ae:d9:6e: 75:97:92:8c:e8:f8:30:d7:f8:02:05:16:d6:3a:99: e1:36:15:fa:a4:87:c0:ca:b5:bc:e8:51:45:00:3e: a5:70:3d:cc:22:f5:37:11:57:1e:bf:c1:9a:4b:1e: 22:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FC:E9:0A:8F:BA:03:D2:08:9B:33:73:56:F8:74:01:3D:E6:7B:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cc6139aa-624d-37e0-b47b-229b813dd0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:61:44:51:b7:94:a8:30:6c:5e:06:8f:d7:10:a1:f4:cd:78: 69:7b:f7:56:7f:59:a9:95:76:58:f3:40:bd:4f:6c:c8:40:29: 82:c8:5f:83:9b:40:2e:f6:04:38:03:23:49:0b:1a:e8:3a:10: 30:26:12:6f:7d:22:6d:21:03:83:30:cd:c7:ab:eb:1d:57:c8: b4:0a:c9:57:ec:21:5e:ac:d4:87:98:84:7d:82:7b:25:19:ac: bd:da:e0:a6:53:71:2e:ed:ea:9d:33:5e:58:fa:c5:bd:d3:47: 17:45:2a:5c:51:73:a3:cb:2a:37:82:9d:29:83:e5:bf:5f:78: 37:95:35:0c:b4:e4:3f:fd:32:40:dc:df:2e:93:0a:4b:58:81: 01:d4:d6:a6:14:9d:8d:18:cb:9c:b2:dc:2b:18:2d:d9:3e:ab: fc:29:6a:9f:e9:0c:74:ee:5d:c9:2e:c2:2c:10:27:c6:2d:15: af:8e:5f:9c:6b:31:fe:7e:77:8a:8d:bb:8d:17:7e:e9:3f:d4: 87:d6:41:af:e3:97:11:d9:5a:c9:2d:2f:f3:1b:fa:72:af:92: 7d:11:06:1d:74:78:87:9f:d2:51:20:a7:cd:53:02:95:7d:de: c8:1f:aa:fb:b0:f6:7b:5e:60:ae:4e:8a:71:29:e1:8a:96:d4: 80:07:1d:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8Dcw5zJ5XRU1XnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyNjEyMzIxNloXDTI1MTEyNDEzMzIxNlowLzEtMCsGA1UEAxMk MDAzNmI5ZjQtYTJjYi00NGZmLWE2ZDUtMGY1YzAyYjdjYzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7vr0dyKhWmNbTynagQL3R6eArnmrlZeRhJo qUmNJAu54p1HNp2FVKl73gX4GVamm5iDKWG2SEJZlSla4SLZE1izX5zq5FCyHMsC RT7prL66SveGVH/3OhNUYUghIg0WIYhY+X+w7V1VkxCha7ahZHcSV7sTVFpbvY6/ XZreAo1FPJtNZx92CSQRM6yCIieVz1L/f0nDhKxJpg6CKAG3hf25UcDQzCtP5ugv 8bSGnTIJJ/7f95c+UlfF4PmZNSxqm7LfCD9Ui8h7s+RS84yu2W51l5KM6Pgw1/gC BRbWOpnhNhX6pIfAyrW86FFFAD6lcD3MIvU3EVcev8GaSx4ikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD386QqPugPSCJszc1b4dAE95nusMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2M2MTM5YWEtNjI0ZC0z N2UwLWI0N2ItMjI5YjgxM2RkMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRhRFG3lKgwbF4Gj9cQofTNeGl791Z/WamVdljzQL1PbMhAKYLIX4Ob QC72BDgDI0kLGug6EDAmEm99Im0hA4Mwzcer6x1XyLQKyVfsIV6s1IeYhH2CeyUZ rL3a4KZTcS7t6p0zXlj6xb3TRxdFKlxRc6PLKjeCnSmD5b9feDeVNQy05D/9MkDc 3y6TCktYgQHU1qYUnY0Yy5yy3CsYLdk+q/wpap/pDHTuXckuwiwQJ8YtFa+OX5xr Mf5+d4qNu40Xfuk/1IfWQa/jlxHZWsktL/Mb+nKvkn0RBh10eIef0lEgp81TApV9 3sgfqvuw9nteYK5OinEp4YqW1IAHHVg= -----END CERTIFICATE-----Generated at Wed Sep 10 20:48:44 2025 by rpki-client