$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32a548f-9b46-3dce-af65-24b2ed102928.roa File: d32a548f-9b46-3dce-af65-24b2ed102928.roa (raw, json) Hash identifier: gt6Io2U2fldvblQivegY5uN+eNHpYIFXNBFBI0tuxjA= Subject key identifier: 72:B9:D0:5E:19:3A:36:06:C9:14:21:1D:E2:A8:32:FE:37:F7:D2:8A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BAA97B28404FB5E933DDCAE60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32a548f-9b46-3dce-af65-24b2ed102928.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 396591 IP address blocks: 192.42.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:b2:84:04:fb:5e:93:3d:dc:ae:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=dd1b4890-39e7-4362-ba65-58a9271abb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a3:ea:07:7a:17:31:24:2c:00:67:7b:c4:ac: 4e:32:00:cc:fc:82:a8:81:8e:c1:9a:91:5f:97:62: 16:11:7d:44:06:2e:0d:9d:68:f0:76:cc:17:f3:e0: 86:bc:7b:8d:10:07:08:36:2a:d5:64:24:b4:16:23: c3:b8:8c:4f:3d:90:af:57:11:25:12:d0:ea:7a:9c: da:52:71:55:70:57:b7:07:df:87:a9:39:c6:8e:85: 90:3a:72:ea:24:d7:b9:15:b6:1b:04:99:d4:b3:8c: 33:55:79:c6:4a:ac:79:5a:d3:cc:e7:79:d9:3f:19: e5:58:7e:a1:dd:12:19:92:c1:e4:7c:92:d9:fa:a2: 6d:a8:4d:8d:cf:d1:fa:98:1a:48:b0:77:04:f9:52: 75:0c:87:0d:21:27:de:ab:b2:5d:99:dd:c3:e5:ff: b1:c5:87:5d:4a:d0:8e:b9:42:f9:91:ec:7c:ff:2a: a7:f8:4e:3a:c7:67:af:89:7d:53:bb:2e:1d:03:2d: 03:64:5b:82:8a:b7:48:ee:3e:d3:d6:a9:7d:4a:c0: 0b:41:70:e0:5a:6e:4d:74:2d:e3:9d:3a:6c:8c:86: 88:82:cc:f4:4a:c9:58:76:42:51:1c:7e:f3:cd:20: f9:76:83:d1:3e:e7:0b:16:e5:8c:f3:81:14:93:2f: d2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:B9:D0:5E:19:3A:36:06:C9:14:21:1D:E2:A8:32:FE:37:F7:D2:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d32a548f-9b46-3dce-af65-24b2ed102928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:82:a5:11:33:4a:29:dc:99:a3:e3:04:f3:98:aa:cc:1f:b6: a2:92:0d:a4:14:41:45:a4:90:5c:af:1e:15:a9:eb:73:8e:cc: 58:e5:d8:86:11:40:6b:f3:35:0f:f3:7d:0b:ef:9d:19:57:be: c0:f8:e0:d7:31:ed:8e:7b:69:65:b2:e0:6e:ee:a8:14:83:4c: 49:54:53:2c:1a:c3:b0:bd:0e:4c:10:00:16:ad:9d:f2:8a:e6: 85:1b:68:6c:e6:aa:3b:bd:d0:fc:eb:d3:c9:9e:bd:15:e6:a4: cf:7f:56:f4:39:d4:4d:08:52:e3:86:5f:97:e2:0a:a9:e4:0a: 36:77:84:e9:47:65:97:3c:b7:b8:7c:bd:52:69:18:6d:b6:1e: 6e:40:58:33:70:58:38:38:de:3c:ca:e7:f9:98:84:1c:76:63: e3:72:b9:da:53:6c:09:ec:ce:7c:16:7b:c6:99:96:33:5b:7a: d3:3e:e2:64:76:f2:73:ed:19:f4:39:fd:2d:07:90:0e:ab:64: 89:4a:ba:89:87:e2:24:84:64:21:dc:49:15:63:61:1b:79:7b: ca:8e:ca:40:36:55:1d:e8:49:5f:44:f2:fd:39:3e:e1:28:e8: ea:ed:f0:80:74:d1:02:76:ec:7b:c0:f5:ac:48:02:e6:20:97: 8f:e4:c8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7KEBPtekz3crmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ZGQxYjQ4OTAtMzllNy00MzYyLWJhNjUtNThhOTI3MWFiYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6PqB3oXMSQsAGd7xKxOMgDM/IKogY7BmpFf l2IWEX1EBi4NnWjwdswX8+CGvHuNEAcINirVZCS0FiPDuIxPPZCvVxElEtDqepza UnFVcFe3B9+HqTnGjoWQOnLqJNe5FbYbBJnUs4wzVXnGSqx5WtPM53nZPxnlWH6h 3RIZksHkfJLZ+qJtqE2Nz9H6mBpIsHcE+VJ1DIcNISfeq7Jdmd3D5f+xxYddStCO uUL5kex8/yqn+E46x2eviX1Tuy4dAy0DZFuCirdI7j7T1ql9SsALQXDgWm5NdC3j nTpsjIaIgsz0SslYdkJRHH7zzSD5doPRPucLFuWM84EUky/SwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK50F4ZOjYGyRQhHeKoMv4399KKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDMyYTU0OGYtOWI0Ni0z ZGNlLWFmNjUtMjRiMmVkMTAyOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKeCpREzSincmaPjBPOYqswftqKSDaQUQUWkkFyvHhWp63OOzFjl2IYR QGvzNQ/zfQvvnRlXvsD44Ncx7Y57aWWy4G7uqBSDTElUUywaw7C9DkwQABatnfKK 5oUbaGzmqju90Pzr08mevRXmpM9/VvQ51E0IUuOGX5fiCqnkCjZ3hOlHZZc8t7h8 vVJpGG22Hm5AWDNwWDg43jzK5/mYhBx2Y+NyudpTbAnsznwWe8aZljNbetM+4mR2 8nPtGfQ5/S0HkA6rZIlKuomH4iSEZCHcSRVjYRt5e8qOykA2VR3oSV9E8v05PuEo 6Ort8IB00QJ27HvA9axIAuYgl4/kyCM= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:14 2025 by rpki-client