$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f14d83e1-6c60-3eb0-afc2-8e714f6e2d2c.roa File: f14d83e1-6c60-3eb0-afc2-8e714f6e2d2c.roa (raw, json) Hash identifier: z2jdynolhZEHG1LSkwlZsodNd/J7d6TRW8UNqNEch7I= Subject key identifier: 69:C6:55:3B:9E:58:7F:E0:29:67:23:4F:CA:B9:76:4B:E3:AF:42:A4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584ACF71146F3C5A73A68C013E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f14d83e1-6c60-3eb0-afc2-8e714f6e2d2c.roa Signing time: Sun 10 Aug 2025 13:00:41 +0000 ROA not before: Sun 10 Aug 2025 13:00:41 +0000 ROA not after: Sat 08 Nov 2025 14:00:41 +0000 asID: 36625 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cf:71:14:6f:3c:5a:73:a6:8c:01:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 10 13:00:41 2025 GMT Not After : Nov 8 14:00:41 2025 GMT Subject: CN=2dce3e82-eb77-4dab-bce0-0a1065e5c69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:73:10:a5:ed:5d:aa:06:eb:1d:d1:d1:64: e7:98:c2:57:09:73:68:f5:6d:64:eb:8f:91:ce:f1: c7:5d:15:ca:25:39:1c:96:97:d3:74:a4:37:37:8e: 41:ef:80:f4:fc:0b:6d:11:19:40:35:fb:1e:f4:45: 3f:80:f2:08:6e:e0:67:86:60:b9:d1:08:11:ee:45: 3c:6a:c4:c0:9c:79:ea:ac:da:0b:3d:9b:14:cc:b6: 2e:5e:68:b6:56:95:7f:70:a5:d8:79:66:be:56:b0: f1:17:e6:69:61:71:61:12:6a:b0:b0:5e:c0:94:44: 34:27:dc:f5:56:a1:8f:b6:ae:e9:1f:80:bf:26:d6: e6:05:62:ee:47:35:17:19:ad:2b:20:02:6f:b8:20: a1:b0:43:1b:5f:04:c4:8f:2c:16:43:92:b6:49:11: 45:8a:2a:8f:95:52:1b:20:5e:42:52:18:03:79:4c: 93:2c:65:cf:c5:bf:3c:e8:8e:96:b8:89:e9:97:30: 18:e9:21:42:90:68:b7:ee:aa:df:9d:be:b5:c8:97: bb:93:d8:29:44:25:a7:14:db:97:9b:5a:a7:d6:55: 37:b3:13:99:ef:34:fa:f0:ca:dc:b2:09:05:22:16: 45:58:b7:54:02:cd:44:c7:24:7e:68:61:76:b7:39: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C6:55:3B:9E:58:7F:E0:29:67:23:4F:CA:B9:76:4B:E3:AF:42:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f14d83e1-6c60-3eb0-afc2-8e714f6e2d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:6e:cc:3f:00:90:1e:d9:a6:6b:c9:7d:fe:e8:53:13:94:4d: 94:37:29:37:47:c4:ac:8f:70:d1:b9:88:25:82:26:27:6c:4c: 39:db:79:87:e2:b1:10:36:08:91:21:ad:47:1b:2b:9f:ae:1a: 6f:63:08:46:c5:29:54:fc:fe:36:10:c5:51:59:ac:ec:4b:fb: f2:6c:f2:08:5f:ee:25:6d:3f:56:29:23:8c:1a:9f:22:dc:6d: 9b:fc:11:dd:8c:b6:21:21:a6:f7:b5:9c:f4:23:95:05:1f:ed: d3:e6:26:ae:d4:79:dc:2d:12:fa:90:1c:21:23:c1:08:b4:de: 06:7e:a8:39:45:49:f8:00:ee:f2:39:6b:c6:e4:04:f6:15:8a: 71:29:9e:8b:cb:0c:b0:81:ef:87:e7:c1:28:7e:9d:27:be:c8: e3:38:98:f2:ac:30:07:80:06:d2:e5:1f:24:c9:8d:d2:a3:2c: 96:e1:ca:3e:eb:8b:cd:fb:32:7b:24:cf:25:f2:c3:05:4f:98: 43:e4:15:0b:a4:30:18:7f:5c:63:6d:7b:4b:2d:95:ed:64:fc: 0a:0e:b2:60:3e:4b:4b:e2:4b:fd:41:b5:92:ee:5b:d6:e1:ed: 87:52:a4:4e:f3:ed:78:c3:49:f9:8b:2b:5b:1f:0a:b4:57:bf: 61:d3:6e:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcRRvPFpzpowBPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk MmRjZTNlODItZWI3Ny00ZGFiLWJjZTAtMGExMDY1ZTVjNjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnpzEKXtXaoG6x3R0WTnmMJXCXNo9W1k64+R zvHHXRXKJTkclpfTdKQ3N45B74D0/AttERlANfse9EU/gPIIbuBnhmC50QgR7kU8 asTAnHnqrNoLPZsUzLYuXmi2VpV/cKXYeWa+VrDxF+ZpYXFhEmqwsF7AlEQ0J9z1 VqGPtq7pH4C/JtbmBWLuRzUXGa0rIAJvuCChsEMbXwTEjywWQ5K2SRFFiiqPlVIb IF5CUhgDeUyTLGXPxb886I6WuInplzAY6SFCkGi37qrfnb61yJe7k9gpRCWnFNuX m1qn1lU3sxOZ7zT68MrcsgkFIhZFWLdUAs1ExyR+aGF2tzlEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGnGVTueWH/gKWcjT8q5dkvjr0KkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjE0ZDgzZTEtNmM2MC0z ZWIwLWFmYzItOGU3MTRmNmUyZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhuzD8AkB7ZpmvJff7oUxOUTZQ3KTdHxKyPcNG5iCWCJidsTDnbeYfi sRA2CJEhrUcbK5+uGm9jCEbFKVT8/jYQxVFZrOxL+/Js8ghf7iVtP1YpI4wanyLc bZv8Ed2MtiEhpve1nPQjlQUf7dPmJq7UedwtEvqQHCEjwQi03gZ+qDlFSfgA7vI5 a8bkBPYVinEpnovLDLCB74fnwSh+nSe+yOM4mPKsMAeABtLlHyTJjdKjLJbhyj7r i837MnskzyXywwVPmEPkFQukMBh/XGNte0stle1k/AoOsmA+S0viS/1BtZLuW9bh 7YdSpE7z7XjDSfmLK1sfCrRXv2HTbh0= -----END CERTIFICATE-----Generated at Wed Oct 29 09:00:29 2025 by rpki-client