$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0de9b831-9955-389f-ab24-2c7ef216f837.roa File: 0de9b831-9955-389f-ab24-2c7ef216f837.roa (raw, json) Hash identifier: zERQvigE9/baanVCXeMc2hM0DhtHONbxxJRiAdaRAW4= Subject key identifier: DE:5A:C2:57:26:84:DE:8A:1D:28:98:35:E8:29:0D:39:D0:84:17:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB02D14D45DE9A95B019428C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0de9b831-9955-389f-ab24-2c7ef216f837.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 25485 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:14:d4:5d:e9:a9:5b:01:94:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=606efa70-06ce-4fbb-bb4b-c4562683b422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ce:e4:b2:fe:93:bf:ee:c8:46:6a:42:a6:f1: a3:ae:ec:00:e3:93:0c:41:9c:29:69:8c:44:07:1e: ff:a4:9e:af:9c:11:28:94:ab:77:cd:95:a2:68:c8: 24:a4:f1:8f:be:c5:60:05:a5:8d:e4:3c:f3:25:fb: 9d:3f:63:3a:fb:12:28:c5:7d:df:73:1b:01:ec:05: c7:14:d6:e6:81:a7:d3:84:c7:f4:19:a3:b9:8d:25: ff:55:fb:4e:3d:8b:73:5b:60:9b:25:4d:97:17:84: 8d:50:59:84:e1:2e:40:03:6e:a6:83:b5:70:55:1f: 9c:cd:7a:24:dd:93:73:8b:b3:b8:6f:c0:41:3a:e4: 8f:38:31:d4:5f:67:76:88:ae:39:63:a3:13:96:15: 20:34:01:e7:35:85:d9:eb:2e:19:9e:a2:c0:74:66: a1:6a:19:2e:c8:a5:42:4e:ee:a6:44:e4:da:62:cf: 92:87:ab:7b:f2:7c:ed:95:62:05:ee:82:52:b4:c6: 73:c5:b2:67:ea:18:1f:25:e6:66:06:29:2a:4b:04: bf:06:47:76:02:af:3d:47:e0:99:8b:76:30:bf:47: d4:78:2d:6e:e9:5d:5d:a7:11:be:96:b5:2e:1e:d4: 8d:7b:6a:64:25:17:40:57:84:a6:09:e1:fe:cc:ee: e4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5A:C2:57:26:84:DE:8A:1D:28:98:35:E8:29:0D:39:D0:84:17:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0de9b831-9955-389f-ab24-2c7ef216f837.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:63:13:b5:28:3b:17:30:b4:f2:5e:81:fb:35:52:c2:32:23: 51:11:12:5b:62:56:a0:6c:3b:ed:65:8f:bc:23:ed:0c:2f:0c: 23:24:45:56:7c:14:e9:d2:9b:fe:d9:17:4e:f4:45:d0:1d:a8: db:5a:5c:74:17:1b:b7:f1:c4:b0:07:26:12:85:d2:01:ab:c4: 64:1a:c6:bd:7a:cc:15:cc:d4:17:2b:bc:0a:af:22:d8:db:3d: 3d:25:e6:36:57:a2:36:96:56:22:b2:de:a3:63:4e:55:93:36: 39:43:ab:67:95:4d:49:3e:b2:a7:4f:aa:61:4d:7d:bf:c0:19: 40:1a:ac:ce:24:ef:8b:c1:d1:53:3f:b9:0b:f3:21:a7:6e:c3: a7:76:64:0e:6e:9e:ad:98:7b:16:d6:37:16:2c:3b:e1:f6:d2: 69:6e:1c:f9:29:6c:a8:29:58:de:4c:6f:22:39:40:f1:a0:00: f0:ef:23:47:e6:18:f4:d4:3e:bb:4b:7d:51:39:a5:a7:cb:5c: 3b:eb:ef:3b:ff:c1:4e:f6:9c:5f:ef:86:df:5e:39:b0:b4:cf: ca:99:d4:9a:9b:3b:7f:36:87:b1:7c:ff:a8:24:c1:54:b0:ce: b4:8f:af:0a:4a:91:d2:74:0d:f0:ee:f7:e2:b9:39:09:82:5d: f0:09:f5:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRTUXempWwGUKMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk NjA2ZWZhNzAtMDZjZS00ZmJiLWJiNGItYzQ1NjI2ODNiNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAts7ksv6Tv+7IRmpCpvGjruwA45MMQZwpaYxE Bx7/pJ6vnBEolKt3zZWiaMgkpPGPvsVgBaWN5DzzJfudP2M6+xIoxX3fcxsB7AXH FNbmgafThMf0GaO5jSX/VftOPYtzW2CbJU2XF4SNUFmE4S5AA26mg7VwVR+czXok 3ZNzi7O4b8BBOuSPODHUX2d2iK45Y6MTlhUgNAHnNYXZ6y4ZnqLAdGahahkuyKVC Tu6mROTaYs+Sh6t78nztlWIF7oJStMZzxbJn6hgfJeZmBikqSwS/Bkd2Aq89R+CZ i3Ywv0fUeC1u6V1dpxG+lrUuHtSNe2pkJRdAV4SmCeH+zO7kVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5awlcmhN6KHSiYNegpDTnQhBdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGRlOWI4MzEtOTk1NS0z ODlmLWFiMjQtMmM3ZWYyMTZmODM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxjE7UoOxcwtPJegfs1UsIyI1EREltiVqBsO+1lj7wj7QwvDCMkRVZ8 FOnSm/7ZF070RdAdqNtaXHQXG7fxxLAHJhKF0gGrxGQaxr16zBXM1BcrvAqvItjb PT0l5jZXojaWViKy3qNjTlWTNjlDq2eVTUk+sqdPqmFNfb/AGUAarM4k74vB0VM/ uQvzIaduw6d2ZA5unq2YexbWNxYsO+H20mluHPkpbKgpWN5MbyI5QPGgAPDvI0fm GPTUPrtLfVE5pafLXDvr7zv/wU72nF/vht9eObC0z8qZ1JqbO382h7F8/6gkwVSw zrSPrwpKkdJ0DfDu9+K5OQmCXfAJ9eI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:03:03 2025 by rpki-client