$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa File: 2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa (raw, json) Hash identifier: G+P6itIW9BQNA+aTdFEbRh7C+GIPnBBzUuXizddJIqk= Subject key identifier: 58:2E:58:D9:57:D2:62:37:AD:E4:73:47:55:D2:17:75:56:E4:3F:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB45D3A9595901031DCBFDB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 7342 IP address blocks: 192.68.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:3a:95:95:90:10:31:dc:bf:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=872a56d5-f0e4-49a6-9fc7-91da688c4dd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:f4:ea:e8:1d:d0:41:75:cc:99:92:95:22: f6:1c:18:44:1b:3e:93:4c:eb:9d:ba:c5:3c:af:0d: 5a:be:22:28:2f:d0:ef:52:37:0b:4b:eb:2f:a5:4b: e0:a2:1f:16:f9:50:c4:cb:1d:59:e6:5a:52:88:b0: e3:10:ac:f7:fc:be:a3:1d:2f:0c:8a:29:c8:37:0c: 0c:52:76:b7:3b:77:a5:9c:73:ae:18:b5:0a:b0:2d: 7c:96:07:57:e9:92:0c:94:3a:90:f9:97:64:b8:61: 6a:65:b8:d6:5d:83:91:1c:01:07:ea:e1:79:90:34: 25:64:df:f6:be:d5:0c:0c:ce:5d:3c:e5:12:e0:7e: 2e:5c:3d:d2:6f:a0:05:de:4d:61:aa:3a:fd:f5:70: b1:88:66:f2:b1:26:23:fc:fb:76:03:fb:68:a0:e7: 70:23:41:41:58:c5:42:2e:33:7b:69:cb:72:7a:f6: c1:f0:0d:c9:39:d9:84:40:2f:40:c7:f7:97:3c:d2: f1:42:57:c2:13:b6:b5:ea:1a:f5:94:36:31:b5:88: 3f:e9:28:ed:72:3e:09:68:f9:12:e2:c8:88:a1:33: 58:76:fb:16:0d:fd:cb:41:31:42:a6:40:72:5b:5c: f7:c5:88:17:43:ce:90:d9:06:5b:5a:3e:73:d5:74: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2E:58:D9:57:D2:62:37:AD:E4:73:47:55:D2:17:75:56:E4:3F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2157cc7f-b3e9-3ba7-86fb-33bedd8ac72f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:06:7b:63:27:d2:e1:39:40:6e:6a:1e:85:00:20:18:e4:9c: d6:cf:28:fa:a7:31:a2:00:52:0b:6a:fd:9d:c7:68:df:e7:6d: fd:c9:95:25:41:94:51:ea:b2:fe:cb:28:83:4a:a7:8f:f5:43: bf:3f:a6:07:d8:b9:40:22:24:95:9b:30:65:9e:83:c3:3a:5f: 6c:25:34:ce:1f:e7:58:fb:91:db:81:ee:ec:4f:6c:b6:4c:1c: f5:e3:b2:82:19:49:2f:c3:d0:1f:36:50:60:86:8a:f0:33:a3: b3:14:49:ae:b1:dc:e8:fd:3d:ed:fb:7e:29:55:7c:48:ef:16: 0a:37:56:29:21:04:a5:eb:83:64:f1:ee:49:34:04:4e:c0:5b: bc:f6:ec:ef:45:0f:fb:8b:52:d4:6c:e7:9d:24:ef:2f:63:4f: bf:22:f1:70:f5:47:00:96:bb:14:12:12:90:f7:3b:a8:85:c3: 04:a7:a8:88:eb:ef:ba:40:c8:3d:bb:1a:50:1a:d5:20:84:c9: fc:82:91:3d:09:e1:af:f3:10:4b:b9:7a:45:63:2c:e3:17:06: 90:c6:24:9f:04:0f:18:d3:02:23:05:a3:b0:66:0c:1a:1f:be: d1:86:7f:d8:93:93:59:58:a5:9c:48:42:c2:7a:7f:da:ab:d4: 5a:d4:c0:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XTqVlZAQMdy/24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ODcyYTU2ZDUtZjBlNC00OWE2LTlmYzctOTFkYTY4OGM0ZGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxb06ugd0EF1zJmSlSL2HBhEGz6TTOudusU8 rw1aviIoL9DvUjcLS+svpUvgoh8W+VDEyx1Z5lpSiLDjEKz3/L6jHS8MiinINwwM Una3O3elnHOuGLUKsC18lgdX6ZIMlDqQ+ZdkuGFqZbjWXYORHAEH6uF5kDQlZN/2 vtUMDM5dPOUS4H4uXD3Sb6AF3k1hqjr99XCxiGbysSYj/Pt2A/tooOdwI0FBWMVC LjN7actyevbB8A3JOdmEQC9Ax/eXPNLxQlfCE7a16hr1lDYxtYg/6Sjtcj4JaPkS 4siIoTNYdvsWDf3LQTFCpkByW1z3xYgXQ86Q2QZbWj5z1XTcTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFguWNlX0mI3reRzR1XSF3VW5D/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjE1N2NjN2YtYjNlOS0z YmE3LTg2ZmItMzNiZWRkOGFjNzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwESAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsGe2Mn0uE5QG5qHoUAIBjknNbPKPqnMaIAUgtq/Z3HaN/nbf3JlSVB lFHqsv7LKINKp4/1Q78/pgfYuUAiJJWbMGWeg8M6X2wlNM4f51j7kduB7uxPbLZM HPXjsoIZSS/D0B82UGCGivAzo7MUSa6x3Oj9Pe37filVfEjvFgo3VikhBKXrg2Tx 7kk0BE7AW7z27O9FD/uLUtRs550k7y9jT78i8XD1RwCWuxQSEpD3O6iFwwSnqIjr 77pAyD27GlAa1SCEyfyCkT0J4a/zEEu5ekVjLOMXBpDGJJ8EDxjTAiMFo7BmDBof vtGGf9iTk1lYpZxIQsJ6f9qr1FrUwIg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:10:44 2025 by rpki-client