$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa File: aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa (raw, json) Hash identifier: q8GjEKawtbfHneHreWN4CjDgXyN4nx0DbqpLoH2JWKQ= Subject key identifier: C8:04:80:94:92:03:47:E8:C6:57:63:50:37:E2:17:15:55:2B:7B:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BB02D17B1469FA4764E95E460 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 397210 IP address blocks: 192.42.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:17:b1:46:9f:a4:76:4e:95:e4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=f4b56b05-cf14-4664-8c4b-f1895d7c8cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:a8:e9:2a:19:c8:16:a8:2c:2a:e5:74:5c: 8c:1f:8e:11:20:cf:f0:e3:7b:45:5f:69:ba:96:75: 83:60:52:71:f4:a6:b8:7e:91:ee:b2:c3:69:93:50: 57:23:64:e9:14:8a:17:7e:6e:10:cd:50:72:c8:59: 45:52:b1:33:e9:50:3f:3e:12:54:bf:bf:62:4e:8c: 62:95:e6:eb:be:be:eb:94:aa:e5:61:66:a4:dd:ee: ed:c8:22:35:31:dc:6c:be:19:af:ef:6f:a4:b0:7e: 2b:46:93:ff:6e:c4:f2:b1:50:27:00:3d:6f:db:31: 19:50:67:eb:45:2b:8a:30:03:cc:cd:a5:a1:75:5a: 76:f3:cd:bf:ef:be:f8:ee:57:d2:a6:9e:e6:37:f1: 62:2b:3c:31:3f:40:9d:0e:65:c1:7b:0e:b8:90:2b: 72:70:07:bd:93:b4:45:2d:f8:cb:cb:68:02:e6:4c: 38:be:12:75:d9:79:85:88:e8:58:e3:b2:5a:cd:65: 55:97:a4:fe:a6:77:b0:31:84:a9:c9:fd:8e:58:ca: 09:52:bb:f1:30:b1:fb:f7:2e:46:c2:bf:ce:cc:a0: e0:78:b6:b8:5c:a1:12:55:68:80:20:59:01:a1:7e: b5:de:e7:e6:84:db:e7:6f:8d:51:21:5f:3f:0b:41: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:04:80:94:92:03:47:E8:C6:57:63:50:37:E2:17:15:55:2B:7B:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa643f6f-69ac-33cb-86e1-5d4feda19e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f0:57:4f:0c:a7:92:f2:2f:88:ef:53:90:77:10:56:f4:de: 60:d8:b8:e9:49:97:d6:ec:58:78:fc:b8:91:05:d6:05:f5:f1: 64:32:f5:11:99:76:e5:ce:43:ce:84:99:3b:99:23:b6:8e:e6: b0:f1:5d:00:87:71:9b:30:32:53:ab:6e:e6:d2:e9:c7:d8:23: cb:bc:b0:d1:c6:e3:ee:7b:01:67:f3:ad:58:ac:82:ab:61:a0: 7a:d4:ca:c6:d9:5b:3e:43:79:c3:d9:de:98:26:49:25:1e:64: 9d:07:4a:1b:ed:16:06:ca:60:74:52:ee:ae:dc:15:0e:3c:6a: 2f:a7:75:c9:e8:8d:27:f1:91:46:58:16:77:af:f8:70:d2:91: 39:be:a1:5c:b7:9d:e5:e6:93:af:cd:ed:cc:c6:c6:b0:e3:b1: 6d:ff:4d:11:14:8a:4f:80:da:24:5d:e0:81:c1:a3:74:4a:b2: 92:f2:9c:59:00:21:12:1d:ce:58:cf:c3:69:10:85:28:d4:f3: 54:df:65:5a:0b:9a:93:40:aa:ba:f4:44:fc:b3:b2:28:32:68: 9d:5e:94:f2:fb:ee:4e:28:9c:1c:03:9e:e3:92:cf:a2:2e:21: b9:2f:07:4e:aa:82:1d:ff:03:6e:e7:fc:ee:8f:66:cf:6b:43: 3c:c2:fd:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLRexRp+kdk6V5GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk ZjRiNTZiMDUtY2YxNC00NjY0LThjNGItZjE4OTVkN2M4Y2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioao6SoZyBaoLCrldFyMH44RIM/w43tFX2m6 lnWDYFJx9Ka4fpHussNpk1BXI2TpFIoXfm4QzVByyFlFUrEz6VA/PhJUv79iToxi lebrvr7rlKrlYWak3e7tyCI1Mdxsvhmv72+ksH4rRpP/bsTysVAnAD1v2zEZUGfr RSuKMAPMzaWhdVp2882/77747lfSpp7mN/FiKzwxP0CdDmXBew64kCtycAe9k7RF LfjLy2gC5kw4vhJ12XmFiOhY47JazWVVl6T+pnewMYSpyf2OWMoJUrvxMLH79y5G wr/OzKDgeLa4XKESVWiAIFkBoX613ufmhNvnb41RIV8/C0Eb/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgEgJSSA0foxldjUDfiFxVVK3v6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE2NDNmNmYtNjlhYy0z M2NiLTg2ZTEtNWQ0ZmVkYTE5ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHwV08Mp5LyL4jvU5B3EFb03mDYuOlJl9bsWHj8uJEF1gX18WQy9RGZ duXOQ86EmTuZI7aO5rDxXQCHcZswMlOrbubS6cfYI8u8sNHG4+57AWfzrVisgqth oHrUysbZWz5DecPZ3pgmSSUeZJ0HShvtFgbKYHRS7q7cFQ48ai+ndcnojSfxkUZY Fnev+HDSkTm+oVy3neXmk6/N7czGxrDjsW3/TREUik+A2iRd4IHBo3RKspLynFkA IRIdzljPw2kQhSjU81TfZVoLmpNAqrr0RPyzsigyaJ1elPL77k4onBwDnuOSz6Iu IbkvB06qgh3/A27n/O6PZs9rQzzC/dI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:59:29 2025 by rpki-client