$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e2ab71-3fa1-36dc-84eb-f756856e6079.roa File: 00e2ab71-3fa1-36dc-84eb-f756856e6079.roa (raw, json) Hash identifier: 9sAxovxA0HmDdXiaKrdsOJnGEgc7lZrO1Yk+TgkeKQo= Subject key identifier: B5:70:40:FE:FD:32:88:EC:2C:72:BE:41:7E:7D:3C:88:62:8B:1E:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61FF7D0B91187A39079280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e2ab71-3fa1-36dc-84eb-f756856e6079.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396617 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:ff:7d:0b:91:18:7a:39:07:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=6e392a3a-e781-4218-b458-d30d294474a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:42:8e:e5:ee:1d:31:6e:af:e8:5d:99:c0: 9b:00:26:8c:09:63:8f:79:4d:a3:52:66:87:25:b3: 30:f9:f4:4c:ac:65:93:20:51:42:46:c1:33:d0:2d: cc:1a:43:18:4e:9a:32:a7:ff:79:11:4a:59:6c:46: 8f:fc:1d:5e:cc:10:95:66:88:7e:47:a6:89:9d:30: 8f:f1:c5:f4:79:6e:48:c9:a0:34:47:2e:e5:6a:de: 7d:68:b6:fc:34:d9:9e:56:08:9a:a6:7c:3b:98:15: 0c:cb:e3:3c:b1:2f:6f:97:4d:ab:bb:43:57:55:77: 0d:f7:d2:99:12:32:47:c1:8b:2c:04:d2:d4:39:9f: 5a:a7:bf:d7:d5:a0:a7:f6:7b:a4:34:dc:82:fa:3e: 4d:e1:2d:f3:a2:41:96:b6:61:87:af:33:50:52:d2: a4:dc:48:c0:c7:eb:79:d7:64:f2:bc:72:47:49:f1: 93:63:bf:f5:fe:bc:24:5f:8d:a2:58:41:85:95:83: 2c:19:9d:c2:f5:ba:79:9b:34:ae:21:34:e4:5b:67: 1c:9c:12:ab:93:bf:0c:d0:4b:c5:7c:36:de:aa:ef: 4f:00:06:96:8c:c6:23:a1:52:20:f5:94:d9:99:9c: 61:7f:fb:57:0e:31:25:c7:17:b6:f1:09:4c:93:8e: 8e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:70:40:FE:FD:32:88:EC:2C:72:BE:41:7E:7D:3C:88:62:8B:1E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e2ab71-3fa1-36dc-84eb-f756856e6079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c0:c5:62:ca:66:73:6e:b7:21:75:74:95:e0:3f:bf:4f:8e: 5d:7f:cb:6b:bc:2c:b0:df:e7:96:e5:25:ef:be:b4:24:18:e5: 48:02:9c:7a:78:80:4c:bc:2a:c0:fb:15:3b:38:3c:56:db:45: 9d:29:de:6b:96:f9:8a:31:6b:85:32:81:81:bd:23:e9:46:17: 7f:24:93:5b:4f:77:92:d4:f7:6e:d3:1b:5c:3d:9a:59:43:2d: 82:f7:30:2b:43:95:a9:23:ec:9e:50:c0:96:c6:9f:53:6c:db: 57:56:f9:d1:94:e6:86:1e:a7:95:0a:41:9d:dd:85:62:1c:61: 37:12:8a:5b:c1:93:8f:3a:77:76:ce:6f:80:2f:76:4d:7e:1d: 75:32:c0:9b:98:6b:6b:ae:e0:7d:5d:37:33:6a:53:06:a7:ff: e2:e4:e7:6c:1d:1b:54:d6:bf:2c:be:4e:4c:8c:57:50:7f:eb: ae:74:19:1f:77:fd:eb:ab:00:eb:db:1e:82:fc:a9:ef:c6:18: 0e:82:e9:70:6f:0e:49:f0:65:ad:f5:9d:59:b8:73:14:f5:c6: 2a:bd:b8:e7:b5:b4:87:7a:26:f5:22:6b:dd:e8:26:0b:de:b3: 55:ff:16:ae:84:9b:26:7f:ad:0d:c0:32:93:fa:fb:d4:d3:fb: df:ff:75:0f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYf99C5EYejkHkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NmUzOTJhM2EtZTc4MS00MjE4LWI0NTgtZDMwZDI5NDQ3NGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwlCjuXuHTFur+hdmcCbACaMCWOPeU2jUmaH JbMw+fRMrGWTIFFCRsEz0C3MGkMYTpoyp/95EUpZbEaP/B1ezBCVZoh+R6aJnTCP 8cX0eW5IyaA0Ry7lat59aLb8NNmeVgiapnw7mBUMy+M8sS9vl02ru0NXVXcN99KZ EjJHwYssBNLUOZ9ap7/X1aCn9nukNNyC+j5N4S3zokGWtmGHrzNQUtKk3EjAx+t5 12TyvHJHSfGTY7/1/rwkX42iWEGFlYMsGZ3C9bp5mzSuITTkW2ccnBKrk78M0EvF fDbequ9PAAaWjMYjoVIg9ZTZmZxhf/tXDjElxxe28QlMk46OrwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLVwQP79MojsLHK+QX59PIhiix50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDBlMmFiNzEtM2ZhMS0z NmRjLTg0ZWItZjc1Njg1NmU2MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAWwMViymZzbrchdXSV4D+/T45df8trvCyw3+eW5SXvvrQkGOVIApx6 eIBMvCrA+xU7ODxW20WdKd5rlvmKMWuFMoGBvSPpRhd/JJNbT3eS1Pdu0xtcPZpZ Qy2C9zArQ5WpI+yeUMCWxp9TbNtXVvnRlOaGHqeVCkGd3YViHGE3EopbwZOPOnd2 zm+AL3ZNfh11MsCbmGtrruB9XTczalMGp//i5OdsHRtU1r8svk5MjFdQf+uudBkf d/3rqwDr2x6C/KnvxhgOgulwbw5J8GWt9Z1ZuHMU9cYqvbjntbSHeib1Imvd6CYL 3rNV/xauhJsmf60NwDKT+vvU0/vf/3UP -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:24 2025 by rpki-client