$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0342e225-b9da-3468-b5f8-cdc6c922d254.roa File: 0342e225-b9da-3468-b5f8-cdc6c922d254.roa (raw, json) Hash identifier: q71EE1oMBl6vqUyPRhubo0HJrFIJ2IcaPW68V3jTAO8= Subject key identifier: CB:46:5A:69:D1:74:7C:6E:C0:29:39:0F:F8:38:FA:AD:46:D5:FF:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B56D719C218A506C76F611300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0342e225-b9da-3468-b5f8-cdc6c922d254.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 20431 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:19:c2:18:a5:06:c7:6f:61:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=abf712b6-1089-4239-9fa5-3d13a41b9c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:c2:33:bd:1e:f8:b0:ba:5d:4d:31:55:99: 97:07:2c:d5:d6:9e:bd:1f:34:39:c2:7c:86:18:e1: 9a:d7:29:7b:c5:89:85:3f:9b:eb:43:c8:dc:2e:14: e6:b8:f9:ba:09:d4:da:64:a7:fa:46:41:8b:57:c7: fc:0b:90:9d:1c:7b:48:5e:f2:82:6d:a9:26:49:af: 7c:a1:a5:0e:50:54:50:9c:71:e5:01:84:3f:a8:d6: b2:14:f9:45:d9:31:6d:4e:be:b6:a0:3d:6e:d3:c2: e3:07:87:e4:05:c6:80:bd:cb:df:f0:c3:69:3e:f5: 4a:9f:c1:cb:b0:ee:62:73:88:44:18:b8:fc:d0:61: 46:c8:13:11:d2:40:a0:cd:eb:14:54:2c:30:6b:47: fd:af:0d:46:6d:ae:4d:5a:03:6d:86:0d:1e:2c:15: 25:b5:ff:a5:62:e1:e7:1f:2d:a6:b9:b2:36:92:5f: f3:0b:8f:bb:46:dd:d8:a2:f8:a1:6c:65:03:7f:4d: 03:8c:43:2b:bc:af:45:67:b4:82:51:75:c9:ab:53: 31:a4:89:77:8f:1f:9d:33:6f:c0:b2:84:ec:6f:68: 3d:35:02:df:00:05:ba:94:68:c8:65:e1:bf:d8:18: 25:b6:28:de:1f:68:51:2b:59:ee:2f:b0:1f:6f:ba: e1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:46:5A:69:D1:74:7C:6E:C0:29:39:0F:F8:38:FA:AD:46:D5:FF:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0342e225-b9da-3468-b5f8-cdc6c922d254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:df:8b:ab:f2:f8:07:8b:b4:6b:89:12:9f:eb:13:ab:81:2d: 6d:db:5b:db:3d:26:85:70:e2:d4:7e:d3:c8:78:d1:c9:64:b0: 12:00:17:ab:03:d6:2b:19:f8:06:cf:63:31:8c:54:26:1d:32: 95:50:57:b8:fc:b3:08:cd:d9:f6:ec:20:d2:fd:97:c9:5c:99: 20:cd:2a:59:16:14:3d:83:5c:0c:25:b5:dc:77:31:9b:cb:d0: 60:df:da:1e:b9:73:f8:59:60:72:98:c5:7c:2d:74:5b:15:7d: fc:74:25:52:a3:84:67:14:81:b8:84:39:fd:f0:f8:15:ea:2d: f2:7c:ec:00:0a:89:54:d6:9c:c5:9d:8c:09:fb:ce:94:df:4b: 52:73:8c:a1:3a:2b:20:2c:41:2b:5f:d7:e7:94:61:ec:89:fa: 5d:9e:2c:8e:7c:81:0f:1f:46:31:29:5d:59:c0:66:dc:be:14: 1d:70:86:fb:5d:23:c1:d4:82:f4:e7:de:20:33:9f:16:55:ce: 83:d5:80:06:c6:d3:09:2e:b8:0a:4b:c8:c7:35:b6:e9:19:fb: 83:9a:a7:35:30:4b:9d:0d:cf:d9:cc:09:e7:01:f7:af:aa:1a: c6:f5:7c:30:3b:19:ef:10:e3:3d:21:9d:c9:d0:77:c2:54:01: ee:7f:dc:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW1xnCGKUGx29hEwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YWJmNzEyYjYtMTA4OS00MjM5LTlmYTUtM2QxM2E0MWI5Yzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+fCM70e+LC6XU0xVZmXByzV1p69HzQ5wnyG GOGa1yl7xYmFP5vrQ8jcLhTmuPm6CdTaZKf6RkGLV8f8C5CdHHtIXvKCbakmSa98 oaUOUFRQnHHlAYQ/qNayFPlF2TFtTr62oD1u08LjB4fkBcaAvcvf8MNpPvVKn8HL sO5ic4hEGLj80GFGyBMR0kCgzesUVCwwa0f9rw1Gba5NWgNthg0eLBUltf+lYuHn Hy2mubI2kl/zC4+7Rt3YovihbGUDf00DjEMrvK9FZ7SCUXXJq1MxpIl3jx+dM2/A soTsb2g9NQLfAAW6lGjIZeG/2BgltijeH2hRK1nuL7Afb7rhwwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMtGWmnRdHxuwCk5D/g4+q1G1f/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDM0MmUyMjUtYjlkYS0z NDY4LWI1ZjgtY2RjNmM5MjJkMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAm34ur8vgHi7RriRKf6xOrgS1t21vbPSaFcOLUftPIeNHJZLASABer A9YrGfgGz2MxjFQmHTKVUFe4/LMIzdn27CDS/ZfJXJkgzSpZFhQ9g1wMJbXcdzGb y9Bg39oeuXP4WWBymMV8LXRbFX38dCVSo4RnFIG4hDn98PgV6i3yfOwAColU1pzF nYwJ+86U30tSc4yhOisgLEErX9fnlGHsifpdniyOfIEPH0YxKV1ZwGbcvhQdcIb7 XSPB1IL0594gM58WVc6D1YAGxtMJLrgKS8jHNbbpGfuDmqc1MEudDc/ZzAnnAfev qhrG9XwwOxnvEOM9IZ3J0HfCVAHuf9wB -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:59 2025 by rpki-client