$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c1c00cf-cae4-387c-86db-f4de0acd5b9e.roa File: 0c1c00cf-cae4-387c-86db-f4de0acd5b9e.roa (raw, json) Hash identifier: 6lsYlAaFq375pSM94aUwVBDLUaa9wye7ZV9b+ihr61A= Subject key identifier: 31:D9:CE:86:D9:9E:41:41:E2:B4:BD:F6:59:3C:3E:A3:35:F6:02:96 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF742B63F84F00695EB9E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c1c00cf-cae4-387c-86db-f4de0acd5b9e.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396590 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:42:b6:3f:84:f0:06:95:eb:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=f2aac623-a9c2-47ef-9024-0813e791b421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5c:eb:74:7c:12:13:2e:04:ca:a2:94:37:8a: 19:40:fa:3d:2c:bd:de:07:f6:e6:9a:23:2d:83:bd: ec:23:71:12:ce:05:d9:36:a1:5f:88:6c:ec:f5:33: 9e:26:47:62:d6:bd:7a:78:16:78:30:ac:88:e8:0d: d5:4a:ea:f8:cb:95:34:00:54:0e:ce:8d:a9:c3:6f: 38:76:68:56:ca:4e:4a:ae:81:70:69:ef:51:d5:28: b5:3c:4f:a6:fc:d8:7c:e4:48:96:aa:d3:e4:b9:50: d7:9a:b4:5d:c7:19:d5:a7:67:64:c1:e5:6b:ba:a3: 0c:83:94:be:d0:dd:24:59:68:3c:1d:bb:23:cf:84: f1:0c:71:ba:d5:31:7a:a5:95:0c:57:41:28:de:77: 8a:9b:2c:27:25:7f:0e:f6:0f:7d:de:06:62:73:57: 0a:a5:94:14:f1:55:48:de:8e:c3:09:36:05:ed:20: d8:5d:25:c8:50:9a:0e:3b:16:72:53:4c:69:ea:3a: 3c:90:c1:1b:56:76:12:40:f3:ea:07:2f:13:82:95: 77:b3:a9:74:98:4d:de:d9:1f:10:de:fb:e0:cf:c2: 69:60:2f:90:aa:4b:f0:c8:4e:13:3a:2c:ed:15:22: b9:b8:15:12:a7:1e:49:aa:11:92:c9:a6:9a:18:44: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D9:CE:86:D9:9E:41:41:E2:B4:BD:F6:59:3C:3E:A3:35:F6:02:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c1c00cf-cae4-387c-86db-f4de0acd5b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5f:6b:5c:ae:3f:f5:5d:b9:9a:82:15:08:69:32:50:99:30: 9e:13:bd:6a:c5:3c:c9:7d:41:fd:d2:12:5d:a9:cb:1f:2f:a9: 4d:2a:55:80:39:78:53:07:ca:7e:59:47:34:57:5d:8d:d7:cc: 13:7d:66:9f:b1:08:d6:cc:df:b8:ee:72:12:e3:e9:f4:c5:d2: db:9a:2c:c5:23:ad:b6:f9:a9:68:64:6e:1e:44:ef:c3:de:f2: 2a:e3:52:24:4b:ba:8a:09:d8:3b:cf:f6:c2:da:92:a8:d1:30: 60:e6:26:3d:68:1a:46:e0:f3:3d:f9:71:84:66:83:df:e2:b4: a7:b4:11:77:15:0a:d0:98:ff:b7:05:d7:38:62:ec:db:c5:cc: ea:6b:1a:47:2e:65:6e:14:9a:78:c6:fc:d2:24:2b:10:8d:94: f2:48:19:e2:98:36:55:62:95:fc:28:d4:34:6a:7e:34:d0:22: 34:e1:88:c7:d1:a1:14:06:20:dc:83:68:36:d0:11:de:b8:d5: 7c:56:b9:7a:5c:a1:00:19:b2:e7:25:d8:ea:20:d6:9b:2e:1b: e8:26:c5:50:88:22:41:91:5d:e3:72:70:af:17:8c:dc:db:ff: 7f:da:0c:cd:43:78:1f:4c:67:13:0c:1a:41:65:a6:f9:91:fb: 16:28:e7:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90K2P4TwBpXrngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk ZjJhYWM2MjMtYTljMi00N2VmLTkwMjQtMDgxM2U3OTFiNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFzrdHwSEy4EyqKUN4oZQPo9LL3eB/bmmiMt g73sI3ESzgXZNqFfiGzs9TOeJkdi1r16eBZ4MKyI6A3VSur4y5U0AFQOzo2pw284 dmhWyk5KroFwae9R1Si1PE+m/Nh85EiWqtPkuVDXmrRdxxnVp2dkweVruqMMg5S+ 0N0kWWg8Hbsjz4TxDHG61TF6pZUMV0Eo3neKmywnJX8O9g993gZic1cKpZQU8VVI 3o7DCTYF7SDYXSXIUJoOOxZyU0xp6jo8kMEbVnYSQPPqBy8TgpV3s6l0mE3e2R8Q 3vvgz8JpYC+QqkvwyE4TOiztFSK5uBUSpx5JqhGSyaaaGEQSLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHZzobZnkFB4rS99lk8PqM19gKWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGMxYzAwY2YtY2FlNC0z ODdjLTg2ZGItZjRkZTBhY2Q1YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElfa1yuP/VduZqCFQhpMlCZMJ4TvWrFPMl9Qf3SEl2pyx8vqU0qVYA5 eFMHyn5ZRzRXXY3XzBN9Zp+xCNbM37juchLj6fTF0tuaLMUjrbb5qWhkbh5E78Pe 8irjUiRLuooJ2DvP9sLakqjRMGDmJj1oGkbg8z35cYRmg9/itKe0EXcVCtCY/7cF 1zhi7NvFzOprGkcuZW4UmnjG/NIkKxCNlPJIGeKYNlVilfwo1DRqfjTQIjThiMfR oRQGINyDaDbQEd641XxWuXpcoQAZsucl2Oog1psuG+gmxVCIIkGRXeNycK8XjNzb /3/aDM1DeB9MZxMMGkFlpvmR+xYo5zY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:23:33 2025 by rpki-client