$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa File: 0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa (raw, json) Hash identifier: ouZqoywrwZ9/pYoov/witqL0th0uZ99Qnn1junxCn6g= Subject key identifier: 3D:B1:E8:E7:83:DC:E6:0C:2B:B9:38:B7:2E:E4:34:E0:73:B7:67:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF736B2E1E7D780A73C0F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 36618 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:36:b2:e1:e7:d7:80:a7:3c:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=cfb46c42-544a-445d-9b5d-5fd436fa8348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:91:5b:de:d4:05:0b:c2:d7:47:55:23:5f:4a: 77:aa:5a:a6:59:02:7b:f6:75:9f:92:a7:70:88:3c: 17:30:a9:44:7a:3a:a1:4f:d2:f9:3c:45:12:11:6a: a8:44:a6:26:22:ff:50:d2:73:0f:95:de:1f:bc:f3: ab:9d:0f:e2:16:4d:3b:6a:2e:87:09:15:8b:a1:04: 23:21:b1:74:54:45:f3:97:34:fe:14:51:f3:06:ab: a7:30:58:2d:9d:df:40:a5:a3:11:c9:02:86:a4:ab: 2e:27:06:aa:64:1e:12:86:38:54:c0:c1:52:bd:82: 1f:9c:e7:06:8f:0e:0e:c0:93:fd:c4:24:ad:28:eb: 5b:36:22:32:6b:7d:5c:53:6c:c9:af:56:79:99:7a: 29:58:96:5a:f9:88:61:12:25:c4:0d:a0:75:62:d1: e9:75:eb:38:39:35:d4:5a:66:bb:8d:8c:80:53:8e: 5b:e0:91:04:0f:ae:b4:2a:9e:29:6f:62:9e:3d:3a: 42:96:1a:19:df:f7:7c:12:42:7a:fc:f2:07:60:82: 78:6a:04:58:f1:8f:05:b5:85:52:6c:63:c8:35:ec: e9:43:de:45:4c:44:d5:0f:88:0e:79:75:b8:19:b6: 08:d7:82:0f:6a:4b:2b:e1:44:f9:c5:b5:4a:7f:12: 27:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B1:E8:E7:83:DC:E6:0C:2B:B9:38:B7:2E:E4:34:E0:73:B7:67:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d79585f-b4b7-3774-a5e3-0a86efe2ede3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:6e:b3:92:70:d5:15:0d:ec:e1:25:4f:d2:30:f5:fa:8f:a6: 3c:ca:fa:30:b0:35:69:c7:03:b0:74:ae:78:56:e6:ba:53:c9: 92:3d:fe:68:16:c8:9c:74:b7:33:ae:cb:a8:4e:4b:95:ae:10: 83:fe:4c:c9:81:1b:5c:2c:bf:90:ee:1e:4f:c8:ea:26:57:da: d7:20:01:0c:1c:c6:29:f2:bf:df:2e:e4:47:97:fc:c8:3d:ab: d4:f1:fe:7b:ce:d9:61:c5:52:3e:95:b1:09:10:60:8a:e8:24: c2:21:62:60:ce:de:b9:fa:89:6b:e4:64:6b:0f:14:49:f9:7f: dd:e2:4a:60:c8:ae:25:35:fa:2c:52:bc:21:9f:df:f7:18:5c: b3:c1:93:89:65:8e:a5:69:ae:a9:54:6a:9d:bc:a7:d0:d1:10: b0:55:a9:4b:67:db:ef:34:2f:a7:86:f3:3b:de:37:16:17:5d: bf:37:9b:22:99:51:23:cf:db:14:39:c0:b6:00:22:d3:8d:9c: ea:49:c2:c7:cb:86:90:75:82:11:ba:97:2c:5c:8d:ac:19:53: ee:bb:87:06:9e:f8:bd:44:75:a2:f5:64:39:49:2d:01:84:13: e9:c8:fa:39:98:76:bf:34:7c:ad:df:01:a1:51:05:c3:89:fb: 20:54:ea:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv9zay4efXgKc8D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk Y2ZiNDZjNDItNTQ0YS00NDVkLTliNWQtNWZkNDM2ZmE4MzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Fb3tQFC8LXR1UjX0p3qlqmWQJ79nWfkqdw iDwXMKlEejqhT9L5PEUSEWqoRKYmIv9Q0nMPld4fvPOrnQ/iFk07ai6HCRWLoQQj IbF0VEXzlzT+FFHzBqunMFgtnd9ApaMRyQKGpKsuJwaqZB4ShjhUwMFSvYIfnOcG jw4OwJP9xCStKOtbNiIya31cU2zJr1Z5mXopWJZa+YhhEiXEDaB1YtHpdes4OTXU Wma7jYyAU45b4JEED660Kp4pb2KePTpClhoZ3/d8EkJ6/PIHYIJ4agRY8Y8FtYVS bGPINezpQ95FTETVD4gOeXW4GbYI14IPaksr4UT5xbVKfxInjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2x6OeD3OYMK7k4ty7kNOBzt2fDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGQ3OTU4NWYtYjRiNy0z Nzc0LWE1ZTMtMGE4NmVmZTJlZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL5us5Jw1RUN7OElT9Iw9fqPpjzK+jCwNWnHA7B0rnhW5rpTyZI9/mgW yJx0tzOuy6hOS5WuEIP+TMmBG1wsv5DuHk/I6iZX2tcgAQwcxinyv98u5EeX/Mg9 q9Tx/nvO2WHFUj6VsQkQYIroJMIhYmDO3rn6iWvkZGsPFEn5f93iSmDIriU1+ixS vCGf3/cYXLPBk4lljqVprqlUap28p9DRELBVqUtn2+80L6eG8zveNxYXXb83myKZ USPP2xQ5wLYAItONnOpJwsfLhpB1ghG6lyxcjawZU+67hwae+L1EdaL1ZDlJLQGE E+nI+jmYdr80fK3fAaFRBcOJ+yBU6jA= -----END CERTIFICATE-----Generated at Mon Oct 20 23:10:06 2025 by rpki-client