$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa File: 0ece9ded-a213-3cef-a817-7375a4dacf4b.roa (raw, json) Hash identifier: teTa3lw9rcllu7f+KTCf/MlPauIXEVImbXzof6NPTJk= Subject key identifier: FD:C0:39:BE:47:6D:34:38:80:5C:A4:CA:2D:11:01:BD:07:A6:42:95 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B39871035CA47579508219A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 396578 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:10:35:ca:47:57:95:08:21:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=b0d585ec-301e-4be8-8117-680a610fdc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:44:17:d5:a5:76:35:51:e1:99:c6:d3:7b:ee: f1:9d:a1:40:ea:f8:ba:14:67:71:f4:c7:e5:21:8a: da:f2:cc:da:4b:30:fd:69:8e:b3:1d:83:c8:e3:b7: c7:82:40:bf:71:cc:3c:bf:bc:8a:03:16:a0:b3:5f: 99:2e:cd:fa:99:23:48:e9:66:d5:be:d4:dc:67:89: 40:09:0d:df:8e:03:5c:91:45:64:b6:66:bf:1d:fd: ec:7b:a6:8f:d7:50:ed:d2:5e:23:4e:92:fc:cd:f6: 2a:1c:81:48:08:e3:41:1c:50:14:30:45:e7:ed:01: 81:83:d2:5a:81:5f:44:b0:c6:0b:30:56:71:50:e7: af:bd:8a:d1:2e:ae:c9:35:40:b4:5d:80:1a:07:01: b0:50:84:8c:2b:02:de:07:c8:a9:0b:4d:85:ca:5a: 21:ce:d3:f3:4c:9d:a6:08:b1:cc:67:b5:9c:64:f9: ef:27:47:41:a7:35:6e:d8:c0:7d:86:aa:03:72:3a: 62:6b:37:cb:c9:b0:e4:6c:e5:1b:37:20:ae:87:78: 27:ee:b8:cc:1b:e5:22:5c:8b:6f:d7:f8:77:cc:38: 97:91:8a:a2:72:6e:9d:b6:ac:fb:db:b2:08:ab:7a: 02:ca:f9:94:a4:f3:93:a4:cc:fa:16:52:8f:dd:14: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C0:39:BE:47:6D:34:38:80:5C:A4:CA:2D:11:01:BD:07:A6:42:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ece9ded-a213-3cef-a817-7375a4dacf4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:50:f6:b9:48:23:75:0b:8d:66:df:51:4f:28:4d:99:2c:a2: 3e:87:ab:80:b3:2d:39:4d:40:1e:33:14:13:fd:4d:78:c7:f6: b6:f5:2b:e9:0b:3e:59:70:a3:12:d6:ee:01:fe:e1:f4:26:bb: 82:cd:98:cd:49:70:88:91:18:da:3f:58:8e:b1:f7:42:01:c0: 4f:de:d4:b2:a4:d6:e7:fb:30:a2:22:31:f3:5b:a9:54:2a:41: 83:fc:d6:35:bb:65:4a:58:4b:4f:c2:f5:0b:28:4b:23:78:f9: 46:ef:5a:c5:8e:f9:a1:9a:af:7a:bf:aa:cc:8e:30:eb:3d:4c: 0f:86:98:49:c7:ac:29:6a:85:b5:0d:42:71:c4:e5:60:3c:38: ff:04:7e:b8:e4:de:4e:16:e2:bf:e5:2d:f5:b3:8f:b8:53:10: 94:10:9d:fd:dd:f2:75:11:f8:83:17:1a:0a:50:c2:f1:38:03: 2d:5d:e5:68:b2:cf:53:67:77:6b:3a:1c:18:ae:ad:c9:f8:66: ca:99:71:ed:23:28:31:6a:47:88:a4:d3:ed:2d:fa:10:ba:68: 4e:16:91:f3:78:61:a7:c3:af:9c:0a:00:38:4d:5a:a8:cc:ba: c2:22:4c:88:4a:2d:56:83:c6:34:a8:64:aa:5d:0d:e9:c2:08: c1:e2:70:9b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hxA1ykdXlQghmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YjBkNTg1ZWMtMzAxZS00YmU4LTgxMTctNjgwYTYxMGZkYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkQX1aV2NVHhmcbTe+7xnaFA6vi6FGdx9Mfl IYra8szaSzD9aY6zHYPI47fHgkC/ccw8v7yKAxags1+ZLs36mSNI6WbVvtTcZ4lA CQ3fjgNckUVktma/Hf3se6aP11Dt0l4jTpL8zfYqHIFICONBHFAUMEXn7QGBg9Ja gV9EsMYLMFZxUOevvYrRLq7JNUC0XYAaBwGwUISMKwLeB8ipC02FylohztPzTJ2m CLHMZ7WcZPnvJ0dBpzVu2MB9hqoDcjpiazfLybDkbOUbNyCuh3gn7rjMG+UiXItv 1/h3zDiXkYqicm6dtqz727IIq3oCyvmUpPOTpMz6FlKP3RQigwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP3AOb5HbTQ4gFykyi0RAb0HpkKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGVjZTlkZWQtYTIxMy0z Y2VmLWE4MTctNzM3NWE0ZGFjZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASUPa5SCN1C41m31FPKE2ZLKI+h6uAsy05TUAeMxQT/U14x/a29Svp Cz5ZcKMS1u4B/uH0JruCzZjNSXCIkRjaP1iOsfdCAcBP3tSypNbn+zCiIjHzW6lU KkGD/NY1u2VKWEtPwvULKEsjePlG71rFjvmhmq96v6rMjjDrPUwPhphJx6wpaoW1 DUJxxOVgPDj/BH645N5OFuK/5S31s4+4UxCUEJ393fJ1EfiDFxoKUMLxOAMtXeVo ss9TZ3drOhwYrq3J+GbKmXHtIygxakeIpNPtLfoQumhOFpHzeGGnw6+cCgA4TVqo zLrCIkyISi1Wg8Y0qGSqXQ3pwgjB4nCb -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:53 2025 by rpki-client