$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa File: 1398b2ca-4578-35a3-8153-34f01ea14169.roa (raw, json) Hash identifier: LUqPK9foV6CFc2OZ5XQtj0o2cbDXu+wNTpvb+DCJb08= Subject key identifier: 6C:9E:64:84:73:A1:5A:83:B8:24:63:19:45:F5:0C:E6:1F:C3:60:FF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C8A8256EAC5272016D300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396594 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8a:82:56:ea:c5:27:20:16:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=92759412-6e72-479d-8644-14854c07eea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0d:46:dc:38:56:a7:86:01:bc:cc:a7:9e:c5: a5:0f:f4:20:71:a6:35:f9:bc:18:d5:aa:5c:bc:bf: 10:4d:1f:e9:ae:13:9d:a0:d8:2c:0f:31:b2:f6:ae: dd:34:17:a2:17:81:0c:53:d3:d5:0d:a9:e0:bc:01: 3f:5b:98:74:6a:aa:b0:e6:68:d1:cf:f9:dd:f3:f3: d5:eb:2f:e0:58:af:6c:bd:06:f9:36:0a:fa:15:fa: df:09:3c:d7:4d:9b:bc:5b:10:54:53:83:83:73:7c: 2b:ca:65:a3:8f:33:69:34:da:d0:48:28:13:7d:d4: 71:9a:01:3a:85:3b:f6:e8:10:cc:9e:7e:d9:49:bb: c5:0b:e3:d4:36:f0:48:15:d8:08:4b:d2:10:e6:3a: 74:55:42:51:a1:e1:46:85:3a:aa:f0:02:f7:19:23: 9a:a3:75:f6:e5:e8:e6:be:9c:bb:45:1a:05:9f:87: 6a:a2:1a:4f:90:f0:af:08:c0:1c:02:46:61:36:6c: 0a:d7:3e:a9:3a:00:13:63:78:ce:0c:23:bd:92:87: 9a:98:ff:be:b8:78:ed:5a:5d:71:80:93:71:e5:b4: b7:a1:4f:52:68:ad:e1:de:e3:1f:b0:c7:45:8a:62: 67:00:e3:a9:48:8c:13:75:2f:22:72:3a:97:f0:e1: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:9E:64:84:73:A1:5A:83:B8:24:63:19:45:F5:0C:E6:1F:C3:60:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1398b2ca-4578-35a3-8153-34f01ea14169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:14:8d:f2:f6:35:0d:55:e6:9e:d6:fd:d6:92:fd:18:0a:a7: b6:13:98:da:bc:02:e9:75:a7:57:a3:5c:19:53:f9:c4:9f:22: 26:6b:bd:6d:6a:0f:8a:49:f1:a8:1e:12:36:4e:4a:9d:3b:b8: cc:09:83:ab:e7:02:e4:e4:e2:a1:ba:c7:61:e6:64:b0:ae:4e: 92:c6:37:fb:2e:d9:5b:c9:57:2e:64:2b:e4:d0:ec:83:a2:18: c2:e4:78:d3:fd:85:27:fb:6a:45:af:56:0c:63:ed:0c:fc:28: bb:38:07:81:6e:8e:eb:e2:f7:11:6b:36:c8:be:d2:c1:17:e4: 2f:61:33:4f:54:47:a9:91:b8:fe:d3:0e:9e:ab:85:f8:83:77: aa:83:4f:d2:f6:fa:1a:50:a8:13:da:95:fa:23:06:0b:eb:92: 83:3f:55:ec:65:ed:94:43:eb:b3:b2:04:06:88:5b:d0:0f:cc: b5:54:bf:c6:8a:65:ab:17:05:87:c2:cc:72:0b:c1:7c:16:03: 0a:a0:fb:52:e3:e3:86:9e:1b:9f:98:5c:57:2d:29:86:4a:39: 66:4e:79:b5:7c:79:4a:ef:e6:4d:73:16:3e:c5:dd:76:cb:c2: fa:f9:f1:82:44:d5:e4:2f:fb:a7:11:c5:67:eb:25:01:f1:51: 6d:12:d4:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIqCVurFJyAW0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk OTI3NTk0MTItNmU3Mi00NzlkLTg2NDQtMTQ4NTRjMDdlZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw1G3DhWp4YBvMynnsWlD/QgcaY1+bwY1apc vL8QTR/prhOdoNgsDzGy9q7dNBeiF4EMU9PVDangvAE/W5h0aqqw5mjRz/nd8/PV 6y/gWK9svQb5Ngr6FfrfCTzXTZu8WxBUU4ODc3wrymWjjzNpNNrQSCgTfdRxmgE6 hTv26BDMnn7ZSbvFC+PUNvBIFdgIS9IQ5jp0VUJRoeFGhTqq8AL3GSOao3X25ejm vpy7RRoFn4dqohpPkPCvCMAcAkZhNmwK1z6pOgATY3jODCO9koeamP++uHjtWl1x gJNx5bS3oU9SaK3h3uMfsMdFimJnAOOpSIwTdS8icjqX8OENWQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGyeZIRzoVqDuCRjGUX1DOYfw2D/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTM5OGIyY2EtNDU3OC0z NWEzLTgxNTMtMzRmMDFlYTE0MTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC1FI3y9jUNVeae1v3Wkv0YCqe2E5javALpdadXo1wZU/nEnyIma71t ag+KSfGoHhI2TkqdO7jMCYOr5wLk5OKhusdh5mSwrk6Sxjf7LtlbyVcuZCvk0OyD ohjC5HjT/YUn+2pFr1YMY+0M/Ci7OAeBbo7r4vcRazbIvtLBF+QvYTNPVEepkbj+ 0w6eq4X4g3eqg0/S9voaUKgT2pX6IwYL65KDP1XsZe2UQ+uzsgQGiFvQD8y1VL/G imWrFwWHwsxyC8F8FgMKoPtS4+OGnhufmFxXLSmGSjlmTnm1fHlK7+ZNcxY+xd12 y8L6+fGCRNXkL/unEcVn6yUB8VFtEtSA -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:00 2025 by rpki-client