$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa File: 139b212b-4391-3447-a68e-f4fa684c76b1.roa (raw, json) Hash identifier: ptHICR+DKVQdJuv4bDEOjD0p1j+n4teWDz+4GiHE7jM= Subject key identifier: 97:6A:27:FA:BF:5D:93:56:07:75:52:27:99:00:1A:DE:13:68:C3:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C87A33E9DFAF18225E000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 40647 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:87:a3:3e:9d:fa:f1:82:25:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=21ebf69e-c231-492c-9e57-fb6a09ed70e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:98:6d:31:d1:95:79:71:c7:14:4d:0e:63: 03:a3:35:fd:40:08:98:d3:27:a5:8a:a2:82:b6:63: ea:4b:08:d5:b2:e6:f1:6d:49:1f:7e:9f:c3:97:1a: 5d:01:28:c0:13:37:72:98:91:5c:01:82:c2:4f:6d: 66:83:64:ae:d7:32:45:23:6a:32:fb:58:d6:ee:c3: 99:cd:aa:51:e5:ea:d1:f6:64:d2:28:df:96:30:f7: 26:2a:c5:46:f3:90:7b:fa:0b:e0:64:94:08:5d:0d: ec:6d:4a:a4:c3:d3:0a:be:be:90:0e:c1:93:df:b1: fd:4c:9a:4a:1a:be:72:b0:55:1e:e7:59:38:b3:65: 29:54:07:f9:0f:c9:39:27:3f:21:68:72:9d:24:8f: ab:12:db:c7:e3:50:c9:6e:f0:6a:4c:31:c7:2b:a7: 51:0d:17:e8:62:0b:4d:66:89:4a:70:4f:30:85:4d: 0c:1f:b9:c7:14:2e:1a:b1:e5:d4:2e:7b:4d:9a:5c: 4b:3f:40:5d:4e:80:3b:76:55:2e:a2:05:1c:5b:cc: 81:36:a1:ea:91:a2:e2:0c:65:91:e8:ba:e3:2e:1d: e9:65:77:08:39:d8:f6:fa:c0:b1:95:4d:09:74:38: 62:e4:fa:7c:c8:42:28:e7:8e:51:a2:8f:21:f1:28: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:6A:27:FA:BF:5D:93:56:07:75:52:27:99:00:1A:DE:13:68:C3:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/139b212b-4391-3447-a68e-f4fa684c76b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ea:b2:ab:25:08:eb:52:2d:ab:c2:ab:ef:4d:76:f3:58:e3: d9:63:ca:a6:d5:0c:7a:a8:5d:de:a0:7e:d1:08:c5:ef:14:9e: ef:68:e2:98:7d:94:25:93:29:b9:bc:92:1c:0b:cb:5e:e0:30: 17:1b:4e:a3:2a:e1:f5:69:b0:76:be:c7:14:ef:04:f8:fc:e0: 7b:33:77:04:c5:6c:35:c0:bf:2a:1e:83:91:94:58:9d:7a:d2: b5:f9:2d:90:93:e1:85:91:00:8f:d2:32:2f:fa:c8:7c:bf:fe: 1c:aa:2a:ff:af:8b:df:fa:2f:1b:d6:b7:9c:cb:c2:ba:ec:49: b6:69:ec:75:20:a2:a5:1f:39:69:c1:f3:fc:3e:88:ce:7a:6b: b5:7e:25:39:e0:3e:2a:a0:24:e1:e1:f4:1b:13:68:7b:a8:a4: 42:bd:4e:f1:45:71:95:61:2a:cb:05:88:f1:9e:13:6c:35:26: 1d:cb:c2:fe:60:26:f0:f9:32:dd:2f:b4:40:35:17:68:fc:08: 18:23:fb:f9:52:77:79:4c:79:17:65:8f:e9:cd:4e:d5:be:14: 69:86:e0:04:33:cf:2f:10:2d:30:a4:be:e3:bf:bc:a9:e0:e3: c3:bc:62:6f:b7:4e:69:c5:7e:35:b1:e5:89:ef:34:33:db:4a: e4:71:a9:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIejPp368YIl4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MjFlYmY2OWUtYzIzMS00OTJjLTllNTctZmI2YTA5ZWQ3MGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGKYbTHRlXlxxxRNDmMDozX9QAiY0yeliqKC tmPqSwjVsubxbUkffp/DlxpdASjAEzdymJFcAYLCT21mg2Su1zJFI2oy+1jW7sOZ zapR5erR9mTSKN+WMPcmKsVG85B7+gvgZJQIXQ3sbUqkw9MKvr6QDsGT37H9TJpK Gr5ysFUe51k4s2UpVAf5D8k5Jz8haHKdJI+rEtvH41DJbvBqTDHHK6dRDRfoYgtN ZolKcE8whU0MH7nHFC4aseXULntNmlxLP0BdToA7dlUuogUcW8yBNqHqkaLiDGWR 6LrjLh3pZXcIOdj2+sCxlU0JdDhi5Pp8yEIo545Roo8h8Sh9qwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJdqJ/q/XZNWB3VSJ5kAGt4TaMP6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTM5YjIxMmItNDM5MS0z NDQ3LWE2OGUtZjRmYTY4NGM3NmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAf6rKrJQjrUi2rwqvvTXbzWOPZY8qm1Qx6qF3eoH7RCMXvFJ7vaOKY fZQlkym5vJIcC8te4DAXG06jKuH1abB2vscU7wT4/OB7M3cExWw1wL8qHoORlFid etK1+S2Qk+GFkQCP0jIv+sh8v/4cqir/r4vf+i8b1recy8K67Em2aex1IKKlHzlp wfP8PojOemu1fiU54D4qoCTh4fQbE2h7qKRCvU7xRXGVYSrLBYjxnhNsNSYdy8L+ YCbw+TLdL7RANRdo/AgYI/v5Und5THkXZY/pzU7VvhRphuAEM88vEC0wpL7jv7yp 4OPDvGJvt05pxX41seWJ7zQz20rkcalp -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:07 2025 by rpki-client