$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13a86cbe-7685-320b-bad3-cbbfc4f07c2a.roa File: 13a86cbe-7685-320b-bad3-cbbfc4f07c2a.roa (raw, json) Hash identifier: gpDEkyoQXV5VJQ2tCg+xmNgjtlJZxazXgQq/kQ852FQ= Subject key identifier: 83:6B:08:81:57:A3:3E:FD:59:96:CC:FB:75:BC:FA:6A:D9:46:94:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8BBA5D3C8EF64E6A1480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13a86cbe-7685-320b-bad3-cbbfc4f07c2a.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 36616 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8b:ba:5d:3c:8e:f6:4e:6a:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=a8de5e1b-3869-414a-94d3-627b93d1a1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:82:57:93:c5:50:74:e2:a5:35:66:d6:29:0e: 62:93:fd:70:93:ba:ee:73:f7:01:5a:0c:ed:8c:d9: 91:5d:58:63:a5:aa:63:20:c8:44:b0:8e:d9:a0:42: 9c:3c:5d:e6:a8:b8:fe:8b:5f:99:69:cb:65:63:16: e7:27:cd:43:2b:c6:4b:cb:44:ac:73:ba:3e:2a:b6: 41:b1:4c:d8:c2:e8:5f:cd:c1:70:27:9e:95:60:a0: bb:f1:0e:b9:1b:1b:d9:7d:5a:45:e0:71:a6:8b:f1: ab:8f:e4:54:2d:1d:52:9b:fe:69:8b:54:25:48:ca: c0:f6:2f:29:e6:e6:59:fa:02:c2:47:fa:fe:1d:0f: 63:2d:f3:d7:73:98:d2:80:b3:ae:5f:ca:e9:83:d2: aa:6c:f4:c7:95:c7:5a:c6:27:9d:01:28:aa:ac:69: 82:eb:2c:33:32:61:6f:5d:d8:8a:89:65:70:61:c3: 21:3d:8a:8a:2c:ac:d1:fc:79:91:db:8e:50:1d:a8: 5c:3c:4c:b3:22:5d:2a:86:80:91:53:ae:bd:d1:e6: f9:e2:c9:3f:1a:cf:fa:21:4e:23:87:71:5c:f8:be: ed:40:2d:00:7a:74:59:da:fb:b3:24:4d:47:b7:5f: c0:a3:7c:b7:f8:34:56:cc:e8:68:71:1c:e4:99:e5: 77:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6B:08:81:57:A3:3E:FD:59:96:CC:FB:75:BC:FA:6A:D9:46:94:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/13a86cbe-7685-320b-bad3-cbbfc4f07c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b8:e0:49:d7:8b:29:b6:37:24:4c:57:00:1e:bb:7d:84:76: c7:f7:6a:49:59:7f:76:b2:7b:86:18:e4:48:29:87:dd:55:32: 97:1a:06:79:db:13:c8:8b:6e:e9:08:33:6a:91:a0:e0:2e:7d: 08:46:b3:87:00:a4:df:a0:ea:38:6c:8a:a8:1a:45:25:d4:95: 1c:1d:c3:d9:a1:65:1a:39:b8:bc:2d:3a:21:1f:b5:18:5a:41: 39:30:2e:c5:9c:a0:7d:e1:6f:c2:96:8d:c4:80:81:58:f4:89: a3:71:60:dd:6f:47:ef:2a:79:b9:e3:fe:d2:e0:86:2d:1d:3d: 52:0b:a4:d2:7b:db:4d:73:65:ce:66:8f:cf:72:59:cb:5d:3c: 7f:a9:33:8b:9a:df:e9:79:46:83:4f:b6:30:d7:57:c6:ed:21: 99:4c:15:84:44:7c:ae:4b:45:ec:c5:ec:cc:b3:6a:89:e2:95: 98:d8:95:33:c1:7b:ff:3b:4b:c4:ae:ce:dc:1b:0d:0e:20:47: 25:77:02:6e:12:8b:26:fd:d3:bb:44:e7:93:09:97:d6:1f:a7: c1:51:59:ed:3d:44:fd:62:2b:29:0f:df:98:05:5f:89:5e:67: 6d:6c:5a:1b:c9:e4:5e:dd:c0:ba:d6:3d:a9:b3:10:ba:56:2f: 9f:7e:7d:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIu6XTyO9k5qFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YThkZTVlMWItMzg2OS00MTRhLTk0ZDMtNjI3YjkzZDFhMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYJXk8VQdOKlNWbWKQ5ik/1wk7ruc/cBWgzt jNmRXVhjpapjIMhEsI7ZoEKcPF3mqLj+i1+ZactlYxbnJ81DK8ZLy0Ssc7o+KrZB sUzYwuhfzcFwJ56VYKC78Q65GxvZfVpF4HGmi/Grj+RULR1Sm/5pi1QlSMrA9i8p 5uZZ+gLCR/r+HQ9jLfPXc5jSgLOuX8rpg9KqbPTHlcdaxiedASiqrGmC6ywzMmFv XdiKiWVwYcMhPYqKLKzR/HmR245QHahcPEyzIl0qhoCRU6690eb54sk/Gs/6IU4j h3Fc+L7tQC0AenRZ2vuzJE1Ht1/Ao3y3+DRWzOhocRzkmeV38wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFINrCIFXoz79WZbM+3W8+mrZRpQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTNhODZjYmUtNzY4NS0z MjBiLWJhZDMtY2JiZmM0ZjA3YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBauOBJ14sptjckTFcAHrt9hHbH92pJWX92snuGGORIKYfdVTKXGgZ5 2xPIi27pCDNqkaDgLn0IRrOHAKTfoOo4bIqoGkUl1JUcHcPZoWUaObi8LTohH7UY WkE5MC7FnKB94W/Clo3EgIFY9ImjcWDdb0fvKnm54/7S4IYtHT1SC6TSe9tNc2XO Zo/PclnLXTx/qTOLmt/peUaDT7Yw11fG7SGZTBWERHyuS0XsxezMs2qJ4pWY2JUz wXv/O0vErs7cGw0OIEcldwJuEosm/dO7ROeTCZfWH6fBUVntPUT9YispD9+YBV+J XmdtbFobyeRe3cC61j2psxC6Vi+ffn1F -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:05 2025 by rpki-client