$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa File: 17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa (raw, json) Hash identifier: YK6NiUmgeXtO/02fdjZCf/wGDj0651pOR+9KddvcYJQ= Subject key identifier: 80:60:76:E1:31:EB:E0:E5:5F:D7:E7:13:8D:78:80:01:2D:04:E9:F1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B56D72AB3F80DD292EFB3F840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 397211 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2a:b3:f8:0d:d2:92:ef:b3:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=d080a5f1-d455-445e-8730-aec9271a1b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:11:9d:41:91:fa:59:f5:22:e5:0d:f9:0d:07: 65:dd:d9:07:73:56:a2:56:d3:ef:1c:87:de:f9:f5: 47:d6:33:bb:d5:7f:1d:61:0c:84:22:41:9f:a3:a3: 5d:d0:6d:bd:61:a7:ac:c8:40:50:64:f1:ba:4f:17: 15:4d:eb:d3:01:ab:57:cb:36:2e:86:a2:c3:2c:c8: 61:7a:30:3d:02:53:0d:68:bb:81:d0:00:be:08:06: 39:ab:84:0a:34:b9:a0:21:ed:1f:11:66:03:4c:49: 7d:62:62:d0:ea:38:cc:6b:7a:6d:93:7b:8b:0d:88: 66:18:29:40:8b:7a:14:89:75:fd:6c:42:63:b5:c8: 6d:bc:e0:5f:07:3e:34:6f:5b:80:d0:1d:ff:b7:1d: 72:c2:13:fe:02:59:68:62:f5:f1:64:e8:e0:d2:0c: fa:09:f4:0b:a8:f1:10:7c:db:ea:82:87:4d:73:b8: b2:02:ad:c6:7d:ce:36:bb:60:0f:d0:be:79:91:b0: 6e:21:61:c7:b5:72:82:69:58:93:bc:dc:be:55:ec: 53:02:34:d9:8b:0c:fb:f7:04:61:3d:bf:78:2d:2f: fa:39:b6:75:c5:30:c0:65:9e:cd:02:96:8a:7f:d9: eb:b8:70:b2:f1:d7:a1:ab:59:39:e5:98:9f:79:42: f0:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:60:76:E1:31:EB:E0:E5:5F:D7:E7:13:8D:78:80:01:2D:04:E9:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/17198c14-0a53-31a7-aa1d-ee8f2a5db40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:88:c0:cc:e8:2a:4c:b5:86:a7:08:17:12:1a:7a:04:14:c6: 0f:b0:21:13:87:57:e8:9d:7c:11:b3:3a:ed:84:b3:76:df:24: f5:5f:ba:1b:96:4c:f5:64:b0:f1:9c:5b:33:c8:8f:47:7f:d9: 91:68:9f:97:6a:67:7f:c8:1d:15:65:6d:82:03:18:e4:9c:66: c3:7b:d8:ab:d0:71:a5:97:dc:67:59:64:22:bd:73:d0:d7:d6: e2:83:9c:f1:09:f8:75:c3:a9:9d:99:50:7f:8c:60:14:6b:b4: c0:85:a7:71:cf:45:4b:4f:ee:01:69:95:10:11:40:ee:b1:67: 50:13:29:83:19:86:98:ff:08:a2:6a:c8:04:98:94:40:2c:07: b8:0c:78:df:df:c7:a3:df:cc:2e:2e:b4:35:9b:2e:b2:c5:41: 2d:8e:39:d1:db:dd:d4:58:48:6a:a6:36:a5:27:f1:24:b6:9a: 8a:dc:3c:c2:19:54:63:13:ea:d2:c5:f3:7f:48:05:84:fd:87: 6b:28:3e:a0:55:9d:e0:ef:83:12:84:be:fe:c6:9c:9f:ba:9d: e1:ad:f2:dd:84:e6:f5:78:62:c8:87:fd:ad:81:64:76:dc:54: e0:22:42:8e:3c:ea:2d:20:ff:ae:a9:d3:bf:32:10:ba:81:82: 6a:24:98:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW1yqz+A3Sku+z+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZDA4MGE1ZjEtZDQ1NS00NDVlLTg3MzAtYWVjOTI3MWExYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBGdQZH6WfUi5Q35DQdl3dkHc1aiVtPvHIfe +fVH1jO71X8dYQyEIkGfo6Nd0G29YaesyEBQZPG6TxcVTevTAatXyzYuhqLDLMhh ejA9AlMNaLuB0AC+CAY5q4QKNLmgIe0fEWYDTEl9YmLQ6jjMa3ptk3uLDYhmGClA i3oUiXX9bEJjtchtvOBfBz40b1uA0B3/tx1ywhP+AlloYvXxZOjg0gz6CfQLqPEQ fNvqgodNc7iyAq3Gfc42u2AP0L55kbBuIWHHtXKCaViTvNy+VexTAjTZiwz79wRh Pb94LS/6ObZ1xTDAZZ7NApaKf9nruHCy8dehq1k55ZifeULwhwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIBgduEx6+DlX9fnE414gAEtBOnxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTcxOThjMTQtMGE1My0z MWE3LWFhMWQtZWU4ZjJhNWRiNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBaiMDM6CpMtYanCBcSGnoEFMYPsCETh1fonXwRszrthLN23yT1X7ob lkz1ZLDxnFszyI9Hf9mRaJ+Xamd/yB0VZW2CAxjknGbDe9ir0HGll9xnWWQivXPQ 19big5zxCfh1w6mdmVB/jGAUa7TAhadxz0VLT+4BaZUQEUDusWdQEymDGYaY/wii asgEmJRALAe4DHjf38ej38wuLrQ1my6yxUEtjjnR293UWEhqpjalJ/EktpqK3DzC GVRjE+rSxfN/SAWE/YdrKD6gVZ3g74MShL7+xpyfup3hrfLdhOb1eGLIh/2tgWR2 3FTgIkKOPOotIP+uqdO/MhC6gYJqJJi2 -----END CERTIFICATE-----Generated at Mon Oct 20 07:03:22 2025 by rpki-client