$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234845a1-2afe-39d4-8c23-6e4f40199453.roa File: 234845a1-2afe-39d4-8c23-6e4f40199453.roa (raw, json) Hash identifier: D+b6+rUCkAh39Qva8JDEXYZmKXdSkzjwuKk/bnEfwaM= Subject key identifier: 79:9B:89:E4:7B:09:4C:D2:C5:C4:50:90:CA:55:7B:73:EE:8A:59:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF746A2B9CEDC3619A090C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234845a1-2afe-39d4-8c23-6e4f40199453.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396583 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:46:a2:b9:ce:dc:36:19:a0:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=92d69895-56f1-46e7-9594-54a02c51c899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:95:25:32:b9:8b:c7:89:3f:13:20:7e:3f:17: 61:3f:9e:4d:2d:26:3a:7e:ec:9a:26:6c:fb:75:b8: 83:d3:61:bc:3e:a1:6c:fa:47:55:e0:db:32:b0:45: 5b:3b:29:4d:b0:a9:4c:c2:83:c4:3c:89:a6:28:bb: 56:50:39:ab:8d:26:45:e0:3a:82:ed:3e:ec:fc:30: 0d:46:89:52:2e:dc:ae:94:d7:02:0b:3d:b5:54:a8: 6b:ee:ef:73:3d:25:dd:0b:28:ae:90:54:57:48:34: 29:54:ba:d2:23:cf:af:23:ab:c4:a8:e4:53:6e:97: d1:01:b6:ab:b0:b6:e8:df:e0:00:39:75:4d:52:a7: 62:f2:44:23:02:b0:fa:65:29:ba:13:04:02:35:a4: b5:98:fa:ce:dc:90:c3:88:2a:2e:ad:54:07:72:de: d1:30:a5:1d:49:6c:86:5b:d5:3a:93:83:50:53:26: b0:ed:11:77:b7:9f:b6:03:09:04:be:9b:3b:6f:30: 15:39:75:58:4c:81:84:37:1a:c5:18:59:37:c5:47: e1:cc:2a:d2:b8:c6:b1:05:88:40:41:dc:f2:36:84: a0:ac:38:9b:fc:6d:37:42:37:f9:c6:f4:01:54:da: 63:4e:51:83:3b:dc:c6:fa:5e:25:3e:b2:e2:2b:4a: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9B:89:E4:7B:09:4C:D2:C5:C4:50:90:CA:55:7B:73:EE:8A:59:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/234845a1-2afe-39d4-8c23-6e4f40199453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0a:45:71:1c:43:e8:e4:60:ac:b4:76:8b:d7:48:06:1c:97: 2d:df:0c:02:aa:b1:cc:2e:a3:0c:19:23:7d:25:ea:54:b5:42: c4:2a:29:0e:06:03:a1:90:1d:41:2a:8f:ef:e4:c3:32:7e:fd: 6e:42:be:7b:95:d2:1a:49:b5:ec:cc:e0:36:56:50:c0:0e:62: 87:48:e0:10:3d:b2:69:d3:d3:fc:c5:1e:4f:4a:9d:0b:31:82: 61:7b:99:6a:f4:b6:2a:21:4a:60:2d:cd:2e:69:d3:af:f2:79: 3e:69:b4:a5:4a:46:f2:b0:b1:d3:ff:83:b6:89:78:fd:02:85: 56:a6:bb:2e:87:81:9f:c6:21:08:22:37:bf:59:88:ef:5d:3c: c6:5a:52:30:d9:a6:b8:89:b5:cb:65:09:7a:76:c1:9f:76:d8: 76:1d:b2:7b:19:76:7b:fd:94:8e:75:8f:73:11:28:01:23:26: d6:d2:71:76:d1:6c:d1:52:55:88:66:db:62:e7:e5:79:68:db: c2:3e:e4:51:bb:ab:42:e7:71:b1:ad:ca:36:7c:e7:fd:a7:e6: 6f:4c:9b:1a:64:75:89:2f:7f:0d:bc:fc:20:7c:fc:18:2e:73: b2:c9:45:b5:20:b6:38:35:9c:b9:74:64:ba:03:ea:23:78:8b: 78:16:89:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90aiuc7cNhmgkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk OTJkNjk4OTUtNTZmMS00NmU3LTk1OTQtNTRhMDJjNTFjODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJUlMrmLx4k/EyB+PxdhP55NLSY6fuyaJmz7 dbiD02G8PqFs+kdV4NsysEVbOylNsKlMwoPEPImmKLtWUDmrjSZF4DqC7T7s/DAN RolSLtyulNcCCz21VKhr7u9zPSXdCyiukFRXSDQpVLrSI8+vI6vEqORTbpfRAbar sLbo3+AAOXVNUqdi8kQjArD6ZSm6EwQCNaS1mPrO3JDDiCourVQHct7RMKUdSWyG W9U6k4NQUyaw7RF3t5+2AwkEvps7bzAVOXVYTIGENxrFGFk3xUfhzCrSuMaxBYhA QdzyNoSgrDib/G03Qjf5xvQBVNpjTlGDO9zG+l4lPrLiK0ojGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmbieR7CUzSxcRQkMpVe3PuilmxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjM0ODQ1YTEtMmFmZS0z OWQ0LThjMjMtNmU0ZjQwMTk5NDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0KRXEcQ+jkYKy0dovXSAYcly3fDAKqscwuowwZI30l6lS1QsQqKQ4G A6GQHUEqj+/kwzJ+/W5CvnuV0hpJtezM4DZWUMAOYodI4BA9smnT0/zFHk9KnQsx gmF7mWr0tiohSmAtzS5p06/yeT5ptKVKRvKwsdP/g7aJeP0ChVamuy6HgZ/GIQgi N79ZiO9dPMZaUjDZpriJtctlCXp2wZ922HYdsnsZdnv9lI51j3MRKAEjJtbScXbR bNFSVYhm22Ln5Xlo28I+5FG7q0LncbGtyjZ85/2n5m9MmxpkdYkvfw28/CB8/Bgu c7LJRbUgtjg1nLl0ZLoD6iN4i3gWiZ8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:38 2025 by rpki-client