$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25a30874-da02-3a6d-8142-0ef66fdf7c5c.roa File: 25a30874-da02-3a6d-8142-0ef66fdf7c5c.roa (raw, json) Hash identifier: M3EG5yFZ2hzsoubtwGQeTqAbgxzU38ebYg9nMSvO/Bo= Subject key identifier: 47:BF:C1:2F:5E:94:77:7A:53:BD:05:8B:05:01:1E:4B:13:D0:26:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF7409C79D022F9BCAB2C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25a30874-da02-3a6d-8142-0ef66fdf7c5c.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396608 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:40:9c:79:d0:22:f9:bc:ab:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=e539ee0d-0388-4e51-a7a9-6c0d2bf28f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:23:2d:11:b5:18:13:26:20:71:db:13:6c: fe:b9:29:35:58:58:d6:54:5f:fb:e3:f7:d8:98:83: f5:da:2f:e8:a5:56:dd:d5:96:c0:74:c3:ac:99:a0: e2:78:0d:e3:ca:92:a3:71:79:3e:f9:12:46:54:99: ff:7a:c4:b9:21:d8:8f:63:80:b6:c4:43:17:8e:3d: c6:ce:a6:c1:22:9e:0d:39:b0:ff:3b:2e:21:6a:15: 28:63:b2:56:fb:f5:fc:d9:a3:3c:d2:34:ac:41:b9: 2f:52:87:e8:06:10:c5:43:53:dc:1a:54:4b:c5:6f: 2e:05:f5:a6:2e:5a:0d:2b:69:56:04:45:7c:63:04: 17:59:bb:22:b5:45:5f:bb:0a:d1:5e:f8:12:05:80: 68:17:a2:f0:9e:5f:42:c2:52:43:bd:a4:2b:d2:eb: 5e:9c:65:57:5b:aa:b6:0f:7e:15:57:0d:30:70:37: b9:1a:ed:4e:15:57:6b:eb:98:97:d1:e2:6b:28:0c: ff:52:4c:fa:2e:c1:31:89:96:84:8d:25:96:f8:07: 88:39:24:db:fa:01:a7:81:35:b2:d2:a9:3f:04:b2: c3:89:ea:2e:3e:44:a2:3d:24:4f:08:cc:3c:3f:0a: e5:50:62:44:99:aa:74:8f:59:12:8c:b2:8b:85:ae: 1e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:C1:2F:5E:94:77:7A:53:BD:05:8B:05:01:1E:4B:13:D0:26:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25a30874-da02-3a6d-8142-0ef66fdf7c5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:62:5a:76:a2:85:ea:92:89:1f:61:70:9a:9d:08:23:17:a0: 84:e8:f0:80:fe:80:a0:c5:18:5f:b6:54:f3:69:da:d2:c3:68: b5:bf:d7:cd:24:90:af:d5:99:76:93:85:68:4b:44:c8:ad:69: ff:17:f9:16:dc:a0:04:41:e0:d8:70:9b:ee:b5:bd:ce:ce:b3: 77:e3:81:1c:ff:bb:0a:cc:04:a3:fe:5d:10:5f:f0:6c:55:bd: d0:0e:38:b3:fd:0e:ec:58:fc:da:6b:4c:65:34:53:16:1f:ba: 60:d8:1a:05:87:4b:c0:34:ee:af:4d:23:75:21:0e:e6:74:3e: 90:cd:fc:90:c8:13:8b:88:45:10:22:08:cf:47:5e:75:21:0b: 09:83:e9:51:1f:0a:9d:fe:35:e0:67:c1:c8:2d:50:f4:e2:3a: a0:44:f8:b5:6b:87:ad:05:c5:4d:5b:ff:34:95:b6:9f:77:61: f5:79:02:2e:b2:31:75:dc:65:9f:e1:b3:34:26:7f:18:4a:24: 3a:bb:ec:4c:be:b3:f2:58:e2:d5:b7:9e:a0:91:ca:b9:fa:0d: 26:c4:05:b1:86:5d:62:ae:18:ef:02:ca:3e:d4:34:d8:ea:f8: f9:b6:6e:d5:16:d9:27:71:9e:bd:75:b0:e3:a6:19:03:ec:2f: 7f:83:32:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90CcedAi+byrLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk ZTUzOWVlMGQtMDM4OC00ZTUxLWE3YTktNmMwZDJiZjI4ZjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQsjLRG1GBMmIHHbE2z+uSk1WFjWVF/74/fY mIP12i/opVbd1ZbAdMOsmaDieA3jypKjcXk++RJGVJn/esS5IdiPY4C2xEMXjj3G zqbBIp4NObD/Oy4hahUoY7JW+/X82aM80jSsQbkvUofoBhDFQ1PcGlRLxW8uBfWm LloNK2lWBEV8YwQXWbsitUVfuwrRXvgSBYBoF6Lwnl9CwlJDvaQr0utenGVXW6q2 D34VVw0wcDe5Gu1OFVdr65iX0eJrKAz/Ukz6LsExiZaEjSWW+AeIOSTb+gGngTWy 0qk/BLLDieouPkSiPSRPCMw8PwrlUGJEmap0j1kSjLKLha4eXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEe/wS9elHd6U70FiwUBHksT0CagMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjVhMzA4NzQtZGEwMi0z YTZkLTgxNDItMGVmNjZmZGY3YzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1iWnaiheqSiR9hcJqdCCMXoITo8ID+gKDFGF+2VPNp2tLDaLW/180k kK/VmXaThWhLRMitaf8X+RbcoARB4Nhwm+61vc7Os3fjgRz/uwrMBKP+XRBf8GxV vdAOOLP9DuxY/NprTGU0UxYfumDYGgWHS8A07q9NI3UhDuZ0PpDN/JDIE4uIRRAi CM9HXnUhCwmD6VEfCp3+NeBnwcgtUPTiOqBE+LVrh60FxU1b/zSVtp93YfV5Ai6y MXXcZZ/hszQmfxhKJDq77Ey+s/JY4tW3nqCRyrn6DSbEBbGGXWKuGO8Cyj7UNNjq +Pm2btUW2Sdxnr11sOOmGQPsL3+DMuE= -----END CERTIFICATE-----Generated at Mon Oct 20 03:27:37 2025 by rpki-client