$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c4e2abc-a600-394b-bbd6-9161f337a53c.roa File: 2c4e2abc-a600-394b-bbd6-9161f337a53c.roa (raw, json) Hash identifier: XUQjeFuB/lGPHQ/2RmdRI46USV9cgfZuQ/JYd2oVMys= Subject key identifier: FA:06:C1:B5:D7:7D:94:E4:86:F3:C0:A8:5C:86:82:E0:14:C9:B8:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8DF5B5E73ED812CDB000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c4e2abc-a600-394b-bbd6-9161f337a53c.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 22547 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8d:f5:b5:e7:3e:d8:12:cd:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=8cea5e4b-9cc6-4052-bcb7-38dc7e8badaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:c6:40:02:e4:1b:6d:a8:ac:c7:3c:af:e0: af:35:e4:0e:48:8d:32:9f:13:a8:bd:51:b3:a6:59: cb:51:49:38:cf:7e:31:04:1b:48:0f:aa:a0:ee:b2: 85:05:cf:2e:aa:d9:92:ad:c7:bc:b1:bb:67:2d:90: b9:57:d0:f5:25:b7:92:ec:a7:1f:d3:48:d6:ca:1c: 7d:3f:d2:f8:a6:b4:19:39:d6:a6:dd:2d:4f:d0:c0: e2:ae:37:3f:04:4e:9c:8f:b2:26:27:31:cc:f1:3f: 56:94:86:41:7a:22:f3:71:33:9f:da:cf:4b:bd:bd: da:af:e8:46:5d:10:fe:86:49:9b:cd:ca:bf:e3:15: 1a:5b:81:4b:3c:0e:87:60:b5:76:e3:9e:ef:5e:93: 5f:0b:5d:1b:d9:5b:92:39:a9:e2:15:79:9d:53:92: 25:dc:ba:a5:7f:df:c4:51:56:25:5f:7e:c5:20:ca: 13:6f:2a:6a:28:79:69:b5:e6:73:ed:43:a2:c2:b8: 9d:62:e4:fa:f3:5d:1b:d5:93:d1:04:67:8f:16:85: 37:47:a9:fa:5c:ab:46:1f:97:8c:96:49:05:f4:84: 12:e3:b8:8b:5c:fc:b2:af:f5:bb:57:41:5b:55:44: e6:e4:33:2c:ed:d8:3a:02:31:79:81:92:48:b2:4f: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:C1:B5:D7:7D:94:E4:86:F3:C0:A8:5C:86:82:E0:14:C9:B8:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2c4e2abc-a600-394b-bbd6-9161f337a53c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:b6:84:dd:72:66:35:a7:db:c1:5d:ee:7b:13:0e:77:04:4a: ee:cb:e6:c4:7d:27:fb:be:55:e7:f2:6c:bf:8e:b4:ac:b6:f8: 18:ff:28:5b:af:7a:f8:c1:84:16:0f:95:c9:13:be:31:8d:bb: 77:5f:31:75:ef:32:0b:45:15:25:a2:0a:18:13:02:33:88:b6: b2:0a:92:bc:7a:bf:d6:ec:91:eb:aa:bb:27:e8:73:f2:c1:40: 2b:5b:cf:d2:2c:f5:94:88:1c:98:55:08:a1:77:3c:a1:de:cc: ec:d7:ee:f9:21:f2:35:07:96:29:33:bd:c8:d0:21:a0:3f:c8: be:0e:ef:ef:f5:20:26:a2:7e:fd:08:7b:c7:e5:4a:df:4c:39: bb:ec:d0:9d:f4:84:5e:f2:06:be:7f:c3:13:49:0f:30:48:18: 53:e7:d6:73:4e:04:27:d6:68:cb:76:f3:e6:44:5c:99:64:14: 60:24:76:0d:ed:75:85:01:79:8e:cd:06:bf:7e:7f:3d:30:0c: 06:fa:47:01:94:aa:b5:48:96:01:c4:f9:a4:0b:fb:8c:20:6c: b3:9b:fc:89:e5:f9:49:c8:01:0f:53:35:48:7f:fd:07:06:e2: c7:b8:33:f8:76:f1:97:76:2c:63:9d:e6:f2:6c:f7:9c:97:9c: 53:c4:60:69 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI31tec+2BLNsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OGNlYTVlNGItOWNjNi00MDUyLWJjYjctMzhkYzdlOGJhZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHTGQALkG22orMc8r+CvNeQOSI0ynxOovVGz plnLUUk4z34xBBtID6qg7rKFBc8uqtmSrce8sbtnLZC5V9D1JbeS7Kcf00jWyhx9 P9L4prQZOdam3S1P0MDirjc/BE6cj7ImJzHM8T9WlIZBeiLzcTOf2s9Lvb3ar+hG XRD+hkmbzcq/4xUaW4FLPA6HYLV2457vXpNfC10b2VuSOaniFXmdU5Il3Lqlf9/E UVYlX37FIMoTbypqKHlpteZz7UOiwridYuT6810b1ZPRBGePFoU3R6n6XKtGH5eM lkkF9IQS47iLXPyyr/W7V0FbVUTm5DMs7dg6AjF5gZJIsk92XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPoGwbXXfZTkhvPAqFyGguAUybiJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmM0ZTJhYmMtYTYwMC0z OTRiLWJiZDYtOTE2MWYzMzdhNTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCjtoTdcmY1p9vBXe57Ew53BEruy+bEfSf7vlXn8my/jrSstvgY/yhb r3r4wYQWD5XJE74xjbt3XzF17zILRRUlogoYEwIziLayCpK8er/W7JHrqrsn6HPy wUArW8/SLPWUiByYVQihdzyh3szs1+75IfI1B5YpM73I0CGgP8i+Du/v9SAmon79 CHvH5UrfTDm77NCd9IRe8ga+f8MTSQ8wSBhT59ZzTgQn1mjLdvPmRFyZZBRgJHYN 7XWFAXmOzQa/fn89MAwG+kcBlKq1SJYBxPmkC/uMIGyzm/yJ5flJyAEPUzVIf/0H BuLHuDP4dvGXdixjnebybPecl5xTxGBp -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:40 2025 by rpki-client