$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa File: 2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa (raw, json) Hash identifier: d8nzgTVLgDhnChzX9a26bqu8L7S5+leVYriXWP1tLKc= Subject key identifier: 41:C0:34:2F:FC:0D:F0:78:33:D0:4F:14:46:D3:4D:5F:7E:65:39:43 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C86CF4235DAF481F004C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 36625 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:86:cf:42:35:da:f4:81:f0:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=36303a20-0d5e-4aa6-a749-a76d26e732c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:75:ac:c1:0f:54:90:b9:b8:c1:e9:81:19:6f: 3d:4b:79:c6:07:4f:77:b0:35:e0:ba:82:f9:e8:b8: d9:7d:4d:bd:5f:6e:58:bc:49:07:3f:a6:47:19:98: fa:14:1e:ce:99:70:81:54:21:51:36:f9:86:1b:40: 5b:c8:50:0a:2a:99:42:30:03:a7:b3:e0:2d:60:4c: 6e:95:5d:79:58:1f:96:05:c7:0a:70:5e:4d:d3:b1: 70:d0:96:ea:83:1d:17:d3:69:db:5f:2e:72:1c:e6: 9d:93:d8:61:e6:7c:f5:8f:c3:7b:4b:39:82:f9:f2: 9d:e2:37:79:68:71:40:6b:7b:55:d9:d0:4c:a8:f0: 3f:9a:d6:d2:a6:de:0e:0e:22:a3:a4:88:27:6f:2d: 9f:4a:82:22:44:48:32:77:9b:40:5f:bb:97:b6:43: 54:55:45:a7:81:57:41:88:60:e0:3c:7d:32:cf:32: ce:95:28:15:25:9e:09:88:ff:47:0e:05:28:2c:90: 32:7c:f1:8d:4d:fb:c7:92:ae:a6:a1:a2:34:47:7a: 1e:70:a2:fe:cf:d9:f4:91:33:f8:c2:7a:d9:40:92: 56:44:35:05:76:7b:f6:66:c2:6d:11:e1:e0:c2:95: 18:52:7b:b8:1f:ee:b3:f7:c2:17:89:c2:ef:91:44: e9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:34:2F:FC:0D:F0:78:33:D0:4F:14:46:D3:4D:5F:7E:65:39:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2ca68ef4-8d35-3b2b-9d0e-fe460425ea72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f5:de:cb:27:3e:ab:23:1e:24:04:33:e5:be:95:61:a6:eb: e1:a2:2d:a0:90:39:39:c4:07:5d:4b:48:5f:e8:4d:78:44:d9: af:48:f7:ce:4b:d5:76:33:8e:bd:a7:e9:d8:23:25:cf:33:1f: 47:ef:82:7f:8a:84:a0:3e:9c:f9:74:12:2f:4f:73:f2:0e:49: 21:7e:52:67:97:e5:bd:8d:2d:0c:de:76:d8:7c:fe:10:e2:0c: 02:9c:d3:c5:32:ad:01:d1:96:25:51:14:f7:f1:56:b8:29:26: 83:88:dd:c8:31:95:d6:ef:ea:9a:80:29:f0:31:b5:22:46:48: 8e:4a:1c:2a:c7:b4:8b:f5:49:04:12:b2:8c:23:7f:33:eb:8d: 12:f9:cf:c5:e6:22:79:18:56:a5:05:79:d0:83:8b:ad:b9:51: a2:18:dc:f9:1a:0d:5c:ef:9e:b3:d0:de:16:0a:01:a8:d1:4e: bf:fe:65:79:26:70:7d:da:cb:d3:59:49:67:59:0f:ec:7e:af: 28:c4:50:1a:8a:1e:e8:a1:cd:27:ee:db:d2:33:7b:4f:45:b9: e7:20:cd:20:8f:61:ba:ca:ba:bb:af:45:be:d2:f7:02:b9:60: 9d:c3:fa:56:a5:58:e2:0d:fe:56:d1:f8:eb:a9:fe:f1:74:15: 6f:8f:e4:b0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIbPQjXa9IHwBMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzYzMDNhMjAtMGQ1ZS00YWE2LWE3NDktYTc2ZDI2ZTczMmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HWswQ9UkLm4wemBGW89S3nGB093sDXguoL5 6LjZfU29X25YvEkHP6ZHGZj6FB7OmXCBVCFRNvmGG0BbyFAKKplCMAOns+AtYExu lV15WB+WBccKcF5N07Fw0Jbqgx0X02nbXy5yHOadk9hh5nz1j8N7SzmC+fKd4jd5 aHFAa3tV2dBMqPA/mtbSpt4ODiKjpIgnby2fSoIiREgyd5tAX7uXtkNUVUWngVdB iGDgPH0yzzLOlSgVJZ4JiP9HDgUoLJAyfPGNTfvHkq6moaI0R3oecKL+z9n0kTP4 wnrZQJJWRDUFdnv2ZsJtEeHgwpUYUnu4H+6z98IXicLvkUTpCwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEHANC/8DfB4M9BPFEbTTV9+ZTlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmNhNjhlZjQtOGQzNS0z YjJiLTlkMGUtZmU0NjA0MjVlYTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAH9d7LJz6rIx4kBDPlvpVhpuvhoi2gkDk5xAddS0hf6E14RNmvSPfO S9V2M469p+nYIyXPMx9H74J/ioSgPpz5dBIvT3PyDkkhflJnl+W9jS0M3nbYfP4Q 4gwCnNPFMq0B0ZYlURT38Va4KSaDiN3IMZXW7+qagCnwMbUiRkiOShwqx7SL9UkE ErKMI38z640S+c/F5iJ5GFalBXnQg4utuVGiGNz5Gg1c756z0N4WCgGo0U6//mV5 JnB92svTWUlnWQ/sfq8oxFAaih7ooc0n7tvSM3tPRbnnIM0gj2G6yrq7r0W+0vcC uWCdw/pWpVjiDf5W0fjrqf7xdBVvj+Sw -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:15 2025 by rpki-client