$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa File: 2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa (raw, json) Hash identifier: H7vjdef2tXnxl+tzPLXW/8fUKootjT+EzCzyQCyM8xE= Subject key identifier: 22:20:89:14:64:23:C6:F8:52:7D:97:FE:7D:EA:15:73:6F:2A:3D:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C92D85752122A3EAAC240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20431 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:92:d8:57:52:12:2a:3e:aa:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=d518cfff-6250-4757-a28b-5d4ce747343c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6e:6b:f2:a6:f5:7b:8e:0d:84:65:2b:e1:b2: 22:6a:0a:19:5b:46:3a:a7:a8:45:d4:91:d9:68:af: 52:00:eb:f8:e1:1f:8e:4a:cb:5e:3f:8d:db:b3:ee: 28:04:a9:90:b5:b9:e9:81:5f:61:59:88:57:5c:bd: 52:d8:72:58:11:6f:8b:49:7b:38:2b:10:c8:0d:f1: 7c:ea:60:b5:bf:7d:d7:45:15:86:0e:e9:b9:e9:70: 5f:23:2d:18:04:e7:3f:fa:b2:0c:a7:ee:3f:df:4b: 0f:e9:5d:39:0e:39:53:f3:c2:a2:c5:5d:57:09:7c: 63:a8:9b:f5:c8:0b:df:14:69:d3:ca:78:d6:08:77: 03:bf:f6:95:b7:94:34:c9:55:02:85:01:df:fd:23: 6f:f9:1c:1b:56:bb:db:94:83:ed:78:2b:ad:0f:4b: 2c:69:5c:68:4a:85:51:09:9a:12:5d:b5:bd:5a:99: 49:73:61:96:d5:a1:2c:7f:a0:78:32:d3:d7:63:14: 84:94:df:46:8d:cd:ba:cb:b9:fd:9f:a8:87:0c:c6: 1f:39:bf:0d:c0:62:af:2d:75:9c:51:aa:1b:86:1e: 83:f0:ff:15:dd:81:31:5d:bf:6e:96:65:b7:f3:b5: e4:e3:b8:2e:d5:56:43:cf:49:cf:ee:a3:53:72:dc: ad:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:20:89:14:64:23:C6:F8:52:7D:97:FE:7D:EA:15:73:6F:2A:3D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2d9658ca-41a7-3b9f-ab97-790bc7e2698c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:68:8d:4b:4e:3f:db:55:b4:c5:d1:f4:e6:35:a7:81:60:12: 10:f2:51:0f:6d:a8:9a:12:2b:ec:b6:06:c9:d4:5a:18:4d:a8: 35:94:68:96:ed:3c:79:75:fd:f8:1b:91:01:bf:6b:77:c1:fe: 44:08:f2:9a:c3:8a:0b:e8:96:72:9a:d6:53:96:39:77:72:ff: e3:34:8f:56:3a:6c:91:27:58:8c:63:9d:01:65:f3:8e:51:d2: b1:00:37:17:69:f5:8d:48:5a:bc:93:0b:1d:02:5b:b0:fe:6d: f3:ed:83:2f:bf:22:91:e3:9a:40:50:32:40:81:21:e9:12:44: 60:58:8a:99:17:6c:8a:13:9e:bb:7f:03:7f:58:0e:fe:99:af: 6f:cd:92:7a:33:54:a9:fd:49:22:3f:70:ec:7d:06:98:a8:d4: 9f:1f:e0:7c:18:83:c3:5e:c9:88:e3:ec:ce:8e:f0:8a:43:12: 23:a8:5d:c8:9f:12:83:13:bf:37:bf:38:1a:87:ca:48:86:28: 4a:01:2f:98:18:6b:fc:23:bb:26:5a:f5:97:6d:37:4e:6a:02: be:48:12:4f:29:ab:26:cb:2d:b9:90:ca:39:17:c2:33:c3:4d: 30:fb:03:44:4d:3a:cb:c9:ed:e2:76:13:98:cf:fc:71:24:ec: df:04:29:b6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfJLYV1ISKj6qwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDUxOGNmZmYtNjI1MC00NzU3LWEyOGItNWQ0Y2U3NDczNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW5r8qb1e44NhGUr4bIiagoZW0Y6p6hF1JHZ aK9SAOv44R+OSsteP43bs+4oBKmQtbnpgV9hWYhXXL1S2HJYEW+LSXs4KxDIDfF8 6mC1v33XRRWGDum56XBfIy0YBOc/+rIMp+4/30sP6V05DjlT88KixV1XCXxjqJv1 yAvfFGnTynjWCHcDv/aVt5Q0yVUChQHf/SNv+RwbVrvblIPteCutD0ssaVxoSoVR CZoSXbW9WplJc2GW1aEsf6B4MtPXYxSElN9Gjc26y7n9n6iHDMYfOb8NwGKvLXWc Uaobhh6D8P8V3YExXb9ulmW387Xk47gu1VZDz0nP7qNTctytKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCIgiRRkI8b4Un2X/n3qFXNvKj07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmQ5NjU4Y2EtNDFhNy0z YjlmLWFiOTctNzkwYmM3ZTI2OThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYaI1LTj/bVbTF0fTmNaeBYBIQ8lEPbaiaEivstgbJ1FoYTag1lGiW 7Tx5df34G5EBv2t3wf5ECPKaw4oL6JZymtZTljl3cv/jNI9WOmyRJ1iMY50BZfOO UdKxADcXafWNSFq8kwsdAluw/m3z7YMvvyKR45pAUDJAgSHpEkRgWIqZF2yKE567 fwN/WA7+ma9vzZJ6M1Sp/UkiP3DsfQaYqNSfH+B8GIPDXsmI4+zOjvCKQxIjqF3I nxKDE783vzgah8pIhihKAS+YGGv8I7smWvWXbTdOagK+SBJPKasmyy25kMo5F8Iz w00w+wNETTrLye3idhOYz/xxJOzfBCm2 -----END CERTIFICATE-----Generated at Mon Oct 20 07:08:59 2025 by rpki-client