$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa0003f-0d1e-394d-a3a2-f358e705b762.roa File: 3aa0003f-0d1e-394d-a3a2-f358e705b762.roa (raw, json) Hash identifier: qeMZHDwoyeQhv64sg6T/vaBJDzUEvyjlQgluxuB6OE0= Subject key identifier: 20:28:95:D6:6E:29:F6:D1:5B:7F:5D:9E:39:EA:FD:25:72:99:6C:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B33F1B2926845313D34726600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa0003f-0d1e-394d-a3a2-f358e705b762.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 397198 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b2:92:68:45:31:3d:34:72:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=2753155c-b3e8-44fc-90e1-2eb63a2c31b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f0:3f:21:20:5c:05:32:77:00:22:ec:ae:ce: e6:63:44:6d:ea:71:77:ec:f7:c6:f3:5f:0c:a1:c2: 3f:05:02:d1:f4:91:82:1c:26:71:44:b9:73:f4:1f: f1:48:77:84:03:39:a2:21:42:85:4b:ec:f7:8c:52: 07:0f:80:83:9f:25:fb:aa:67:f5:71:da:c4:2b:3e: 1c:d8:b1:02:99:d1:62:08:12:e2:99:98:80:11:7e: f2:27:c3:46:ba:24:9e:32:fd:12:28:30:ea:50:13: ef:7f:29:fc:58:0b:9b:ca:05:aa:da:36:95:63:4a: 9c:c0:65:4f:e1:dc:25:dd:22:f7:7f:5d:5b:96:05: 93:78:a7:c0:1f:87:37:02:68:c4:37:df:dc:18:41: 7e:8a:ab:00:cd:d5:60:bc:48:65:30:f6:cd:a2:fa: 93:50:4f:06:7d:e7:df:55:3a:eb:75:91:c2:b5:fc: 20:15:b2:af:bd:85:bf:5a:71:b9:3e:7b:bb:88:ed: 26:b1:2c:22:06:88:26:d6:83:b3:2d:b1:70:8a:99: 27:c7:89:13:4e:2c:d0:a1:94:be:9e:eb:74:8c:cf: 59:a3:b3:c8:be:83:27:8e:a3:fc:30:b3:20:f8:b6: 79:35:73:37:e7:bc:7a:b5:71:39:73:9d:e0:f4:b8: 05:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:95:D6:6E:29:F6:D1:5B:7F:5D:9E:39:EA:FD:25:72:99:6C:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aa0003f-0d1e-394d-a3a2-f358e705b762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:29:81:30:d8:6b:ec:ba:d6:a2:b2:8a:6e:81:ee:63:02:b0: 33:71:4c:50:bf:71:04:11:63:b6:ca:8e:7e:e6:43:ad:bc:79: 1a:b6:4d:51:3d:d5:b5:f0:57:f6:49:d7:ea:05:42:e6:e3:e4: 41:f3:09:49:7e:e1:5e:4f:13:12:d2:54:f3:da:81:39:c1:95: be:56:5a:9c:40:b4:3b:74:c0:01:8d:9b:59:c7:05:09:4e:c5: 26:2e:97:3d:23:a4:17:74:67:61:2a:ff:55:49:72:0f:8b:2e: e8:3b:c7:47:f3:a3:d1:ce:4e:7c:35:8f:6f:72:e1:03:4f:9c: 0d:6e:96:ac:a9:7b:b6:70:e3:7c:54:7f:3d:00:96:57:2d:db: bb:60:aa:ee:d2:a3:29:79:dd:6d:b0:9b:82:62:f2:8c:86:26: 0a:b6:26:70:f7:16:b2:56:af:30:9d:0e:2b:8d:6a:8a:2a:48: 82:35:19:f7:b0:bb:28:56:d4:6e:e2:be:30:4c:81:ca:55:bb: f7:81:d6:20:74:06:7f:9b:71:eb:1b:19:51:07:0b:c1:88:ab: 3c:06:f6:75:31:56:06:e3:26:7b:b7:1b:68:29:85:c3:43:ca: a9:32:46:48:9e:49:f0:5f:61:05:94:c5:6a:f2:53:36:a6:f4: 0d:40:67:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8bKSaEUxPTRyZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk Mjc1MzE1NWMtYjNlOC00NGZjLTkwZTEtMmViNjNhMmMzMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPA/ISBcBTJ3ACLsrs7mY0Rt6nF37PfG818M ocI/BQLR9JGCHCZxRLlz9B/xSHeEAzmiIUKFS+z3jFIHD4CDnyX7qmf1cdrEKz4c 2LECmdFiCBLimZiAEX7yJ8NGuiSeMv0SKDDqUBPvfyn8WAubygWq2jaVY0qcwGVP 4dwl3SL3f11blgWTeKfAH4c3AmjEN9/cGEF+iqsAzdVgvEhlMPbNovqTUE8Gfeff VTrrdZHCtfwgFbKvvYW/WnG5Pnu7iO0msSwiBogm1oOzLbFwipknx4kTTizQoZS+ nut0jM9Zo7PIvoMnjqP8MLMg+LZ5NXM357x6tXE5c53g9LgFHwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCAoldZuKfbRW39dnjnq/SVymWxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FhMDAwM2YtMGQxZS0z OTRkLWEzYTItZjM1OGU3MDViNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCrKYEw2Gvsutaisopuge5jArAzcUxQv3EEEWO2yo5+5kOtvHkatk1R PdW18Ff2SdfqBULm4+RB8wlJfuFeTxMS0lTz2oE5wZW+VlqcQLQ7dMABjZtZxwUJ TsUmLpc9I6QXdGdhKv9VSXIPiy7oO8dH86PRzk58NY9vcuEDT5wNbpasqXu2cON8 VH89AJZXLdu7YKru0qMped1tsJuCYvKMhiYKtiZw9xayVq8wnQ4rjWqKKkiCNRn3 sLsoVtRu4r4wTIHKVbv3gdYgdAZ/m3HrGxlRBwvBiKs8BvZ1MVYG4yZ7txtoKYXD Q8qpMkZInknwX2EFlMVq8lM2pvQNQGcI -----END CERTIFICATE-----Generated at Mon Oct 20 09:22:04 2025 by rpki-client