$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf52b9f-e319-3cf0-a32e-60e35a4ba0a1.roa File: 3bf52b9f-e319-3cf0-a32e-60e35a4ba0a1.roa (raw, json) Hash identifier: 9EBzm+ht/4CcyafRh02JZy/fz4YhU0y73TPjn2VP4LM= Subject key identifier: 1F:F6:B8:D4:06:AF:39:A3:1E:33:E4:2A:D0:8E:47:31:90:5F:2A:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74918B0218C39BF3F8980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf52b9f-e319-3cf0-a32e-60e35a4ba0a1.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 36619 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:49:18:b0:21:8c:39:bf:3f:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=4b4c9896-e626-4f3d-982a-25664d68a4e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:23:d3:00:a5:60:d1:89:36:97:2f:e6:ac:8a: b6:7e:82:04:78:90:0e:47:68:0b:1d:d6:a3:80:95: a8:cc:02:b2:24:25:bf:72:3a:0f:6b:8b:5e:d8:6d: cc:e2:0e:ec:7d:2c:a2:c0:60:0f:7d:14:77:7b:96: fa:12:dd:d7:4a:7a:ff:41:9d:d4:f4:13:25:78:b0: f4:57:a0:c8:70:06:c5:c7:36:b9:80:87:9d:95:6b: 80:78:57:e7:38:70:bc:51:92:41:6f:8b:38:34:31: 0c:61:f2:ec:70:93:b4:d0:51:22:2c:82:2b:d3:fb: a5:05:ce:e7:69:a7:dc:97:8c:f7:34:1f:21:e3:79: b1:2e:ee:0d:2f:0e:8c:a7:a9:f7:1a:21:b9:6f:8f: 8d:34:5e:de:5d:82:dc:43:b0:48:ed:43:e4:68:9d: 01:be:ff:a3:e9:4d:07:c7:b6:93:b3:51:14:12:09: 90:cf:83:73:06:ef:ef:65:d3:9b:c0:8b:f8:01:ea: b1:e0:51:d8:cd:76:72:b5:7e:87:b8:a8:00:30:e2: c1:e1:d8:00:d8:f0:5b:c8:16:84:6d:d1:c0:71:6d: 72:29:57:b9:03:04:3e:f4:f9:33:cf:dc:48:e9:39: c7:1b:9e:d1:b5:88:67:9d:3d:08:63:5a:dc:e7:47: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F6:B8:D4:06:AF:39:A3:1E:33:E4:2A:D0:8E:47:31:90:5F:2A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bf52b9f-e319-3cf0-a32e-60e35a4ba0a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:2c:19:c7:a5:3a:2e:2d:8f:64:c8:fc:54:8d:a3:a4:5f:d5: 3f:21:22:05:ce:0b:17:a4:61:13:a3:c9:ee:7d:00:29:ff:e4: 0b:bf:64:6a:bf:49:cd:b7:15:08:c5:86:bf:cc:00:4b:83:d0: e1:71:31:b3:7e:1d:bb:c8:96:57:f3:87:b5:46:99:0b:33:f9: 2a:c2:2e:37:ce:b3:0b:4d:92:1d:3e:c7:35:0f:b3:80:99:52: 33:dd:5e:31:61:44:11:18:21:f4:fa:14:27:5f:ef:7c:47:ba: 20:43:98:5c:d9:4a:1b:7b:4a:01:2a:bd:3f:6a:6d:7d:3b:11: 7e:25:83:8f:aa:cc:51:c2:26:d1:1b:f2:35:ef:84:ce:14:5a: f7:36:83:1f:31:46:89:60:6b:01:95:4e:94:76:bf:87:03:62: cd:a6:04:58:7c:06:71:c3:dd:6d:86:99:9a:9b:04:e5:5b:6f: aa:15:a1:5c:7c:bc:8f:f3:a2:16:be:b6:c7:b0:01:fe:73:c3: 2b:7e:98:83:2b:bb:b3:91:cd:65:fe:18:90:36:72:87:3c:ca: 1d:bc:d1:ec:0e:a4:10:ef:25:7e:48:47:39:8e:ea:3b:5d:b7: 5a:cf:12:c1:8d:ab:e7:79:60:80:0c:57:e5:ab:59:09:4c:c3: ae:35:df:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90kYsCGMOb8/iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NGI0Yzk4OTYtZTYyNi00ZjNkLTk4MmEtMjU2NjRkNjhhNGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCPTAKVg0Yk2ly/mrIq2foIEeJAOR2gLHdaj gJWozAKyJCW/cjoPa4te2G3M4g7sfSyiwGAPfRR3e5b6Et3XSnr/QZ3U9BMleLD0 V6DIcAbFxza5gIedlWuAeFfnOHC8UZJBb4s4NDEMYfLscJO00FEiLIIr0/ulBc7n aafcl4z3NB8h43mxLu4NLw6Mp6n3GiG5b4+NNF7eXYLcQ7BI7UPkaJ0Bvv+j6U0H x7aTs1EUEgmQz4NzBu/vZdObwIv4Aeqx4FHYzXZytX6HuKgAMOLB4dgA2PBbyBaE bdHAcW1yKVe5AwQ+9Pkzz9xI6TnHG57RtYhnnT0IY1rc50cvmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/2uNQGrzmjHjPkKtCORzGQXyrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JmNTJiOWYtZTMxOS0z Y2YwLWEzMmUtNjBlMzVhNGJhMGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMsGcelOi4tj2TI/FSNo6Rf1T8hIgXOCxekYROjye59ACn/5Au/ZGq/ Sc23FQjFhr/MAEuD0OFxMbN+HbvIllfzh7VGmQsz+SrCLjfOswtNkh0+xzUPs4CZ UjPdXjFhRBEYIfT6FCdf73xHuiBDmFzZSht7SgEqvT9qbX07EX4lg4+qzFHCJtEb 8jXvhM4UWvc2gx8xRolgawGVTpR2v4cDYs2mBFh8BnHD3W2GmZqbBOVbb6oVoVx8 vI/zoha+tsewAf5zwyt+mIMru7ORzWX+GJA2coc8yh280ewOpBDvJX5IRzmO6jtd t1rPEsGNq+d5YIAMV+WrWQlMw64135w= -----END CERTIFICATE-----Generated at Mon Oct 20 06:43:57 2025 by rpki-client