$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e782c8d-891e-3a05-a768-01697267a8ef.roa File: 3e782c8d-891e-3a05-a768-01697267a8ef.roa (raw, json) Hash identifier: l4tvAxM7TUAPYt54eTUZqQQoFns0VkziIEE8EULS7AI= Subject key identifier: E7:B1:36:A5:0F:54:A9:B2:DF:15:B6:41:5F:56:2A:71:3E:51:57:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C85D8621E8EFFB9F34040 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e782c8d-891e-3a05-a768-01697267a8ef.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396583 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:85:d8:62:1e:8e:ff:b9:f3:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=619dfed2-2bd0-4eb7-8e3f-992088d1dd63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:46:c1:b3:a5:06:46:79:0a:b4:51:ed:66:74: 8b:03:ba:7f:1f:f8:2a:91:6d:29:29:fd:f7:a2:3d: a1:4b:30:71:ee:3f:55:c6:b3:a6:82:1d:d2:47:bd: 09:fc:e8:2d:a3:28:03:59:e6:22:57:c6:88:45:d9: 12:7e:25:35:ab:c2:86:1d:54:bf:88:ca:41:67:22: 6e:9d:9b:11:4c:5f:bb:4e:1e:c6:45:c0:be:8d:67: 31:56:e6:42:e7:84:48:2b:43:52:91:08:bb:18:ed: 98:5e:8b:05:17:29:d2:35:1a:d1:17:bb:a5:42:55: 62:d6:fb:5b:33:4b:dc:9f:02:ea:0a:24:2d:30:f0: ab:59:36:2b:6c:bd:5e:6b:96:b9:39:2a:3a:8d:af: 8b:b4:a2:4a:2c:a8:4e:b3:89:25:de:d1:16:be:33: f1:bf:0f:f7:9d:29:c1:54:28:c0:56:94:4d:ad:3a: 44:09:08:9f:6b:84:f2:ce:dd:43:d6:26:57:8f:21: f4:1a:0e:95:a4:31:62:e5:b2:06:d0:3d:5f:72:c2: 9b:3b:6b:6d:be:2b:52:e6:04:db:92:9a:53:84:31: 97:fa:6e:d4:33:74:ea:b1:20:f5:f1:d1:f0:b7:78: ca:c0:47:4f:d0:09:4e:5d:60:e5:8d:f6:f4:9e:e6: df:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B1:36:A5:0F:54:A9:B2:DF:15:B6:41:5F:56:2A:71:3E:51:57:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e782c8d-891e-3a05-a768-01697267a8ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5a:a0:95:4b:d9:13:f5:d3:7b:16:dc:5a:d9:da:dc:ed:3a: 5f:08:b5:4a:ab:6e:ec:3c:64:14:9e:e0:74:9e:5a:ea:0e:d8: 1c:70:b9:b1:6a:cb:46:c4:09:b1:72:9b:ee:59:0a:dd:d6:8d: 5b:bd:0e:b4:04:2a:89:e3:23:2d:94:96:c2:0d:a6:59:41:33: 7f:e6:1a:a9:3b:1e:23:1f:43:2e:50:15:95:08:1e:08:e7:57: 61:4c:6f:b6:f5:ea:68:75:ba:1d:74:ce:93:30:aa:9c:5d:0a: e9:59:f9:e9:a5:6f:1b:1c:fc:91:47:d4:3a:31:63:48:f8:45: 89:da:0d:02:5d:c5:75:49:f8:86:93:e8:cc:5b:38:85:3c:19: 5b:09:5e:78:a4:d0:9f:1d:d7:5a:c9:cd:5c:a9:73:0c:f5:0e: a2:0b:59:e5:22:79:ea:71:7e:1d:83:13:5f:b2:a1:97:a6:c1: a5:0b:c6:d9:c0:52:b2:1a:1f:24:e0:14:46:2b:05:97:a5:99: 4f:71:8a:7e:6e:fb:f8:8d:5b:44:c7:a7:1c:0d:ae:fc:28:4d: 3a:11:1b:96:be:1f:38:d0:9a:ee:31:92:7c:4d:51:97:aa:94: a4:9c:01:6a:49:7c:63:0c:67:95:e6:12:f7:1f:df:67:ad:f4: 22:c4:22:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIXYYh6O/7nzQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NjE5ZGZlZDItMmJkMC00ZWI3LThlM2YtOTkyMDg4ZDFkZDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEbBs6UGRnkKtFHtZnSLA7p/H/gqkW0pKf33 oj2hSzBx7j9VxrOmgh3SR70J/OgtoygDWeYiV8aIRdkSfiU1q8KGHVS/iMpBZyJu nZsRTF+7Th7GRcC+jWcxVuZC54RIK0NSkQi7GO2YXosFFynSNRrRF7ulQlVi1vtb M0vcnwLqCiQtMPCrWTYrbL1ea5a5OSo6ja+LtKJKLKhOs4kl3tEWvjPxvw/3nSnB VCjAVpRNrTpECQifa4Tyzt1D1iZXjyH0Gg6VpDFi5bIG0D1fcsKbO2ttvitS5gTb kppThDGX+m7UM3TqsSD18dHwt3jKwEdP0AlOXWDljfb0nubfKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOexNqUPVKmy3xW2QV9WKnE+UVc0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U3ODJjOGQtODkxZS0z YTA1LWE3NjgtMDE2OTcyNjdhOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoWqCVS9kT9dN7Ftxa2drc7TpfCLVKq27sPGQUnuB0nlrqDtgccLmx astGxAmxcpvuWQrd1o1bvQ60BCqJ4yMtlJbCDaZZQTN/5hqpOx4jH0MuUBWVCB4I 51dhTG+29epodboddM6TMKqcXQrpWfnppW8bHPyRR9Q6MWNI+EWJ2g0CXcV1SfiG k+jMWziFPBlbCV54pNCfHddayc1cqXMM9Q6iC1nlInnqcX4dgxNfsqGXpsGlC8bZ wFKyGh8k4BRGKwWXpZlPcYp+bvv4jVtEx6ccDa78KE06ERuWvh840JruMZJ8TVGX qpSknAFqSXxjDGeV5hL3H99nrfQixCK/ -----END CERTIFICATE-----Generated at Mon Oct 20 12:14:13 2025 by rpki-client