$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa File: 3e8607d6-bc0a-3404-adea-1dc766049cd1.roa (raw, json) Hash identifier: 7dPdkwB4EkiZH7WcTaeg+wfvMhBEtzUUNmgDwklqArU= Subject key identifier: BC:0B:26:EE:70:32:5D:E5:AC:43:EF:1E:BC:14:3B:78:8A:76:27:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B56D71B7E0D5663B3D7CFD900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 396617 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:1b:7e:0d:56:63:b3:d7:cf:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=f1591ffc-82d8-4541-b2f5-ad92836e870e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:14:61:1b:f9:54:e4:3d:65:5b:e3:a1:15:a2: 9b:fa:5a:80:9d:a7:78:6f:4d:8e:6e:68:b8:2e:d9: de:0d:f3:f9:83:9d:e8:a6:be:73:1f:01:1e:c9:86: b5:77:7a:9e:49:2a:6f:13:dd:55:90:98:e8:3a:80: 22:ab:36:57:84:b6:2b:cb:e5:c5:3a:bd:ee:79:f6: c5:09:63:10:da:39:52:bc:91:a3:65:c7:40:5c:a8: 99:c4:5c:98:43:f3:7e:df:95:5e:d5:d5:fa:4f:af: 36:df:a5:ea:4f:b6:93:00:98:d8:9a:2b:b0:a9:f4: b6:71:2e:cd:a4:2d:6a:a4:25:fa:b3:5b:58:3f:c3: 72:aa:6e:b3:87:43:5a:56:42:39:66:ec:ae:b4:89: 6b:96:c0:47:94:f2:44:2b:62:ff:17:fa:7a:96:71: ab:c0:9f:1e:7e:1c:91:dd:0d:9d:2d:23:9e:d3:fd: 99:fd:98:3b:4a:ec:02:54:95:bd:e4:89:9e:23:85: cd:8d:1c:d2:f4:1f:97:96:f1:58:61:b2:d3:ff:78: 25:58:74:fa:9d:7d:e7:d7:83:df:1f:5e:d5:fd:bd: a8:b6:99:0e:63:45:d7:ee:b1:3c:95:6f:0d:8d:5f: 2e:99:cb:41:9a:eb:7e:97:74:81:29:8f:92:97:5e: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0B:26:EE:70:32:5D:E5:AC:43:EF:1E:BC:14:3B:78:8A:76:27:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:9a:e4:bd:98:db:d4:9d:f8:7b:77:a2:d2:16:5d:72:3e:d0: 7c:36:02:8f:c4:3f:c0:c9:ad:9e:db:ab:66:4c:0a:17:32:1d: 5f:a2:79:51:6f:f6:65:e1:69:2f:02:22:b1:c5:25:ee:cd:b3: 6c:9f:00:78:7a:ec:6a:2e:9e:63:27:fd:61:72:ad:b1:28:de: 43:a4:29:86:f4:bb:56:b7:c8:b8:db:1f:f7:69:51:16:b9:ec: 96:a3:20:56:41:89:a8:87:13:59:4d:7e:99:c4:7e:ba:bc:ab: 2d:01:53:96:66:53:dd:fb:e1:51:a8:63:7f:29:53:6b:40:50: 74:d8:5b:75:fa:b1:cc:9d:4a:74:03:92:d0:45:4f:05:60:f3: 7b:81:2c:d4:bf:1a:79:17:a6:3d:84:19:81:7f:7a:7a:41:8f: 63:af:41:28:89:d0:ca:36:b7:9f:85:1a:a5:bb:32:59:27:c0: 8e:fc:57:9c:0b:f1:33:09:0e:0d:1b:52:1e:f5:54:9c:dd:b0: 5f:70:61:38:da:0f:3f:69:8d:53:be:e1:5f:19:0d:3d:68:06: 0d:24:e9:f2:a1:ac:54:f8:df:80:cf:c2:33:73:07:f1:78:7e: 31:e7:c9:8f:39:7d:5b:26:b3:32:23:e5:8d:cb:24:80:0f:f9: 20:99:ba:52 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW1xt+DVZjs9fP2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZjE1OTFmZmMtODJkOC00NTQxLWIyZjUtYWQ5MjgzNmU4NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghRhG/lU5D1lW+OhFaKb+lqAnad4b02Obmi4 LtneDfP5g53opr5zHwEeyYa1d3qeSSpvE91VkJjoOoAiqzZXhLYry+XFOr3uefbF CWMQ2jlSvJGjZcdAXKiZxFyYQ/N+35Ve1dX6T68236XqT7aTAJjYmiuwqfS2cS7N pC1qpCX6s1tYP8Nyqm6zh0NaVkI5ZuyutIlrlsBHlPJEK2L/F/p6lnGrwJ8efhyR 3Q2dLSOe0/2Z/Zg7SuwCVJW95ImeI4XNjRzS9B+XlvFYYbLT/3glWHT6nX3n14Pf H17V/b2otpkOY0XX7rE8lW8NjV8umctBmut+l3SBKY+Sl15TJQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLwLJu5wMl3lrEPvHrwUO3iKdifhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2U4NjA3ZDYtYmMwYS0z NDA0LWFkZWEtMWRjNzY2MDQ5Y2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBcmuS9mNvUnfh7d6LSFl1yPtB8NgKPxD/Aya2e26tmTAoXMh1fonlR b/Zl4WkvAiKxxSXuzbNsnwB4euxqLp5jJ/1hcq2xKN5DpCmG9LtWt8i42x/3aVEW ueyWoyBWQYmohxNZTX6ZxH66vKstAVOWZlPd++FRqGN/KVNrQFB02Ft1+rHMnUp0 A5LQRU8FYPN7gSzUvxp5F6Y9hBmBf3p6QY9jr0EoidDKNrefhRqluzJZJ8CO/Fec C/EzCQ4NG1Ie9VSc3bBfcGE42g8/aY1TvuFfGQ09aAYNJOnyoaxU+N+Az8Izcwfx eH4x58mPOX1bJrMyI+WNyySAD/kgmbpS -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:57 2025 by rpki-client