$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa File: 4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa (raw, json) Hash identifier: E2igBKZhlnnmFThUqNRWTZGSnSu0gp2nV+TGwS48qH4= Subject key identifier: AF:21:13:8F:BF:A9:95:6D:11:5E:98:C6:01:22:25:70:CD:CE:E2:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C9195C7663995A8F527C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 36624 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:91:95:c7:66:39:95:a8:f5:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=1ace5ca0-58ea-4b57-9d08-902e2d48fe84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:0f:25:5d:b7:4c:1e:ad:67:a9:66:d2:2d:db: 6b:73:df:24:2f:7c:65:13:94:3f:69:bf:dd:e4:22: b7:e0:63:fb:3e:9d:84:cc:2c:5b:b9:67:c4:fb:de: 93:62:ee:bd:e5:9b:97:8e:11:44:3d:7b:25:98:f8: a7:e5:04:88:62:cf:97:48:bc:52:58:6c:c8:10:7d: c9:21:53:fb:5f:ae:54:11:f3:38:4b:37:b8:e8:92: 4b:32:50:60:d4:a8:cb:63:38:a1:ef:92:16:4c:65: 02:b8:7f:84:88:bb:1b:df:73:d9:0f:16:b9:af:00: ad:b3:39:6e:34:6c:da:1f:c2:39:ad:cf:2b:97:6f: 1a:4f:47:0e:c5:12:47:3e:a4:45:1e:b3:09:6c:3f: cd:2f:8e:29:61:f1:b2:b8:92:7e:37:6b:76:39:fe: 91:4c:6a:09:ae:a2:91:2e:49:18:ca:fd:d5:ec:10: 93:7d:68:3f:5b:75:44:07:39:f1:e1:29:07:e3:55: f7:21:20:c8:ec:46:b6:81:13:3a:ba:62:58:12:12: 1a:02:07:d6:bc:dc:58:c7:c8:f6:f7:73:c3:83:6d: 42:e6:af:fd:ce:c6:d1:0a:de:ae:54:2e:b0:46:6e: 61:79:28:4a:0d:53:af:c9:08:94:ba:0a:e8:ae:39: eb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:21:13:8F:BF:A9:95:6D:11:5E:98:C6:01:22:25:70:CD:CE:E2:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4337596f-63ab-3a53-9a74-b4b8dcbf4c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:77:ff:d9:e0:93:63:f2:46:37:41:5c:1b:4e:19:98:cc:9d: 4c:66:0e:b4:da:d6:90:ae:0b:c1:f0:75:61:2e:d1:70:a7:e2: 31:c7:2c:9b:24:8e:f1:cd:b8:31:59:ce:99:b1:b0:63:84:1d: 9f:fc:49:37:29:3e:63:af:7d:58:fa:a6:0f:53:72:bd:20:ae: bd:12:71:a9:20:2e:6d:14:68:b7:17:1c:52:fb:4e:c9:af:d8: 9c:ab:b8:c0:bd:65:6e:23:23:44:ad:3f:26:b7:4d:6b:c3:01: 9b:88:3a:00:e4:a4:e8:77:3e:d7:b9:1c:b8:d4:f7:9a:f7:54: 60:32:ce:28:ba:bc:3c:61:e3:89:64:08:b5:e2:57:5f:66:da: 8b:ff:5b:9c:6b:9e:72:18:8b:dc:d9:85:6f:78:91:c8:81:03: 12:57:85:f6:43:86:27:d2:a7:b0:2d:86:68:a3:f0:b5:b7:e2: 0c:d8:af:36:3e:db:30:39:25:f3:2c:48:62:e0:a6:7f:ef:fc: 75:44:6c:5f:ba:a1:29:06:eb:db:96:9e:12:e6:2a:56:c2:10: 21:f9:1d:da:dc:dc:81:a7:76:14:2d:c2:52:8d:db:99:21:13: 27:dc:f0:2b:48:cc:51:0e:4e:8f:62:9c:67:af:3a:e2:f1:11: 5c:26:5d:c5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfJGVx2Y5laj1J8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MWFjZTVjYTAtNThlYS00YjU3LTlkMDgtOTAyZTJkNDhmZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw8lXbdMHq1nqWbSLdtrc98kL3xlE5Q/ab/d 5CK34GP7Pp2EzCxbuWfE+96TYu695ZuXjhFEPXslmPin5QSIYs+XSLxSWGzIEH3J IVP7X65UEfM4Sze46JJLMlBg1KjLYzih75IWTGUCuH+EiLsb33PZDxa5rwCtszlu NGzaH8I5rc8rl28aT0cOxRJHPqRFHrMJbD/NL44pYfGyuJJ+N2t2Of6RTGoJrqKR LkkYyv3V7BCTfWg/W3VEBznx4SkH41X3ISDI7Ea2gRM6umJYEhIaAgfWvNxYx8j2 93PDg21C5q/9zsbRCt6uVC6wRm5heShKDVOvyQiUugrorjnrMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK8hE4+/qZVtEV6YxgEiJXDNzuIPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDMzNzU5NmYtNjNhYi0z YTUzLTlhNzQtYjRiOGRjYmY0YzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBRd//Z4JNj8kY3QVwbThmYzJ1MZg602taQrgvB8HVhLtFwp+Ixxyyb JI7xzbgxWc6ZsbBjhB2f/Ek3KT5jr31Y+qYPU3K9IK69EnGpIC5tFGi3FxxS+07J r9icq7jAvWVuIyNErT8mt01rwwGbiDoA5KTodz7XuRy41Pea91RgMs4ourw8YeOJ ZAi14ldfZtqL/1uca55yGIvc2YVveJHIgQMSV4X2Q4Yn0qewLYZoo/C1t+IM2K82 PtswOSXzLEhi4KZ/7/x1RGxfuqEpBuvblp4S5ipWwhAh+R3a3NyBp3YULcJSjduZ IRMn3PArSMxRDk6PYpxnrzri8RFcJl3F -----END CERTIFICATE-----Generated at Mon Oct 20 09:42:50 2025 by rpki-client