$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43ea49af-9f62-3c53-9d15-36aef41882e8.roa File: 43ea49af-9f62-3c53-9d15-36aef41882e8.roa (raw, json) Hash identifier: DkUceZ8Wxys2p5ZiYvBCGiFE6lYLKHfeBIv8s9zLR3k= Subject key identifier: A2:98:F0:66:BE:98:96:B7:AB:FC:20:A3:4C:04:70:92:54:5E:27:C7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8E4F2C48CA677AC21C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43ea49af-9f62-3c53-9d15-36aef41882e8.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396616 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8e:4f:2c:48:ca:67:7a:c2:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=7a377b2f-1a5b-400e-9e87-670b3fe18477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:b6:e5:32:3e:5b:33:81:11:95:69:fe:c1: b9:cc:13:b1:d4:00:1c:4c:68:82:ca:ab:b9:34:95: 9e:13:c7:9d:b2:d5:eb:b5:77:c1:97:1f:1b:cf:21: e6:a8:3a:d8:eb:17:d6:47:ea:bf:2e:f0:5f:cf:28: 48:3a:29:42:b7:28:a7:6d:9a:ae:90:22:34:92:67: 8b:be:ed:d5:33:bb:d6:85:24:d2:ad:1f:ea:eb:9d: a2:b1:c1:8e:ad:13:db:83:c2:f8:2e:57:32:e1:6b: 25:d5:02:f9:a6:43:6c:1b:1a:b8:46:d1:4d:fd:64: 61:72:98:d9:72:f2:47:2b:dc:eb:a4:7e:70:90:80: 4b:e7:ab:ee:30:51:b7:e4:99:3f:59:3b:09:8a:a2: dd:d8:be:bf:ee:d7:d1:80:99:53:9f:5a:b6:53:46: 2d:18:a2:1a:ba:b7:63:37:54:45:fe:94:87:4d:91: 0f:63:df:fc:05:22:0f:31:3c:7b:a9:e2:9f:ae:d4: f7:d1:9d:53:67:37:82:65:81:30:e7:15:a8:5e:37: 2a:44:4a:51:b1:3c:18:e2:18:70:b7:c7:2d:43:ed: db:cb:53:ad:c2:b2:ca:d6:5f:d6:10:3c:9b:d0:8f: 8d:60:c6:a8:0d:62:2c:cb:72:b8:03:57:cf:8f:4a: d8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:98:F0:66:BE:98:96:B7:AB:FC:20:A3:4C:04:70:92:54:5E:27:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43ea49af-9f62-3c53-9d15-36aef41882e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2a:a2:a9:1c:27:75:22:6f:14:d2:c5:0d:e6:dc:20:88:fb: 4e:78:45:4e:f0:6f:1e:c0:49:b9:36:48:a8:5d:48:26:ec:44: fe:ad:23:89:e7:f7:7d:32:33:81:75:dc:9a:59:7d:93:df:ac: c7:96:a3:76:4e:6d:af:1e:b9:85:c3:3c:b1:09:2a:0f:d9:66: ea:48:ed:31:19:99:b3:7a:57:e0:c1:54:f7:e0:98:ec:38:4a: ca:a2:96:e3:2b:a7:01:5c:57:30:b7:74:bf:f8:40:5d:a8:1a: b0:33:b6:8e:ad:ad:f5:2e:99:e9:14:67:5f:be:2b:b4:ee:c0: ca:c8:4b:0a:ba:4b:56:e4:18:d4:99:dd:7f:5d:6c:de:41:0a: b9:0a:35:70:d7:68:66:f8:ad:08:3e:8e:14:6b:ab:b3:86:1c: 06:28:06:84:12:06:10:d3:5a:65:48:65:81:3f:af:44:58:72: 1f:4a:c2:66:85:3e:cb:02:ea:6f:3a:f7:53:99:9f:9a:55:8a: 4b:9a:67:a4:e9:d8:c3:0d:ea:b7:9a:bd:78:77:fb:39:41:9e: 11:c1:a6:73:e2:21:da:7a:24:2e:af:81:95:79:fc:fe:5f:84: 9f:2a:60:b7:4c:33:b9:83:f8:54:58:2f:5a:b7:02:56:4b:80: 79:6b:d7:8b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI5PLEjKZ3rCHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk N2EzNzdiMmYtMWE1Yi00MDBlLTllODctNjcwYjNmZTE4NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli225TI+WzOBEZVp/sG5zBOx1AAcTGiCyqu5 NJWeE8edstXrtXfBlx8bzyHmqDrY6xfWR+q/LvBfzyhIOilCtyinbZqukCI0kmeL vu3VM7vWhSTSrR/q652iscGOrRPbg8L4Llcy4Wsl1QL5pkNsGxq4RtFN/WRhcpjZ cvJHK9zrpH5wkIBL56vuMFG35Jk/WTsJiqLd2L6/7tfRgJlTn1q2U0YtGKIaurdj N1RF/pSHTZEPY9/8BSIPMTx7qeKfrtT30Z1TZzeCZYEw5xWoXjcqREpRsTwY4hhw t8ctQ+3by1OtwrLK1l/WEDyb0I+NYMaoDWIsy3K4A1fPj0rYdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKKY8Ga+mJa3q/wgo0wEcJJUXifHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNlYTQ5YWYtOWY2Mi0z YzUzLTlkMTUtMzZhZWY0MTg4MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBdKqKpHCd1Im8U0sUN5twgiPtOeEVO8G8ewEm5NkioXUgm7ET+rSOJ 5/d9MjOBddyaWX2T36zHlqN2Tm2vHrmFwzyxCSoP2WbqSO0xGZmzelfgwVT34Jjs OErKopbjK6cBXFcwt3S/+EBdqBqwM7aOra31LpnpFGdfviu07sDKyEsKuktW5BjU md1/XWzeQQq5CjVw12hm+K0IPo4Ua6uzhhwGKAaEEgYQ01plSGWBP69EWHIfSsJm hT7LAupvOvdTmZ+aVYpLmmek6djDDeq3mr14d/s5QZ4RwaZz4iHaeiQur4GVefz+ X4SfKmC3TDO5g/hUWC9atwJWS4B5a9eL -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:21 2025 by rpki-client