$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa File: 4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa (raw, json) Hash identifier: /10/hVHMibvXDSglKJ2EFiMffo9uq3XjbSdtpL1Wwxc= Subject key identifier: 8B:94:17:57:84:CD:78:6B:36:A7:45:76:F9:B4:C8:4F:B4:F6:8D:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C86BCD804CC05178A5E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396573 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:86:bc:d8:04:cc:05:17:8a:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=b76402b7-638b-4cef-9673-8b7607900d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:64:d9:e5:8b:7e:cb:82:94:4d:0a:fd:78: 61:47:78:60:87:a8:1a:27:62:2c:58:7b:d7:bb:23: 75:a2:3b:93:81:9a:0e:1e:7b:e4:24:08:2c:be:77: d7:21:1e:b5:b2:d5:03:f1:73:fb:44:ab:6e:d4:c8: 4c:d7:cd:e8:37:b5:17:66:14:c1:7c:2e:41:f9:3e: 5c:2d:3f:94:48:90:46:46:12:34:97:86:02:c0:c1: ab:03:d4:e2:a8:b6:97:16:b2:5f:7b:4a:a2:d9:9b: d0:08:f3:19:e5:26:d1:a7:03:aa:91:e4:cf:30:e5: 46:99:7e:d5:3b:fc:18:12:5c:be:30:75:2d:c6:f7: ce:66:2a:90:21:fc:0c:91:15:7f:9c:38:14:bd:b4: cd:c7:ce:f8:06:84:ee:9f:65:71:62:a2:8f:d5:32: 1b:51:03:b4:2d:e9:0a:d8:da:19:01:19:91:79:83: 0a:5b:3c:b9:d3:25:15:7c:0a:7e:11:6d:c9:88:40: b3:87:3b:41:ce:ef:c7:d3:d3:87:af:75:79:13:13: af:60:4e:92:52:03:d9:ce:51:2f:01:93:8f:60:79: ce:8d:25:01:d5:43:af:6d:19:15:13:17:80:43:4e: 56:f2:67:01:6f:2d:89:1b:05:e3:02:e6:f4:a3:bd: fa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:94:17:57:84:CD:78:6B:36:A7:45:76:F9:B4:C8:4F:B4:F6:8D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4754c8f4-78ec-3ee8-aaa8-6c283a4ec431.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:7a:94:a0:3c:2c:dc:5d:99:65:09:7a:3f:92:cb:30:a6:bf: 06:41:04:b3:59:71:28:f5:98:b7:3e:84:c9:6a:62:79:08:d9: 47:e8:e6:b7:4d:d9:df:cd:a2:2a:16:b5:dd:4f:cd:8f:68:25: a0:0d:c4:93:8a:49:90:e3:8a:37:9d:79:e3:f8:f4:ac:70:98: c0:89:59:ec:40:93:00:a6:3f:f6:38:7a:17:a5:44:07:50:6b: fe:59:2d:cf:fa:96:37:f2:b1:21:f7:e3:44:90:57:ad:4c:e6: f5:16:15:6e:d3:cf:3c:f8:06:cf:46:a7:05:25:a6:05:33:90: af:37:fe:b6:a6:99:65:29:aa:87:bb:3b:b5:0b:91:ff:ae:2c: 7b:ea:b1:15:59:00:ea:d7:3b:0e:ef:01:51:c3:ed:d7:48:e1: 4f:c8:94:c8:4d:9c:45:0d:5f:0b:1b:fd:6d:d7:1d:0b:10:ed: 36:7c:11:8c:ca:ea:b1:c2:a8:df:e0:35:b4:fb:bf:dc:49:fe: 9f:ff:5d:31:c2:4e:ca:55:8f:56:23:c3:f9:ab:47:bd:09:00: 94:69:6c:83:82:df:79:9b:da:03:ae:9d:2a:ea:09:65:a5:9d: 56:16:26:8c:64:0f:ed:97:06:47:ef:e3:1f:26:ee:e2:0a:d5: b9:3d:e2:f3 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIa82ATMBReKXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk Yjc2NDAyYjctNjM4Yi00Y2VmLTk2NzMtOGI3NjA3OTAwZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHlk2eWLfsuClE0K/XhhR3hgh6gaJ2IsWHvX uyN1ojuTgZoOHnvkJAgsvnfXIR61stUD8XP7RKtu1MhM183oN7UXZhTBfC5B+T5c LT+USJBGRhI0l4YCwMGrA9TiqLaXFrJfe0qi2ZvQCPMZ5SbRpwOqkeTPMOVGmX7V O/wYEly+MHUtxvfOZiqQIfwMkRV/nDgUvbTNx874BoTun2VxYqKP1TIbUQO0LekK 2NoZARmReYMKWzy50yUVfAp+EW3JiECzhztBzu/H09OHr3V5ExOvYE6SUgPZzlEv AZOPYHnOjSUB1UOvbRkVExeAQ05W8mcBby2JGwXjAub0o736cwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIuUF1eEzXhrNqdFdvm0yE+09o3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDc1NGM4ZjQtNzhlYy0z ZWU4LWFhYTgtNmMyODNhNGVjNDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBiepSgPCzcXZllCXo/ksswpr8GQQSzWXEo9Zi3PoTJamJ5CNlH6Oa3 TdnfzaIqFrXdT82PaCWgDcSTikmQ44o3nXnj+PSscJjAiVnsQJMApj/2OHoXpUQH UGv+WS3P+pY38rEh9+NEkFetTOb1FhVu0888+AbPRqcFJaYFM5CvN/62ppllKaqH uzu1C5H/rix76rEVWQDq1zsO7wFRw+3XSOFPyJTITZxFDV8LG/1t1x0LEO02fBGM yuqxwqjf4DW0+7/cSf6f/10xwk7KVY9WI8P5q0e9CQCUaWyDgt95m9oDrp0q6gll pZ1WFiaMZA/tlwZH7+MfJu7iCtW5PeLz -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:24 2025 by rpki-client