$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bbe712-576b-3cc6-8847-b06177e3e876.roa File: 50bbe712-576b-3cc6-8847-b06177e3e876.roa (raw, json) Hash identifier: TN03+QAqVcrje2+5DwmRg3ppVFyysg5H+Ta3kvUf4sk= Subject key identifier: D3:53:75:C2:A5:FD:C0:9C:7E:DD:BD:B3:35:B4:BF:A3:5C:C7:CD:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A62014AEB38AFB8892D8800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bbe712-576b-3cc6-8847-b06177e3e876.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396578 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:01:4a:eb:38:af:b8:89:2d:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=95702ed4-15b1-48b7-a685-d67c79cf12e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:68:1c:d2:07:0a:2f:b4:7a:61:a3:2c:da: af:f4:d2:f8:64:a6:96:79:8f:97:99:4e:57:04:51: 88:cf:ac:26:c0:58:17:ae:e8:0d:12:13:2e:d1:0f: f1:24:a9:a8:77:aa:33:2d:c1:56:bd:0b:4b:fc:7e: e0:da:4f:e7:67:0d:a0:e7:b1:a7:0d:16:25:3f:44: a9:c8:7a:19:d0:ba:cd:e8:58:ad:45:0e:23:fd:75: 96:82:61:b0:5e:e2:dc:41:bb:4a:2e:69:5b:ca:1b: 5d:34:c8:d2:42:66:57:0f:4b:c4:76:82:0a:e5:39: f1:25:1a:ea:63:48:02:23:20:80:79:0a:d5:ad:26: 38:0f:8e:e4:ae:a7:5e:2d:8c:6a:07:b9:f1:4c:ab: 80:8a:c9:b6:d4:f7:32:34:12:71:e6:80:81:0c:dc: ea:a3:52:56:2e:bf:9e:2e:bb:3f:bd:da:f9:b9:bc: 71:8a:9c:c6:9e:3f:7a:a7:e7:51:38:95:d5:e1:1d: 28:0b:f5:96:08:c1:8d:de:2f:48:25:f2:cc:74:5b: 43:12:08:53:59:5b:ac:96:fb:7d:24:76:4d:ce:46: ed:48:65:5f:57:5a:f7:1d:fa:95:29:a2:84:cd:f7: 4e:25:60:b6:06:52:da:24:a1:98:ae:4e:38:f0:e9: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:53:75:C2:A5:FD:C0:9C:7E:DD:BD:B3:35:B4:BF:A3:5C:C7:CD:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bbe712-576b-3cc6-8847-b06177e3e876.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:29:f7:7c:6a:35:76:80:d7:3e:ad:ef:c2:1d:b7:80:51:36: cc:16:2e:ec:ea:3c:25:23:de:7e:d7:6f:65:90:3a:73:85:ac: 19:3c:99:bb:ce:bd:8e:8a:55:a2:34:b2:49:a3:c1:1e:bd:77: e6:83:5d:fa:05:6a:06:7a:20:10:f2:80:4b:43:39:3f:f7:e9: 32:19:59:93:46:f3:23:5c:c9:a0:e5:22:d4:27:09:d9:77:ac: 07:d3:a7:50:17:41:92:e5:2f:8a:a9:d7:21:5e:62:d3:07:7c: b5:ac:49:3e:60:d0:69:ec:f5:46:30:37:59:92:f1:7c:05:8a: 2b:13:ba:94:4b:b5:62:75:92:74:49:d2:03:b5:10:53:d8:d7: 82:70:1a:03:c9:51:5a:27:23:0a:a2:aa:b2:8b:82:16:f3:a0: 20:79:da:44:17:a4:00:3b:7d:5c:45:a7:45:ee:aa:e2:7e:75: b5:4a:c2:78:2a:34:8b:32:e0:67:fb:fd:63:cf:27:d9:87:ec: 5e:af:45:32:d7:1c:a2:73:60:5f:1f:78:b0:65:ca:9d:ee:c5: d2:9b:a7:14:a1:68:be:39:74:86:60:79:89:49:7e:9c:19:cd: a4:04:32:61:9a:73:ee:ce:69:3d:be:fe:9a:2f:12:fe:ad:b7: 81:7b:51:06 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYgFK6zivuIktiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk OTU3MDJlZDQtMTViMS00OGI3LWE2ODUtZDY3Yzc5Y2YxMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XJoHNIHCi+0emGjLNqv9NL4ZKaWeY+XmU5X BFGIz6wmwFgXrugNEhMu0Q/xJKmod6ozLcFWvQtL/H7g2k/nZw2g57GnDRYlP0Sp yHoZ0LrN6FitRQ4j/XWWgmGwXuLcQbtKLmlbyhtdNMjSQmZXD0vEdoIK5TnxJRrq Y0gCIyCAeQrVrSY4D47krqdeLYxqB7nxTKuAism21PcyNBJx5oCBDNzqo1JWLr+e Lrs/vdr5ubxxipzGnj96p+dROJXV4R0oC/WWCMGN3i9IJfLMdFtDEghTWVuslvt9 JHZNzkbtSGVfV1r3HfqVKaKEzfdOJWC2BlLaJKGYrk448OmuBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNNTdcKl/cCcft29szW0v6Ncx82HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTBiYmU3MTItNTc2Yi0z Y2M2LTg4NDctYjA2MTc3ZTNlODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA/Kfd8ajV2gNc+re/CHbeAUTbMFi7s6jwlI95+129lkDpzhawZPJm7 zr2OilWiNLJJo8EevXfmg136BWoGeiAQ8oBLQzk/9+kyGVmTRvMjXMmg5SLUJwnZ d6wH06dQF0GS5S+KqdchXmLTB3y1rEk+YNBp7PVGMDdZkvF8BYorE7qUS7VidZJ0 SdIDtRBT2NeCcBoDyVFaJyMKoqqyi4IW86AgedpEF6QAO31cRadF7qrifnW1SsJ4 KjSLMuBn+/1jzyfZh+xer0Uy1xyic2BfH3iwZcqd7sXSm6cUoWi+OXSGYHmJSX6c Gc2kBDJhmnPuzmk9vv6aLxL+rbeBe1EG -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:56 2025 by rpki-client