$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5216ba6c-6e75-3b11-8d3b-dc656c26a7ea.roa File: 5216ba6c-6e75-3b11-8d3b-dc656c26a7ea.roa (raw, json) Hash identifier: qEwXhTHigW2jauFpRlzVlv/U7gtZ5c6D+DCe0ZWWdKs= Subject key identifier: A2:3E:62:7F:4E:14:70:1F:A1:99:3F:D7:53:73:64:A8:50:C3:6E:53 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8AAB4F64BE81EA84C800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5216ba6c-6e75-3b11-8d3b-dc656c26a7ea.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 397201 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8a:ab:4f:64:be:81:ea:84:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=81f67080-9d41-4dda-b57d-24d73a4cc778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a3:cf:52:fc:d7:a5:fc:65:6f:42:ce:9e:45: 13:4b:8e:77:19:07:cf:e0:26:04:ef:38:89:d2:49: 72:2f:cf:c4:36:1b:dd:10:24:7f:57:01:f6:74:9a: 06:e7:e7:97:8d:f4:6a:2c:5a:21:1d:48:ec:79:c3: 1c:5c:ee:f3:04:b0:20:80:32:64:83:fe:52:77:69: 07:96:f0:34:f7:c5:4c:42:8e:08:00:b8:71:f2:b1: 4d:1e:08:9e:bd:77:1c:b3:ee:01:58:2e:4c:1d:0e: 1f:45:ae:40:22:4a:c4:2c:27:ec:bc:fe:da:2f:6b: 18:28:c5:18:18:b4:6a:92:27:f5:8f:d6:f9:d6:39: 69:b1:db:e4:19:5f:c1:e1:9e:34:ac:fa:9e:21:21: ef:86:a3:5f:b3:e3:fa:e9:6f:fd:7d:5a:33:75:06: c5:5a:16:78:87:18:c9:1d:87:32:0f:68:12:ee:1e: 63:e2:fb:1f:f0:18:2a:68:0d:5e:87:64:79:3f:5d: d4:18:b6:7a:79:c9:02:09:29:3e:ef:a3:85:02:2c: 9e:4f:6c:e3:6f:55:a3:08:b2:30:20:fc:2c:24:39: e4:50:22:c8:72:a6:5c:af:a9:85:e7:90:a3:ca:b5: 70:4c:dc:90:ce:b7:64:32:25:17:f3:e9:4a:78:e0: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3E:62:7F:4E:14:70:1F:A1:99:3F:D7:53:73:64:A8:50:C3:6E:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5216ba6c-6e75-3b11-8d3b-dc656c26a7ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:15:49:ca:eb:13:c5:4e:3d:97:33:45:a5:a1:87:52:7e:57: fb:e4:54:ec:76:33:7f:61:02:a7:b9:32:0b:ff:23:91:93:29: db:c3:37:0c:9e:cc:44:fd:38:81:96:f5:8d:dc:c9:e0:51:89: e6:1c:f6:4b:53:72:04:fd:d5:96:30:c1:c8:db:e0:5b:e8:d3: d7:bc:bc:28:b4:a4:73:07:8c:16:6a:9f:f4:af:38:dc:d1:23: 5a:b0:c9:78:6e:b7:f3:d4:28:a9:fb:57:64:56:33:e6:a7:ff: fa:c2:b0:18:66:c3:7e:5f:eb:6f:d8:56:73:65:6e:64:d5:c9: a2:8f:07:da:8a:ce:d3:cc:e6:46:a2:b8:98:4d:22:a2:84:bb: 34:25:65:6a:e0:86:0d:56:5d:1c:31:5b:05:67:de:b3:c1:c0: 69:cd:f2:21:95:d5:54:b9:53:6c:45:45:6a:2d:33:e9:2b:a9: f0:55:70:05:59:0a:b7:7f:79:54:b8:1f:4e:14:6b:38:ff:68: 04:85:8b:6f:0a:ec:d3:b8:7d:fe:44:13:17:b9:a6:d7:9c:a4: 95:c0:04:7e:25:1b:e5:36:69:ec:fa:f3:7d:ac:e6:33:ac:cc: 87:80:83:f4:09:6f:12:dd:75:88:9c:80:d8:70:f7:81:16:5c: a8:66:dd:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIqrT2S+geqEyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ODFmNjcwODAtOWQ0MS00ZGRhLWI1N2QtMjRkNzNhNGNjNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KPPUvzXpfxlb0LOnkUTS453GQfP4CYE7ziJ 0klyL8/ENhvdECR/VwH2dJoG5+eXjfRqLFohHUjsecMcXO7zBLAggDJkg/5Sd2kH lvA098VMQo4IALhx8rFNHgievXccs+4BWC5MHQ4fRa5AIkrELCfsvP7aL2sYKMUY GLRqkif1j9b51jlpsdvkGV/B4Z40rPqeISHvhqNfs+P66W/9fVozdQbFWhZ4hxjJ HYcyD2gS7h5j4vsf8BgqaA1eh2R5P13UGLZ6eckCCSk+76OFAiyeT2zjb1WjCLIw IPwsJDnkUCLIcqZcr6mF55CjyrVwTNyQzrdkMiUX8+lKeODxRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKI+Yn9OFHAfoZk/11NzZKhQw25TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTIxNmJhNmMtNmU3NS0z YjExLThkM2ItZGM2NTZjMjZhN2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCWFUnK6xPFTj2XM0WloYdSflf75FTsdjN/YQKnuTIL/yORkynbwzcM nsxE/TiBlvWN3MngUYnmHPZLU3IE/dWWMMHI2+Bb6NPXvLwotKRzB4wWap/0rzjc 0SNasMl4brfz1Cip+1dkVjPmp//6wrAYZsN+X+tv2FZzZW5k1cmijwfais7TzOZG oriYTSKihLs0JWVq4IYNVl0cMVsFZ96zwcBpzfIhldVUuVNsRUVqLTPpK6nwVXAF WQq3f3lUuB9OFGs4/2gEhYtvCuzTuH3+RBMXuabXnKSVwAR+JRvlNmns+vN9rOYz rMyHgIP0CW8S3XWInIDYcPeBFlyoZt3I -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:47 2025 by rpki-client