$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/575013de-3020-3cd9-a921-00ad71d5306c.roa File: 575013de-3020-3cd9-a921-00ad71d5306c.roa (raw, json) Hash identifier: yMc58jhHJ2C12yNDo00LfZpBwKVQaukskbcz9xBv94Q= Subject key identifier: C0:86:90:D5:2F:C6:77:A5:F8:29:0C:32:82:54:ED:63:72:0A:9F:CD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74276D024B04255450580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/575013de-3020-3cd9-a921-00ad71d5306c.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396560 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:42:76:d0:24:b0:42:55:45:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=400a2a14-a152-4d12-9eca-630967deb7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3a:76:b9:cb:7c:8f:16:78:69:1c:bb:a7:64: 32:0b:e9:a4:42:e0:2b:66:00:40:54:72:6a:6e:0a: 0d:54:11:13:2e:4b:17:34:11:c3:d9:e8:46:c4:08: 94:ac:95:5f:50:50:fc:7c:51:e7:e5:d0:1d:61:3a: 82:11:6d:56:b0:c1:96:6e:58:8b:65:d0:2a:08:7c: 0d:9d:0a:d9:e2:76:6c:be:04:8a:4c:2d:61:b8:34: a5:66:0f:4e:9c:c4:f3:33:5d:40:ef:a7:3b:f9:a4: b8:55:ca:51:2e:28:1f:71:0a:7f:89:b3:41:54:fb: 6f:2e:0e:30:67:52:c5:4a:6c:7d:be:64:c1:85:5d: 0a:cf:ea:50:12:ee:b3:41:54:62:0b:02:b7:3a:48: 55:73:37:a8:cd:c9:ca:ff:34:a4:3c:a7:b8:5c:35: 93:4f:8a:ae:ac:83:54:80:df:dc:a4:d8:d9:60:82: c9:e5:68:ff:c3:81:e7:6b:ec:4b:78:41:0a:d9:62: bf:62:86:1e:56:9c:1c:06:e6:24:ce:ea:c2:3d:98: dd:86:82:eb:4e:7d:c5:bb:20:d9:53:dd:35:d4:04: fa:62:36:df:31:bc:0b:8f:8f:b0:04:9c:0d:82:90: ff:83:a5:29:54:25:fc:e4:f4:31:81:30:bb:80:8d: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:86:90:D5:2F:C6:77:A5:F8:29:0C:32:82:54:ED:63:72:0A:9F:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/575013de-3020-3cd9-a921-00ad71d5306c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:93:7e:dc:16:75:b9:48:8a:99:5f:1a:2b:f1:a9:ba:47:e3: 9e:52:e3:3b:11:71:8a:ff:8b:8a:a9:eb:3f:f8:b4:e1:73:0a: 66:c4:69:46:52:40:9d:57:47:77:b5:f7:b5:f3:6f:d0:09:64: 96:2c:f0:27:f7:b1:f7:3b:d5:01:86:e9:99:49:a9:e4:cf:4d: 26:21:4c:2e:d7:b4:8e:f3:34:75:d8:25:40:93:51:d7:01:f2: 38:11:ed:17:12:8d:5b:32:d5:3d:bc:44:54:91:f7:bb:d5:29: 0b:ba:57:c8:4a:bc:3b:b9:89:3d:b3:a4:4f:79:d3:07:f8:76: 9f:e3:34:55:f8:47:de:4c:2e:e6:62:a5:90:bc:74:0d:89:e8: aa:f1:da:a5:b3:93:8c:d6:20:fa:80:5e:9c:5f:ad:0f:ae:e2: 4b:59:5a:a8:63:2b:2e:08:e2:d5:53:e9:27:18:46:ee:f8:09: ac:34:68:da:32:0c:0d:7a:7b:12:de:55:18:aa:22:1d:68:ca: a0:34:25:1c:a2:8c:14:d7:ce:ee:08:3a:62:ad:96:33:88:a8: 27:c8:bf:61:9a:58:d8:6e:54:43:59:c4:43:02:92:11:4d:bd: 56:3e:a6:f5:9c:ca:b8:5b:00:9a:4e:69:f8:1b:f3:fc:9b:fc: a0:6f:12:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90J20CSwQlVFBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NDAwYTJhMTQtYTE1Mi00ZDEyLTllY2EtNjMwOTY3ZGViN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijp2uct8jxZ4aRy7p2QyC+mkQuArZgBAVHJq bgoNVBETLksXNBHD2ehGxAiUrJVfUFD8fFHn5dAdYTqCEW1WsMGWbliLZdAqCHwN nQrZ4nZsvgSKTC1huDSlZg9OnMTzM11A76c7+aS4VcpRLigfcQp/ibNBVPtvLg4w Z1LFSmx9vmTBhV0Kz+pQEu6zQVRiCwK3OkhVczeozcnK/zSkPKe4XDWTT4qurINU gN/cpNjZYILJ5Wj/w4Hna+xLeEEK2WK/YoYeVpwcBuYkzurCPZjdhoLrTn3FuyDZ U9011AT6YjbfMbwLj4+wBJwNgpD/g6UpVCX85PQxgTC7gI1ZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCGkNUvxnel+CkMMoJU7WNyCp/NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTc1MDEzZGUtMzAyMC0z Y2Q5LWE5MjEtMDBhZDcxZDUzMDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASTftwWdblIiplfGivxqbpH455S4zsRcYr/i4qp6z/4tOFzCmbEaUZS QJ1XR3e197Xzb9AJZJYs8Cf3sfc71QGG6ZlJqeTPTSYhTC7XtI7zNHXYJUCTUdcB 8jgR7RcSjVsy1T28RFSR97vVKQu6V8hKvDu5iT2zpE950wf4dp/jNFX4R95MLuZi pZC8dA2J6Krx2qWzk4zWIPqAXpxfrQ+u4ktZWqhjKy4I4tVT6ScYRu74Caw0aNoy DA16exLeVRiqIh1oyqA0JRyijBTXzu4IOmKtljOIqCfIv2GaWNhuVENZxEMCkhFN vVY+pvWcyrhbAJpOafgb8/yb/KBvEus= -----END CERTIFICATE-----Generated at Mon Oct 20 03:53:47 2025 by rpki-client