$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60837926-2043-3248-abd3-04b0a9d85137.roa File: 60837926-2043-3248-abd3-04b0a9d85137.roa (raw, json) Hash identifier: RBHrIYfdVqCvmXyV0p0uK9gvUBbh6sgFKMvjtvGkreA= Subject key identifier: FE:C1:19:71:DC:75:C4:9E:E1:F1:4E:51:B8:C1:0A:55:13:42:AC:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C83D2AD8C4CEE442FDD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60837926-2043-3248-abd3-04b0a9d85137.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 36616 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:83:d2:ad:8c:4c:ee:44:2f:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=0b126bb3-3c09-46ea-b75d-794f08d56f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:b6:6f:9c:08:fa:c4:1b:82:07:ad:df:d4:a4: 42:8b:f3:e7:7d:3b:d5:5d:bd:eb:86:b4:e5:94:bf: 4a:13:22:90:d2:34:7d:bb:a4:6d:ea:8f:35:eb:da: 54:8d:2d:68:9e:77:76:f0:45:0c:06:25:15:6f:73: 5f:2d:e2:77:7e:f1:f0:24:72:69:33:d8:94:be:a3: d8:d7:5e:15:e7:90:1b:23:02:97:ed:03:75:ff:cf: 83:5d:d6:db:9a:58:66:c2:d2:52:0f:aa:80:9f:ad: 18:83:39:91:37:85:2a:14:53:5a:b9:91:3a:1a:8b: 83:5e:96:14:07:c8:3f:db:ba:ec:82:81:b2:24:77: cd:01:51:21:f1:6a:e2:e0:4f:97:68:e7:2f:63:1e: b9:f7:a2:56:db:f4:56:92:80:ba:7e:ef:7e:ec:8b: 63:99:3f:e0:60:34:34:c8:b9:ee:66:6e:5e:a7:2a: f5:76:3c:83:f9:d5:6a:63:6e:92:61:ed:04:96:35: 1e:de:0d:76:3f:d4:72:93:eb:af:28:24:ea:03:a0: 31:07:a0:bc:d4:45:26:2a:ec:87:b4:75:37:6b:83: 5d:1c:f3:a3:6a:16:b1:39:ac:88:50:b9:31:a0:39: 67:4e:e1:5b:1e:ab:55:23:90:40:f6:85:8f:79:9a: f4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C1:19:71:DC:75:C4:9E:E1:F1:4E:51:B8:C1:0A:55:13:42:AC:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/60837926-2043-3248-abd3-04b0a9d85137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:38:9a:b7:09:66:8a:d7:60:df:77:96:2b:9a:45:c6:f6:b6: ce:8f:c0:fa:b6:95:f1:66:cd:8a:32:9c:53:e5:c7:9e:8a:2e: bf:bf:df:bc:2e:9c:68:90:72:2d:9d:09:82:d1:1f:95:96:ee: 90:6e:5e:cb:48:16:13:60:f3:2c:13:c3:d3:c1:f8:91:41:3a: 97:06:a8:d1:a8:49:e3:43:18:95:0d:ac:6a:bc:8d:cb:93:6a: 9f:13:e8:7e:32:87:d8:d4:30:e7:53:32:9b:93:7d:86:7c:2b: e0:b9:e6:38:5c:4b:4d:a4:68:c4:49:e3:59:55:4d:19:7e:c6: a6:2d:1a:3f:15:5e:0b:e4:45:5f:41:50:ec:1b:ba:33:dc:79: 58:40:21:47:f2:ba:c7:35:f5:ae:d4:45:00:53:44:25:c4:c6: 56:15:3c:07:2e:44:14:79:25:98:04:80:93:8e:7a:15:f6:d5: fb:dc:15:55:14:c8:1e:bd:83:61:da:41:cd:8c:f0:dc:6a:9d: 0c:5c:41:0d:83:df:d6:15:05:0b:36:f8:37:da:f2:93:55:9e: 54:1d:1b:fa:30:a6:ef:4e:d0:7f:97:dc:f0:2c:23:41:20:6b: 22:6c:84:a3:0b:3a:ef:2f:33:01:c3:b0:82:e7:8d:56:50:23: ae:86:27:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIPSrYxM7kQv3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MGIxMjZiYjMtM2MwOS00NmVhLWI3NWQtNzk0ZjA4ZDU2ZjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLZvnAj6xBuCB63f1KRCi/PnfTvVXb3rhrTl lL9KEyKQ0jR9u6Rt6o8169pUjS1onnd28EUMBiUVb3NfLeJ3fvHwJHJpM9iUvqPY 114V55AbIwKX7QN1/8+DXdbbmlhmwtJSD6qAn60YgzmRN4UqFFNauZE6GouDXpYU B8g/27rsgoGyJHfNAVEh8Wri4E+XaOcvYx6596JW2/RWkoC6fu9+7ItjmT/gYDQ0 yLnuZm5epyr1djyD+dVqY26SYe0EljUe3g12P9Ryk+uvKCTqA6AxB6C81EUmKuyH tHU3a4NdHPOjahaxOayIULkxoDlnTuFbHqtVI5BA9oWPeZr01wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFP7BGXHcdcSe4fFOUbjBClUTQqxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjA4Mzc5MjYtMjA0My0z MjQ4LWFiZDMtMDRiMGE5ZDg1MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKOJq3CWaK12Dfd5YrmkXG9rbOj8D6tpXxZs2KMpxT5ceeii6/v9+8 LpxokHItnQmC0R+Vlu6Qbl7LSBYTYPMsE8PTwfiRQTqXBqjRqEnjQxiVDaxqvI3L k2qfE+h+MofY1DDnUzKbk32GfCvgueY4XEtNpGjESeNZVU0ZfsamLRo/FV4L5EVf QVDsG7oz3HlYQCFH8rrHNfWu1EUAU0QlxMZWFTwHLkQUeSWYBICTjnoV9tX73BVV FMgevYNh2kHNjPDcap0MXEENg9/WFQULNvg32vKTVZ5UHRv6MKbvTtB/l9zwLCNB IGsibISjCzrvLzMBw7CC541WUCOuhifI -----END CERTIFICATE-----Generated at Mon Oct 20 10:52:01 2025 by rpki-client