$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa File: 67cbebac-17d5-3929-b4d2-359890a2d8d6.roa (raw, json) Hash identifier: Egba2I/6JbX9yqHCoG2NM01Ka3F/jyE3zKpwogX4uPk= Subject key identifier: 73:66:27:EA:C8:CC:2C:C1:39:A3:53:B6:4E:D8:D5:E5:C7:65:DC:C6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B3987125358FE2C0062CF6380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 36627 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:12:53:58:fe:2c:00:62:cf:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=76420ae7-d6de-45f9-98d9-69557fa29fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:72:0d:a9:b3:a0:70:f7:71:ac:15:52:4b: c8:75:8b:59:e7:a3:ec:9e:c9:cf:64:de:2e:1a:c4: c8:8f:90:5b:13:cb:35:b6:88:03:a3:29:a0:00:a6: 7e:57:78:2c:34:ca:ba:03:02:64:7b:49:d7:eb:7e: f4:6d:0c:75:52:d9:b5:b2:43:5a:34:c0:03:2e:78: f7:be:92:9d:6c:17:c9:cf:6c:d2:37:c6:fa:e7:d0: 85:e2:7a:c9:b5:e0:d6:a6:4d:79:24:c0:65:6a:94: 8c:c3:9e:05:76:fc:da:a8:95:c6:39:d9:d2:1f:4f: 46:68:98:ed:f2:86:69:e2:51:64:0e:f7:83:26:66: 8a:ed:f2:4f:10:ad:96:0a:d2:c5:07:4a:76:19:12: 41:d1:58:55:f5:01:7a:57:3c:63:b9:61:76:89:bd: f3:cd:30:cc:52:da:0d:7e:46:73:ff:22:31:a2:de: 81:ca:67:b0:c3:a3:6a:19:a1:42:f6:5f:cf:19:81: b8:73:2b:ae:4e:b7:55:bb:78:68:1f:03:e5:44:2a: 8c:9f:d2:81:6b:88:2b:f1:a5:f9:b1:55:68:71:5d: 10:69:bd:3b:fa:c9:72:32:c0:3d:8a:cd:eb:25:07: d8:ab:36:e5:fd:c6:d4:78:e2:20:b7:bd:83:e8:bc: 20:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:66:27:EA:C8:CC:2C:C1:39:A3:53:B6:4E:D8:D5:E5:C7:65:DC:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/67cbebac-17d5-3929-b4d2-359890a2d8d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4c:e5:09:f0:5d:99:18:51:d7:e7:47:d5:12:a4:2f:96:a1: 59:fe:1f:90:b8:0d:d5:b5:a5:50:aa:c9:7c:d8:47:f4:a8:3e: 07:e7:e2:1d:f7:e2:39:4c:c3:93:25:c2:70:3c:42:49:3c:41: 89:96:85:6c:d0:8d:c4:f2:af:64:6a:13:fa:a0:18:fd:ea:cb: c8:85:2d:ce:2f:ec:b5:4f:37:49:a0:f1:1c:0c:50:dd:ad:77: b9:4c:36:de:a1:93:15:e7:9d:d7:6c:e0:87:b3:ee:27:1c:42: c9:61:d7:67:6f:a8:a8:fa:a2:81:ba:90:db:8e:78:51:1b:67: 1b:74:46:b0:9e:71:c0:b0:31:d0:fb:0e:29:09:23:c6:ca:a2: 3f:76:21:f2:7a:85:59:68:a5:dc:97:7a:d3:c8:8f:5f:7b:f6: 74:4f:b1:e9:ef:52:d1:b8:b3:b6:0e:a0:0e:12:61:db:62:e8: 0b:04:14:53:36:4d:ac:54:6b:47:87:46:bc:50:d4:dd:91:e3: 2c:01:91:3b:05:92:b1:ef:e2:65:1d:25:a1:16:73:df:8e:68: 1f:7e:8e:7a:cf:3d:01:e2:a8:e5:c6:d7:db:65:48:bd:b7:36: c4:03:f8:f9:7f:7b:af:33:6e:24:f1:2d:f3:0f:26:65:4c:24: cf:7d:1e:64 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hxJTWP4sAGLPY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NzY0MjBhZTctZDZkZS00NWY5LTk4ZDktNjk1NTdmYTI5ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmadyDamzoHD3cawVUkvIdYtZ56PsnsnPZN4u GsTIj5BbE8s1togDoymgAKZ+V3gsNMq6AwJke0nX6370bQx1Utm1skNaNMADLnj3 vpKdbBfJz2zSN8b659CF4nrJteDWpk15JMBlapSMw54FdvzaqJXGOdnSH09GaJjt 8oZp4lFkDveDJmaK7fJPEK2WCtLFB0p2GRJB0VhV9QF6VzxjuWF2ib3zzTDMUtoN fkZz/yIxot6Bymeww6NqGaFC9l/PGYG4cyuuTrdVu3hoHwPlRCqMn9KBa4gr8aX5 sVVocV0Qab07+slyMsA9is3rJQfYqzbl/cbUeOIgt72D6LwgDwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHNmJ+rIzCzBOaNTtk7Y1eXHZdzGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjdjYmViYWMtMTdkNS0z OTI5LWI0ZDItMzU5ODkwYTJkOGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2TOUJ8F2ZGFHX50fVEqQvlqFZ/h+QuA3VtaVQqsl82Ef0qD4H5+Id 9+I5TMOTJcJwPEJJPEGJloVs0I3E8q9kahP6oBj96svIhS3OL+y1TzdJoPEcDFDd rXe5TDbeoZMV553XbOCHs+4nHELJYddnb6io+qKBupDbjnhRG2cbdEawnnHAsDHQ +w4pCSPGyqI/diHyeoVZaKXcl3rTyI9fe/Z0T7Hp71LRuLO2DqAOEmHbYugLBBRT Nk2sVGtHh0a8UNTdkeMsAZE7BZKx7+JlHSWhFnPfjmgffo56zz0B4qjlxtfbZUi9 tzbEA/j5f3uvM24k8S3zDyZlTCTPfR5k -----END CERTIFICATE-----Generated at Mon Oct 20 10:42:02 2025 by rpki-client