$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa File: 70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa (raw, json) Hash identifier: zXuRg0so4uJ9Kz4OHUWZKZgshCV1FJ+GEbIkO6DMAVw= Subject key identifier: 6B:2B:D5:D2:C0:6D:7A:33:22:A6:39:C4:55:45:1F:D0:80:62:75:11 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF7459F17D7DE5C06FCDC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396565 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:45:9f:17:d7:de:5c:06:fc:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=772524af-d519-49ca-bab6-c7c966247399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d0:fe:f4:4d:f8:a4:95:5e:3d:f3:95:51:21: f5:07:09:2e:70:ee:18:ce:5c:0f:31:8b:d5:7a:0c: bd:15:11:8c:b3:e9:4e:05:e8:49:9d:c8:ba:f0:96: e1:4d:df:87:c7:97:7b:23:b0:e1:ac:44:1a:6f:56: 34:3d:23:b3:17:3d:bf:89:5b:28:7f:02:e8:36:70: 32:d7:e3:d7:24:a7:aa:c6:06:6f:d8:5a:c3:3b:fa: 03:25:73:8a:12:ef:60:83:9e:67:1d:15:49:7b:85: 55:10:fc:00:13:19:67:27:b2:b8:34:5c:06:e3:c4: 51:50:ce:cf:89:b4:ff:a9:4e:a9:3a:bd:90:cc:d3: 49:e9:91:bd:2a:f3:af:b5:31:e8:4e:35:12:e4:6e: 6e:02:92:15:5a:d7:90:3e:69:49:52:96:9c:09:aa: 99:52:b2:27:05:73:6e:54:0e:6c:9c:14:94:f2:02: a2:d4:05:c5:3d:46:4b:fb:f7:e0:46:83:79:ed:9d: 47:cb:10:8a:fb:f6:d4:40:d5:7a:40:28:32:3a:e7: 5f:94:03:fe:c8:2c:15:59:f7:c3:f9:3f:30:ce:6d: 89:13:45:e1:3b:b7:8d:71:c3:49:9f:5b:84:04:ab: ad:76:90:20:2a:75:02:d1:cc:99:eb:e8:2f:c7:09: f1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2B:D5:D2:C0:6D:7A:33:22:A6:39:C4:55:45:1F:D0:80:62:75:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70e98abe-00e3-3c6a-a2ef-f38c089bfce9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:4e:55:e3:b6:4e:d8:ef:e6:e2:77:27:aa:0b:72:6e:c4:5b: ab:72:ce:61:55:9e:1e:18:73:42:3a:27:33:d8:5b:74:a9:ea: 09:65:3f:c1:ad:33:a2:b7:11:8a:3f:9d:79:c5:11:cd:01:15: 51:1c:d3:69:66:45:bc:19:4b:7c:04:7d:5c:c7:c3:a3:f2:e0: f5:4e:d7:b6:2e:3f:38:f5:e9:6a:ea:8c:d6:58:4f:b0:e4:c0: 89:63:87:67:24:96:e4:6d:bd:34:92:cb:20:6b:e4:81:e6:51: 7f:81:ac:d4:fc:7b:dd:db:34:1f:97:0e:19:74:54:d9:fe:c8: 91:6f:7a:1d:59:c3:e4:0e:9b:58:7a:98:2d:ee:86:8a:7c:f1: a0:b9:c2:ce:9f:4f:8f:01:18:3d:5d:06:5c:5f:c7:1b:0b:3d: 2d:73:0e:b0:12:89:0b:e7:be:52:2c:a4:2b:7e:ef:bd:65:03: 5e:c3:f6:74:20:e4:00:7b:a2:42:3c:91:14:48:ac:a0:70:e7: e0:51:ef:4e:83:7d:1e:89:6b:03:13:62:09:3e:e2:9f:d7:18: b5:88:0b:d9:ba:d7:15:76:7a:30:83:50:c5:3d:da:a1:ef:e4: e7:00:9c:c9:8f:96:23:ad:bc:95:09:e5:02:d9:ab:c4:03:bb: 33:e2:48:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90WfF9feXAb83AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NzcyNTI0YWYtZDUxOS00OWNhLWJhYjYtYzdjOTY2MjQ3Mzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9D+9E34pJVePfOVUSH1BwkucO4YzlwPMYvV egy9FRGMs+lOBehJnci68JbhTd+Hx5d7I7DhrEQab1Y0PSOzFz2/iVsofwLoNnAy 1+PXJKeqxgZv2FrDO/oDJXOKEu9gg55nHRVJe4VVEPwAExlnJ7K4NFwG48RRUM7P ibT/qU6pOr2QzNNJ6ZG9KvOvtTHoTjUS5G5uApIVWteQPmlJUpacCaqZUrInBXNu VA5snBSU8gKi1AXFPUZL+/fgRoN57Z1HyxCK+/bUQNV6QCgyOudflAP+yCwVWffD +T8wzm2JE0XhO7eNccNJn1uEBKutdpAgKnUC0cyZ6+gvxwnxoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsr1dLAbXozIqY5xFVFH9CAYnURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzBlOThhYmUtMDBlMy0z YzZhLWEyZWYtZjM4YzA4OWJmY2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlOVeO2Ttjv5uJ3J6oLcm7EW6tyzmFVnh4Yc0I6JzPYW3Sp6gllP8Gt M6K3EYo/nXnFEc0BFVEc02lmRbwZS3wEfVzHw6Py4PVO17YuPzj16WrqjNZYT7Dk wIljh2ckluRtvTSSyyBr5IHmUX+BrNT8e93bNB+XDhl0VNn+yJFveh1Zw+QOm1h6 mC3uhop88aC5ws6fT48BGD1dBlxfxxsLPS1zDrASiQvnvlIspCt+771lA17D9nQg 5AB7okI8kRRIrKBw5+BR706DfR6JawMTYgk+4p/XGLWIC9m61xV2ejCDUMU92qHv 5OcAnMmPliOtvJUJ5QLZq8QDuzPiSIA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:02 2025 by rpki-client