$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73e47cfc-42e4-3dde-a2f4-8a87806558e1.roa File: 73e47cfc-42e4-3dde-a2f4-8a87806558e1.roa (raw, json) Hash identifier: PF0c4+wvf1FNKutpo62DlTlloygRRe2blJHaeoS05ew= Subject key identifier: 07:89:2F:8F:46:52:75:15:60:6A:86:25:40:4E:DE:F3:51:78:42:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8E3DD2E8D3526523A800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73e47cfc-42e4-3dde-a2f4-8a87806558e1.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 397200 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8e:3d:d2:e8:d3:52:65:23:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=b8d6c5be-9ff0-4922-91fc-a48f8e095b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:23:c3:74:f0:74:58:18:ac:75:8a:e2:a3: 23:9d:b1:17:2e:52:cf:8d:03:6e:a2:6c:5b:3c:2b: f6:40:4e:c8:c5:98:6b:7b:05:1c:91:2f:6d:ca:fd: 5d:6f:97:f2:d5:4f:bb:99:78:9c:e8:76:17:73:be: dc:fb:4d:b1:10:fb:66:a5:c5:2b:da:f4:95:10:48: b8:d8:6b:70:9f:e9:dc:33:98:b3:d2:b6:99:82:06: 16:96:9c:f4:72:93:e5:ee:fb:9e:b7:ad:24:24:7a: 67:dc:dd:b2:db:25:4c:e3:df:df:6b:61:6d:75:cd: 3f:fa:26:87:7b:ad:de:83:ec:7b:03:92:23:e3:ea: 1b:85:0c:a1:3b:b3:b2:ea:31:a1:55:ec:8f:ff:44: 0c:db:ce:64:ce:eb:f8:54:93:d4:3f:df:2a:2f:20: fb:62:3a:37:02:f1:5f:b8:19:03:cd:e5:d9:95:74: 77:61:81:f9:17:a8:7d:23:1f:4e:ac:2e:18:de:a3: dc:ca:36:80:12:92:a0:06:ea:9b:15:b9:9b:ca:ec: cd:0d:da:2c:50:90:bf:65:b4:8a:00:a3:00:ff:c2: 38:c0:ac:04:a7:d9:71:08:38:90:4b:2a:f5:52:06: ef:1c:de:ae:ca:cd:4b:2b:5b:04:71:21:40:8a:f0: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:89:2F:8F:46:52:75:15:60:6A:86:25:40:4E:DE:F3:51:78:42:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/73e47cfc-42e4-3dde-a2f4-8a87806558e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fd:58:94:e3:bf:22:6c:e0:80:b7:6b:c5:d2:d0:da:28:c6: 07:fd:81:7d:eb:c1:ee:41:ca:1b:12:c8:c1:ca:81:39:c9:2e: 52:b5:70:21:83:d4:b5:de:29:b4:bb:22:a1:46:88:2e:31:3b: 07:20:a9:80:d8:63:57:c2:ae:da:26:3b:8b:73:90:f6:88:8a: da:ce:5b:0d:be:a4:4d:c4:1c:27:db:a8:c5:a3:4d:5b:c5:a2: 46:c2:05:62:a0:e4:09:63:0d:38:9e:f7:77:3e:15:e7:33:bb: 2d:e1:a9:59:d5:5d:10:89:14:37:bc:c1:c2:51:1d:f9:3c:e0: 48:65:04:c0:4b:49:f0:32:1a:38:d8:ec:f3:97:8c:f6:2b:e3: 81:51:b4:58:24:0a:03:55:bd:ff:64:8c:16:7f:97:4b:8e:c0: 62:17:5c:88:a6:f1:0e:b8:a0:2c:7a:60:53:20:d7:6d:e2:eb: 00:f1:1a:2c:3c:e0:9f:39:90:26:78:57:3b:70:66:66:dc:19: d6:f5:5b:87:4c:1b:c8:89:27:a6:58:4f:a9:be:a0:bb:62:c8: 5b:ba:4d:87:77:f8:77:80:6a:0a:cb:7c:f8:f4:04:31:26:29: 85:15:9b:8e:bc:c9:66:22:45:e8:aa:25:a2:52:03:10:15:d3: 54:dd:a5:01 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI490ujTUmUjqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YjhkNmM1YmUtOWZmMC00OTIyLTkxZmMtYTQ4ZjhlMDk1YjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Vsjw3TwdFgYrHWK4qMjnbEXLlLPjQNuomxb PCv2QE7IxZhrewUckS9tyv1db5fy1U+7mXic6HYXc77c+02xEPtmpcUr2vSVEEi4 2Gtwn+ncM5iz0raZggYWlpz0cpPl7vuet60kJHpn3N2y2yVM49/fa2Ftdc0/+iaH e63eg+x7A5Ij4+obhQyhO7Oy6jGhVeyP/0QM285kzuv4VJPUP98qLyD7Yjo3AvFf uBkDzeXZlXR3YYH5F6h9Ix9OrC4Y3qPcyjaAEpKgBuqbFbmbyuzNDdosUJC/ZbSK AKMA/8I4wKwEp9lxCDiQSyr1UgbvHN6uys1LK1sEcSFAivAUjQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAeJL49GUnUVYGqGJUBO3vNReEKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzNlNDdjZmMtNDJlNC0z ZGRlLWEyZjQtOGE4NzgwNjU1OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBI/ViU478ibOCAt2vF0tDaKMYH/YF968HuQcobEsjByoE5yS5StXAh g9S13im0uyKhRoguMTsHIKmA2GNXwq7aJjuLc5D2iIrazlsNvqRNxBwn26jFo01b xaJGwgVioOQJYw04nvd3PhXnM7st4alZ1V0QiRQ3vMHCUR35POBIZQTAS0nwMho4 2Ozzl4z2K+OBUbRYJAoDVb3/ZIwWf5dLjsBiF1yIpvEOuKAsemBTINdt4usA8Ros POCfOZAmeFc7cGZm3BnW9VuHTBvIiSemWE+pvqC7Yshbuk2Hd/h3gGoKy3z49AQx JimFFZuOvMlmIkXoqiWiUgMQFdNU3aUB -----END CERTIFICATE-----Generated at Mon Oct 20 03:21:31 2025 by rpki-client