$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be47ece-9823-3703-8b4c-ed6c65d71565.roa File: 7be47ece-9823-3703-8b4c-ed6c65d71565.roa (raw, json) Hash identifier: yyqB+GNDTyv2MywWY1zqIksvAJDWc5zBCXqaSsajgiM= Subject key identifier: B5:97:38:64:86:5C:C7:26:62:43:DE:4B:B2:7E:EA:80:73:44:49:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C85B331DEE8E854B783C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be47ece-9823-3703-8b4c-ed6c65d71565.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396564 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:85:b3:31:de:e8:e8:54:b7:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=3b3b1dde-c325-4f69-b691-3c18621ded97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fd:a9:1c:3c:a7:b1:6c:4c:1f:5b:06:f6:da: a7:ee:3e:e3:bb:2c:83:a7:38:8c:c9:8b:a6:a7:38: 1d:7c:f0:a8:6e:22:21:24:45:01:df:c7:2b:23:dc: f8:fa:6f:42:5d:dc:ab:e0:f0:a1:8a:bd:9b:b6:7a: 51:65:89:1e:de:0d:2f:3c:9c:ec:74:f3:1c:98:11: 34:ba:5b:9b:5b:35:f2:d4:95:a5:2f:88:58:e2:4a: 0d:4e:9d:76:bb:ad:ce:0f:13:bc:e9:74:c2:de:48: b4:49:64:73:cd:f3:69:4e:3b:a0:94:2b:7f:46:fd: 32:51:01:9c:9e:00:34:08:a0:c8:60:7b:36:75:77: d5:84:83:ee:2d:b4:dc:00:bf:17:0c:c8:8a:34:46: 9b:ad:52:c5:68:63:d8:88:27:5e:f5:26:e8:f4:01: 28:97:33:5d:93:1d:58:29:08:ba:c6:68:0e:d4:77: 9e:68:6d:aa:4d:23:b1:95:29:89:c5:78:28:24:d3: ed:61:71:0d:c5:c9:8c:4c:a1:fe:c2:81:93:56:c4: 28:57:f9:ed:d7:65:69:ad:b8:06:c2:87:b7:ee:26: bb:c4:4f:ff:a9:ca:c3:84:b8:b8:e0:d4:8d:97:b3: 8c:0c:8c:31:2e:dd:a6:e7:8d:75:13:56:7f:0a:1e: 49:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:97:38:64:86:5C:C7:26:62:43:DE:4B:B2:7E:EA:80:73:44:49:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7be47ece-9823-3703-8b4c-ed6c65d71565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:8f:0b:b3:12:32:09:56:77:79:2c:91:27:2d:c9:06:9c:e1: 0d:0f:3f:c9:30:95:67:7b:53:cb:54:68:21:e9:6d:54:f9:fc: 1e:b8:71:10:2a:78:ca:85:a8:de:89:64:86:cd:08:25:1e:7a: cb:de:0c:c5:09:be:34:a1:a6:a1:7f:0a:fb:3c:bc:a5:f1:bb: 74:17:9e:a1:25:83:0f:86:f6:34:98:01:7f:c8:10:4c:87:4d: 41:4f:15:c9:64:b0:fb:f3:53:53:8a:ae:fc:a1:b6:7b:f0:08: 08:e6:67:10:8e:04:2d:36:8d:88:61:ec:9c:00:04:a7:02:e6: cb:98:0d:79:22:86:bd:86:56:44:44:98:15:ac:c2:6d:23:01: 33:19:ed:a9:af:5b:04:e3:a4:65:bf:41:d3:06:07:00:db:3e: c3:ee:62:4c:e1:24:c1:a6:5a:32:f7:1d:f5:87:4f:5c:bd:a6: a7:b1:6d:1e:e6:9b:c0:b8:a2:6a:49:9c:75:dd:0b:09:c4:73: 25:ed:5d:cc:a0:b6:91:d8:c4:43:f4:e6:48:4d:0e:99:5f:22: 54:b7:ca:e7:9f:9e:b6:48:2f:64:91:1e:0d:24:29:95:94:68: ab:36:39:ef:ae:29:1f:0a:f5:73:ba:90:c6:bc:af:f6:73:d4: 64:00:9c:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIWzMd7o6FS3g8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk M2IzYjFkZGUtYzMyNS00ZjY5LWI2OTEtM2MxODYyMWRlZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P2pHDynsWxMH1sG9tqn7j7juyyDpziMyYum pzgdfPCobiIhJEUB38crI9z4+m9CXdyr4PChir2btnpRZYke3g0vPJzsdPMcmBE0 ulubWzXy1JWlL4hY4koNTp12u63ODxO86XTC3ki0SWRzzfNpTjuglCt/Rv0yUQGc ngA0CKDIYHs2dXfVhIPuLbTcAL8XDMiKNEabrVLFaGPYiCde9Sbo9AEolzNdkx1Y KQi6xmgO1HeeaG2qTSOxlSmJxXgoJNPtYXENxcmMTKH+woGTVsQoV/nt12VprbgG woe37ia7xE//qcrDhLi44NSNl7OMDIwxLt2m5411E1Z/Ch5JMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLWXOGSGXMcmYkPeS7J+6oBzREkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2JlNDdlY2UtOTgyMy0z NzAzLThiNGMtZWQ2YzY1ZDcxNTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCtjwuzEjIJVnd5LJEnLckGnOENDz/JMJVne1PLVGgh6W1U+fweuHEQ KnjKhajeiWSGzQglHnrL3gzFCb40oaahfwr7PLyl8bt0F56hJYMPhvY0mAF/yBBM h01BTxXJZLD781NTiq78obZ78AgI5mcQjgQtNo2IYeycAASnAubLmA15Ioa9hlZE RJgVrMJtIwEzGe2pr1sE46Rlv0HTBgcA2z7D7mJM4STBploy9x31h09cvaansW0e 5pvAuKJqSZx13QsJxHMl7V3MoLaR2MRD9OZITQ6ZXyJUt8rnn562SC9kkR4NJCmV lGirNjnvrikfCvVzupDGvK/2c9RkAJxZ -----END CERTIFICATE-----Generated at Mon Oct 20 06:57:34 2025 by rpki-client