$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa File: 8485d8aa-301a-3bf7-ac15-360740514ac0.roa (raw, json) Hash identifier: iCapk/6JZoec00+lXIeuZLKKvDQ0etPA9BIqJzx2iYU= Subject key identifier: AE:32:F3:D9:CE:17:E4:20:93:17:82:98:37:74:CB:00:D4:0B:40:46 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B39870D51C8C4DA062A6E6900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 36632 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0d:51:c8:c4:da:06:2a:6e:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=63231b70-948b-4b4e-9719-121f279a8744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e0:81:84:9f:ec:18:da:6f:76:d1:a9:c7:04: 65:46:51:05:26:81:a2:31:a5:78:27:b3:ff:dc:99: 29:c8:24:22:47:7d:39:2c:7e:f0:c0:8a:b9:de:d5: 00:f6:b9:d9:5a:32:33:30:43:24:15:f2:79:1d:46: 8b:ff:78:2e:59:2f:51:b0:b1:a3:8b:98:9d:22:40: 72:36:cf:75:a1:b5:94:d2:08:fe:0f:e9:1b:4e:85: 36:df:9c:25:14:21:07:aa:00:46:13:b1:32:44:0a: 6c:51:97:b9:9a:28:aa:e7:da:58:46:f0:fa:74:24: 21:12:dc:8b:6f:05:8a:32:c8:9b:d2:ba:11:10:1d: f8:54:66:2f:be:71:1b:ea:83:e8:0f:35:e6:9f:f8: c2:86:8c:d7:2e:57:ec:be:8b:52:0a:99:a9:4d:07: 9e:e7:ea:93:18:58:5c:f0:a6:47:b9:7d:76:0c:2d: e2:60:a0:91:ba:21:8a:5d:51:f8:03:5a:cd:6c:84: a5:a7:66:f6:ac:a6:15:fe:21:3b:ee:fb:9f:8e:39: 29:3d:e4:11:27:7a:c7:3b:2e:91:89:7d:cf:48:02: fb:da:74:ae:cf:b4:5b:86:bd:e4:6c:d3:a2:72:99: a9:d9:c2:bd:7f:8e:98:fe:b8:38:2b:2e:64:8a:d6: 87:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:32:F3:D9:CE:17:E4:20:93:17:82:98:37:74:CB:00:D4:0B:40:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8485d8aa-301a-3bf7-ac15-360740514ac0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:0e:d9:96:8b:c8:20:99:79:2b:bc:a1:b2:7f:2e:79:9a:c9: 44:4d:b0:76:f9:ce:2b:c0:88:db:7d:2d:e4:d9:1f:7b:12:74: 48:c6:47:ee:85:37:cd:0d:eb:e7:d5:d6:2a:e9:b5:22:a2:eb: 80:2c:68:9a:b7:6b:ab:29:51:17:d0:27:fd:0a:bf:7e:a9:0f: 60:63:6c:a9:33:d1:e8:0e:fb:b2:33:68:aa:fc:f2:76:34:75: 7d:67:4f:84:2e:5f:77:27:1e:6b:50:a2:79:28:78:78:b6:4f: fd:c6:fb:bb:aa:82:3d:8f:ec:92:25:28:39:f5:f0:92:60:fe: 81:2a:a8:46:2c:e8:cf:38:53:66:43:87:af:ab:04:9f:28:bf: 95:38:2b:69:bb:df:46:81:d7:fd:f0:36:68:22:16:b1:88:97: 0b:3a:66:e9:e0:d8:7a:bf:f4:cd:9d:67:20:52:13:b6:50:1e: 92:86:29:48:7e:d1:72:c3:2f:18:7c:ce:80:50:0a:1b:1d:d4: 20:86:b9:5f:9f:02:86:a8:53:56:16:cb:15:dc:55:25:5c:97: 03:33:76:c2:53:38:1f:fa:25:8d:53:92:8e:ac:2b:3e:0c:cc: 6f:44:8f:ff:d1:d9:aa:88:b1:9a:72:b2:65:13:83:02:ef:d4: 64:c0:04:f9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hw1RyMTaBipuaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NjMyMzFiNzAtOTQ4Yi00YjRlLTk3MTktMTIxZjI3OWE4NzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOCBhJ/sGNpvdtGpxwRlRlEFJoGiMaV4J7P/ 3JkpyCQiR305LH7wwIq53tUA9rnZWjIzMEMkFfJ5HUaL/3guWS9RsLGji5idIkBy Ns91obWU0gj+D+kbToU235wlFCEHqgBGE7EyRApsUZe5miiq59pYRvD6dCQhEtyL bwWKMsib0roREB34VGYvvnEb6oPoDzXmn/jChozXLlfsvotSCpmpTQee5+qTGFhc 8KZHuX12DC3iYKCRuiGKXVH4A1rNbISlp2b2rKYV/iE77vufjjkpPeQRJ3rHOy6R iX3PSAL72nSuz7Rbhr3kbNOicpmp2cK9f46Y/rg4Ky5kitaHtQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK4y89nOF+QgkxeCmDd0ywDUC0BGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQ4NWQ4YWEtMzAxYS0z YmY3LWFjMTUtMzYwNzQwNTE0YWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC3DtmWi8ggmXkrvKGyfy55mslETbB2+c4rwIjbfS3k2R97EnRIxkfu hTfNDevn1dYq6bUiouuALGiat2urKVEX0Cf9Cr9+qQ9gY2ypM9HoDvuyM2iq/PJ2 NHV9Z0+ELl93Jx5rUKJ5KHh4tk/9xvu7qoI9j+ySJSg59fCSYP6BKqhGLOjPOFNm Q4evqwSfKL+VOCtpu99Ggdf98DZoIhaxiJcLOmbp4Nh6v/TNnWcgUhO2UB6ShilI ftFywy8YfM6AUAobHdQghrlfnwKGqFNWFssV3FUlXJcDM3bCUzgf+iWNU5KOrCs+ DMxvRI//0dmqiLGacrJlE4MC79RkwAT5 -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:52 2025 by rpki-client