$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa File: 86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa (raw, json) Hash identifier: AjBXYI84zwmBsaW72TQJTwCjz4AhjlZu2MSDC6TQ1cg= Subject key identifier: 65:B1:44:BB:18:6B:C7:BA:AA:90:CC:FA:B8:75:56:7C:3A:68:B7:18 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C90C7C7A56B8B71FBAA20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396562 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:90:c7:c7:a5:6b:8b:71:fb:aa:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=a80d04e9-b01d-45f2-ac8f-6e67667ae5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:3f:9f:64:e1:6a:90:fb:1e:1f:22:4c:5e: f8:55:0b:fb:da:17:dc:53:db:5d:fe:e7:4f:ef:08: d7:ae:e6:dd:56:98:1a:7b:45:57:6c:02:94:2a:d2: 10:f1:de:3d:ba:27:c9:31:db:03:d3:b0:f8:04:c8: 78:d3:74:74:0d:df:21:bf:7b:9b:22:b4:7a:1a:65: ba:42:15:17:6a:2b:01:1d:fb:7a:8a:a6:67:b6:9f: 75:98:02:76:7b:eb:17:de:1a:4a:35:e4:18:b0:80: 00:fd:ad:22:40:81:0b:15:ea:90:ca:b3:49:78:4c: b8:c6:cb:ad:fd:7d:8c:ed:63:99:a3:82:9b:cb:00: c7:88:89:66:f0:f2:3f:44:e1:71:b8:18:95:b7:71: a0:69:26:40:94:32:51:95:b1:68:92:48:e9:76:d2: 9e:1c:f6:87:ef:af:fe:4c:34:a5:d5:18:e3:08:56: f9:56:ba:35:42:15:57:a4:7e:50:f2:b5:ac:e7:3c: 22:6a:1c:4e:b5:3f:6c:78:13:a0:08:ff:6b:08:6a: 9e:70:db:a0:fd:b9:f5:4e:a6:29:de:12:ff:79:10: 40:9d:60:8a:f5:28:04:b9:98:e0:de:90:5e:01:bb: 13:92:cf:a2:6d:55:8b:80:54:de:b7:61:97:ae:0a: b7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B1:44:BB:18:6B:C7:BA:AA:90:CC:FA:B8:75:56:7C:3A:68:B7:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86f23a8d-cd2f-32af-a3f6-37b7f4db8897.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3e:63:0c:30:8a:95:6e:d1:a6:81:0e:31:65:bb:47:fd:3f: c1:c7:64:a4:21:fb:9f:82:b7:5d:92:e9:80:0d:c9:0a:73:d7: 00:ce:14:7e:d9:fb:00:2a:fd:1c:d1:ff:bc:12:51:d3:bc:c4: 65:b8:74:a6:50:85:8e:ec:0b:f6:66:b6:fd:b9:61:cf:a8:84: da:d8:96:35:44:68:95:fd:ec:57:c5:74:27:2d:d8:f7:be:44: d3:4e:74:ab:93:a0:79:2e:6e:3e:00:fa:74:54:c3:1e:af:45: 61:7b:6e:a6:32:d9:2f:5e:43:bb:e3:62:d7:c1:c4:ce:cd:97: 8f:e4:75:99:0f:bc:88:4d:ea:8d:aa:ba:f7:38:71:2b:81:59: b2:de:ea:31:9c:0c:c1:e2:28:57:4a:bb:78:dc:fe:8a:f3:08: d2:66:49:83:f7:1f:84:c7:27:e2:54:cf:c5:24:41:17:24:5d: 4a:6b:73:5f:c3:88:91:f5:44:e4:62:f7:13:f3:c3:d2:65:a0: 3d:c0:68:54:6c:1c:e8:f8:8b:a7:3b:d7:7d:66:f8:e0:e3:20: 18:08:c6:21:d0:23:2d:90:35:31:5c:34:8b:b6:b3:f7:c3:0e: aa:bc:0c:e8:8c:20:e1:ac:b6:51:5e:83:79:f4:b5:fc:14:13: d2:98:40:e0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfJDHx6Vri3H7qiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YTgwZDA0ZTktYjAxZC00NWYyLWFjOGYtNmU2NzY2N2FlNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNs/n2ThapD7Hh8iTF74VQv72hfcU9td/udP 7wjXrubdVpgae0VXbAKUKtIQ8d49uifJMdsD07D4BMh403R0Dd8hv3ubIrR6GmW6 QhUXaisBHft6iqZntp91mAJ2e+sX3hpKNeQYsIAA/a0iQIELFeqQyrNJeEy4xsut /X2M7WOZo4KbywDHiIlm8PI/ROFxuBiVt3GgaSZAlDJRlbFokkjpdtKeHPaH76/+ TDSl1RjjCFb5Vro1QhVXpH5Q8rWs5zwiahxOtT9seBOgCP9rCGqecNug/bn1TqYp 3hL/eRBAnWCK9SgEuZjg3pBeAbsTks+ibVWLgFTet2GXrgq3swIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGWxRLsYa8e6qpDM+rh1Vnw6aLcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZmMjNhOGQtY2QyZi0z MmFmLWEzZjYtMzdiN2Y0ZGI4ODk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6PmMMMIqVbtGmgQ4xZbtH/T/Bx2SkIfufgrddkumADckKc9cAzhR+ 2fsAKv0c0f+8ElHTvMRluHSmUIWO7Av2Zrb9uWHPqITa2JY1RGiV/exXxXQnLdj3 vkTTTnSrk6B5Lm4+APp0VMMer0Vhe26mMtkvXkO742LXwcTOzZeP5HWZD7yITeqN qrr3OHErgVmy3uoxnAzB4ihXSrt43P6K8wjSZkmD9x+ExyfiVM/FJEEXJF1Ka3Nf w4iR9UTkYvcT88PSZaA9wGhUbBzo+IunO9d9Zvjg4yAYCMYh0CMtkDUxXDSLtrP3 ww6qvAzojCDhrLZRXoN59LX8FBPSmEDg -----END CERTIFICATE-----Generated at Mon Oct 20 03:37:37 2025 by rpki-client