$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa File: 89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa (raw, json) Hash identifier: vw9JY6EEIhp1fzaOrjk6zNtdg2YYA3IZUw/F4A5nztY= Subject key identifier: 40:F9:86:05:5A:F0:A4:37:EB:23:EC:88:2E:D1:0C:8F:F9:03:3A:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B39871210AE14AA2F10180180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 396595 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:12:10:ae:14:aa:2f:10:18:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=391ea628-1b85-49bb-b56c-4c1cceb390a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:70:38:eb:cf:76:98:4d:83:7b:4d:59:8d: c5:68:c4:64:ec:ed:ab:5f:e2:cc:cc:8f:a9:9b:09: af:75:df:19:ac:13:96:86:ff:c1:12:bd:a2:88:f3: fd:e3:0b:3a:09:33:b1:2f:7b:f8:78:7e:d0:ee:3c: 4a:2f:7c:57:a2:54:8d:5f:63:17:e1:f2:c3:84:80: 9c:2f:47:a7:db:f0:f6:ef:a1:5c:39:ab:6f:4c:16: 72:6d:16:71:1f:b9:44:9e:b2:00:bb:75:f8:43:9e: 19:66:10:08:4e:e2:32:af:a9:42:bc:d9:4e:20:6d: bc:d7:3e:0b:f9:4f:36:f7:4c:0c:b1:2a:9c:27:c0: 0a:86:cf:c7:b0:96:83:e7:8e:ac:b4:b1:5a:14:25: f1:32:df:64:a2:f9:83:24:25:e8:1f:2f:42:22:46: 27:61:1e:9c:de:09:87:f5:0c:71:92:75:8f:70:af: 1d:cc:f8:50:5d:46:3f:38:cf:48:f9:e9:03:1f:c7: 8c:f2:e5:b6:15:f8:39:72:02:55:e8:6b:80:13:6a: 25:05:d8:64:bd:79:b9:49:fe:4c:dc:17:38:85:7f: e8:ec:cf:2e:0d:d7:d8:ca:81:79:53:41:63:68:df: 70:43:84:95:da:ea:af:90:94:2f:b5:9d:09:e0:67: b0:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F9:86:05:5A:F0:A4:37:EB:23:EC:88:2E:D1:0C:8F:F9:03:3A:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/89784526-a17a-334b-9f13-dd4ff7b2ec1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:b2:68:a1:81:74:fd:b7:cb:d9:d1:69:0a:54:cb:c9:d1:24: ae:6e:58:a8:5b:1a:71:0a:f5:46:c9:4e:b6:77:98:3a:38:06: 60:17:f1:f5:3b:c6:8e:0e:ad:4e:af:66:57:e7:cd:32:2e:bd: b9:f3:9a:c0:03:3d:22:5f:07:1b:62:aa:53:c7:2b:33:52:73: 07:3e:8e:2d:86:d1:cf:a5:9a:4b:0d:0a:76:04:03:53:ac:f9: 0d:3d:1d:18:d1:15:77:2b:5f:7d:fe:5b:f0:23:fd:39:c9:92: 75:64:7e:dd:ba:93:0c:c5:8a:73:ae:65:97:f7:74:53:c8:3c: b3:04:a1:d9:07:b1:5d:b9:6d:b2:01:f0:2a:9d:88:67:08:c9: 9f:90:dc:97:97:4a:c0:f7:4a:62:15:ae:47:20:70:05:3a:ff: b1:8f:af:22:b4:ee:99:f5:11:38:e6:15:1a:57:7f:7c:4d:fa: d6:d5:6c:75:3d:1d:ac:15:39:e5:c8:88:8d:26:6f:fb:18:45: fa:01:21:d3:98:e4:06:71:e3:8d:a6:60:20:c5:3d:77:6a:5c: 56:c1:32:7f:a9:30:4e:63:86:73:41:f0:e2:24:98:b3:0a:f4: 88:53:0f:35:bf:bc:49:e3:1d:39:ab:d5:4e:5c:38:2c:c2:d6: 91:ac:fb:3b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hxIQrhSqLxAYAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MzkxZWE2MjgtMWI4NS00OWJiLWI1NmMtNGMxY2NlYjM5MGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkpwOOvPdphNg3tNWY3FaMRk7O2rX+LMzI+p mwmvdd8ZrBOWhv/BEr2iiPP94ws6CTOxL3v4eH7Q7jxKL3xXolSNX2MX4fLDhICc L0en2/D276FcOatvTBZybRZxH7lEnrIAu3X4Q54ZZhAITuIyr6lCvNlOIG281z4L +U8290wMsSqcJ8AKhs/HsJaD546stLFaFCXxMt9kovmDJCXoHy9CIkYnYR6c3gmH 9QxxknWPcK8dzPhQXUY/OM9I+ekDH8eM8uW2Ffg5cgJV6GuAE2olBdhkvXm5Sf5M 3Bc4hX/o7M8uDdfYyoF5U0FjaN9wQ4SV2uqvkJQvtZ0J4Gew5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFED5hgVa8KQ36yPsiC7RDI/5AzomMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODk3ODQ1MjYtYTE3YS0z MzRiLTlmMTMtZGQ0ZmY3YjJlYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC/smihgXT9t8vZ0WkKVMvJ0SSublioWxpxCvVGyU62d5g6OAZgF/H1 O8aODq1Or2ZX580yLr2585rAAz0iXwcbYqpTxyszUnMHPo4thtHPpZpLDQp2BANT rPkNPR0Y0RV3K199/lvwI/05yZJ1ZH7dupMMxYpzrmWX93RTyDyzBKHZB7FduW2y AfAqnYhnCMmfkNyXl0rA90piFa5HIHAFOv+xj68itO6Z9RE45hUaV398TfrW1Wx1 PR2sFTnlyIiNJm/7GEX6ASHTmOQGceONpmAgxT13alxWwTJ/qTBOY4ZzQfDiJJiz CvSIUw81v7xJ4x05q9VOXDgswtaRrPs7 -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:33 2025 by rpki-client