$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa File: 8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa (raw, json) Hash identifier: YOaMqv3o4uS5dl32fdSrzlyLROi6xjadXT+ato4uvy4= Subject key identifier: F6:DF:33:AA:09:54:4C:6E:DA:F2:84:3E:00:E8:6C:97:D4:DF:0B:A6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B398712757BC06E9A68277800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 397200 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:12:75:7b:c0:6e:9a:68:27:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=bc35f5fe-c1ff-43d8-ae83-3a1634f40ad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:15:81:35:43:2a:e0:3c:a4:b8:ab:40:ef:33: 02:78:f4:50:fc:56:e1:6c:b4:32:ba:c1:2f:21:43: 10:b5:a9:3f:e8:92:85:e5:da:24:b6:f9:bf:31:a9: 80:71:50:3b:f7:83:94:a6:44:e7:4a:3e:02:3f:4b: 52:ed:5b:de:e3:44:63:75:19:97:b6:15:40:f8:f4: 29:a1:a3:9d:02:45:91:db:e1:ba:27:80:ee:dd:14: 43:15:8c:eb:33:24:a1:77:dd:69:55:3e:69:95:4c: 90:6f:1f:fe:fb:b1:71:44:46:e8:c2:84:f4:8d:d5: 2b:26:84:1f:81:39:6a:2d:6f:95:fc:fa:71:1c:dc: a1:35:de:5d:bd:e0:19:8a:7a:e5:2d:e7:97:99:5c: 76:10:fc:56:ad:6a:df:ab:46:68:ac:60:82:7d:a0: c9:16:ff:70:a4:2b:10:de:98:1b:d4:12:80:64:b6: 85:57:a3:4d:96:42:2f:de:e7:5a:1c:ca:14:69:ab: 09:04:94:cc:df:e7:f8:34:96:1f:d2:f7:b7:80:d1: fc:40:be:2b:e7:07:16:41:ee:d3:47:dc:26:a2:ce: 4e:c3:45:1e:aa:24:63:94:fb:69:53:40:93:17:8a: d1:59:fb:02:1e:d4:b4:65:19:20:c2:e4:2b:e2:b6: b0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DF:33:AA:09:54:4C:6E:DA:F2:84:3E:00:E8:6C:97:D4:DF:0B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9930f0-49cd-3f71-9a61-e919e09c67b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8e:8c:e3:3b:49:22:97:2c:e9:09:f1:f4:0a:a1:80:6d:55: fb:c7:e4:45:c3:45:60:88:ef:0f:60:23:11:67:b5:f4:0d:db: fb:ee:95:9f:b2:86:56:85:29:4f:31:03:fd:2b:c5:ba:5f:1e: 0a:60:4e:e5:9a:7c:8e:e7:dd:66:fa:9e:fe:e5:c2:f0:66:4f: aa:72:1e:91:ff:a7:d2:23:26:0b:4b:12:1e:7a:ac:da:8b:99: 31:cd:d6:76:9d:29:ac:d5:41:d4:8e:08:5e:9e:5f:3c:95:4d: 0d:af:dc:21:74:eb:ba:f7:18:b5:0e:47:7d:07:cb:d1:e3:ad: 30:0f:49:ec:81:37:85:8f:4c:51:05:df:ba:23:25:be:07:37: d9:5f:a0:e9:2a:35:5a:c1:9d:1e:03:f8:f7:0d:a6:ef:f5:7f: cc:6e:f8:82:ee:91:e5:a4:1e:49:60:4b:df:15:1d:8a:fd:a5: bc:c0:a4:79:99:49:2d:46:63:95:69:5a:f7:5e:ee:06:26:43: 31:e2:ee:81:5b:3a:12:a1:eb:63:c5:7c:45:18:d9:7f:76:50: 75:55:d2:60:62:80:15:fb:2e:05:5e:43:09:1e:ce:ab:69:6b: 1b:93:23:8f:11:29:51:0a:ba:b7:b6:bb:2c:94:ca:f8:56:48: 42:78:e1:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hxJ1e8BummgneAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YmMzNWY1ZmUtYzFmZi00M2Q4LWFlODMtM2ExNjM0ZjQwYWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhWBNUMq4DykuKtA7zMCePRQ/FbhbLQyusEv IUMQtak/6JKF5doktvm/MamAcVA794OUpkTnSj4CP0tS7Vve40RjdRmXthVA+PQp oaOdAkWR2+G6J4Du3RRDFYzrMyShd91pVT5plUyQbx/++7FxREbowoT0jdUrJoQf gTlqLW+V/PpxHNyhNd5dveAZinrlLeeXmVx2EPxWrWrfq0ZorGCCfaDJFv9wpCsQ 3pgb1BKAZLaFV6NNlkIv3udaHMoUaasJBJTM3+f4NJYf0ve3gNH8QL4r5wcWQe7T R9wmos5Ow0UeqiRjlPtpU0CTF4rRWfsCHtS0ZRkgwuQr4rawkwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPbfM6oJVExu2vKEPgDobJfU3wumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI5OTMwZjAtNDljZC0z ZjcxLTlhNjEtZTkxOWUwOWM2N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANjozjO0kilyzpCfH0CqGAbVX7x+RFw0VgiO8PYCMRZ7X0Ddv77pWf soZWhSlPMQP9K8W6Xx4KYE7lmnyO591m+p7+5cLwZk+qch6R/6fSIyYLSxIeeqza i5kxzdZ2nSms1UHUjghenl88lU0Nr9whdOu69xi1Dkd9B8vR460wD0nsgTeFj0xR Bd+6IyW+BzfZX6DpKjVawZ0eA/j3Dabv9X/MbviC7pHlpB5JYEvfFR2K/aW8wKR5 mUktRmOVaVr3Xu4GJkMx4u6BWzoSoetjxXxFGNl/dlB1VdJgYoAV+y4FXkMJHs6r aWsbkyOPESlRCrq3trsslMr4VkhCeOGf -----END CERTIFICATE-----Generated at Mon Oct 20 12:13:57 2025 by rpki-client