$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa File: 8ddad6be-d722-30fc-b465-d259a1d72813.roa (raw, json) Hash identifier: IjxuKlktoxusi6Kbs9T3VnKnR3SMlUwrJ7lqattUKHA= Subject key identifier: 86:39:E6:F2:83:B0:22:05:BE:83:4A:EB:04:47:3D:F7:97:6E:77:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8C7FA9D4766A21678400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396588 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8c:7f:a9:d4:76:6a:21:67:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=81f79820-77d1-4ec8-9629-7319ad2e5969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:3a:82:a0:26:07:81:a5:5b:5b:4c:c3:03: bb:62:4d:8c:23:f9:24:a2:af:de:d8:f7:19:5b:a4: 94:99:45:0d:be:aa:31:8c:8f:b8:24:08:95:0d:79: 9d:7b:73:33:d0:be:e5:81:e3:03:9d:af:84:05:a5: 7d:7d:07:ca:2e:e0:28:18:73:b7:34:e0:4f:d6:98: a9:78:85:b6:f8:d2:33:da:1c:f6:75:73:ec:79:a4: 55:0c:a2:28:aa:96:ba:36:08:e8:0e:01:37:a3:74: 50:07:7c:cf:11:6d:4c:33:6a:52:13:83:60:52:12: 74:d9:e7:f1:c1:a7:f5:4c:6a:a7:0b:2a:61:fb:bf: f3:8c:93:b5:49:e2:b2:1c:85:62:82:a9:34:d7:e2: 70:ac:b9:34:45:b2:3c:5c:23:1b:13:d4:c9:95:97: cf:1f:92:9e:c5:e8:0b:c3:b1:f0:7f:86:bc:da:2b: 21:78:37:5a:5c:b9:ba:87:6c:b1:f0:fa:60:11:e7: ea:a9:0e:b8:3c:49:61:32:64:db:e8:b8:00:ac:b5: 98:85:dd:86:99:ff:78:b7:9c:fa:4c:ae:9b:10:d0: 2a:96:56:35:75:03:21:96:d6:c7:bc:00:28:b3:6c: 26:eb:90:15:5f:d6:4b:e4:6c:de:90:28:26:2f:eb: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:39:E6:F2:83:B0:22:05:BE:83:4A:EB:04:47:3D:F7:97:6E:77:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ddad6be-d722-30fc-b465-d259a1d72813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:40:1c:bf:80:a7:70:1c:2e:1d:c7:0f:8d:a7:74:3e:c2:32: db:fc:71:3f:e3:2b:75:83:50:cf:78:8a:9c:5b:da:32:43:6a: df:c1:1b:4d:7e:1d:0c:89:8d:bb:91:c8:89:12:74:7c:4a:07: 52:28:5e:5b:9d:5c:fc:ca:7c:3e:37:83:2e:76:63:df:ec:07: 86:b8:8d:2a:08:22:0e:27:95:7a:aa:7f:b1:ec:ea:c9:7f:4f: dc:8c:65:5f:6d:cf:b9:77:39:16:fd:62:99:66:05:c4:54:7b: 0b:eb:86:ad:d4:7e:8c:2c:98:f9:0f:83:b8:2b:05:a7:3e:25: d8:94:e3:77:cc:50:d0:c1:39:02:b5:ee:6e:83:c5:17:4f:2a: bd:e2:93:c4:1a:de:d2:d4:a9:1f:86:f2:83:95:89:34:5a:81: d8:bd:50:36:f6:77:b5:41:32:11:64:2c:d1:2e:57:45:9b:b5: f5:40:45:d0:16:be:24:f1:4f:57:ce:39:1b:15:c3:fb:a4:80: 22:15:63:0a:9d:d5:ed:a5:01:07:a2:a3:a9:38:6e:24:b6:60: 46:86:78:f9:a6:a0:5b:bf:4e:42:e7:0f:65:17:8d:ff:ed:b6: 41:bd:12:09:61:c4:a7:38:11:8e:31:fe:39:98:f9:e7:a6:a0: 1c:13:9d:08 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIx/qdR2aiFnhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ODFmNzk4MjAtNzdkMS00ZWM4LTk2MjktNzMxOWFkMmU1OTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjo6gqAmB4GlW1tMwwO7Yk2MI/kkoq/e2PcZ W6SUmUUNvqoxjI+4JAiVDXmde3Mz0L7lgeMDna+EBaV9fQfKLuAoGHO3NOBP1pip eIW2+NIz2hz2dXPseaRVDKIoqpa6NgjoDgE3o3RQB3zPEW1MM2pSE4NgUhJ02efx waf1TGqnCyph+7/zjJO1SeKyHIVigqk01+JwrLk0RbI8XCMbE9TJlZfPH5KexegL w7Hwf4a82isheDdaXLm6h2yx8PpgEefqqQ64PElhMmTb6LgArLWYhd2Gmf94t5z6 TK6bENAqllY1dQMhltbHvAAos2wm65AVX9ZL5GzekCgmL+sBGwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIY55vKDsCIFvoNK6wRHPfeXbnccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGRkYWQ2YmUtZDcyMi0z MGZjLWI0NjUtZDI1OWExZDcyODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNQBy/gKdwHC4dxw+Np3Q+wjLb/HE/4yt1g1DPeIqcW9oyQ2rfwRtN fh0MiY27kciJEnR8SgdSKF5bnVz8ynw+N4MudmPf7AeGuI0qCCIOJ5V6qn+x7OrJ f0/cjGVfbc+5dzkW/WKZZgXEVHsL64at1H6MLJj5D4O4KwWnPiXYlON3zFDQwTkC te5ug8UXTyq94pPEGt7S1KkfhvKDlYk0WoHYvVA29ne1QTIRZCzRLldFm7X1QEXQ Fr4k8U9XzjkbFcP7pIAiFWMKndXtpQEHoqOpOG4ktmBGhnj5pqBbv05C5w9lF43/ 7bZBvRIJYcSnOBGOMf45mPnnpqAcE50I -----END CERTIFICATE-----Generated at Mon Oct 20 15:25:46 2025 by rpki-client