$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa File: 9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa (raw, json) Hash identifier: Bb+/plSK1fJr2rVK2j4rqfM3HdbvoAr6ufbZz/A6GVI= Subject key identifier: 54:A4:5D:66:B8:8A:79:DE:FF:D1:62:5A:6F:EF:8D:C4:73:0D:A8:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61E59A5DBABCCC2A9FD540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 36630 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e5:9a:5d:ba:bc:cc:2a:9f:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=3eda9bd5-4bd4-440f-807a-6bee63a7cfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:56:5f:a1:9a:5d:fc:da:33:bf:13:da:28:f7: e9:33:22:9b:1d:c1:c8:23:fa:21:57:bd:2e:d1:e7: e3:8d:71:ba:47:8a:35:b3:ee:8f:1b:0f:1a:5a:57: 79:d1:54:91:b6:bc:41:ec:e8:e1:c5:85:77:fa:7c: cb:ce:8e:d2:81:7b:53:1e:02:14:98:e9:5a:76:3e: 08:a7:c3:91:10:53:87:e5:9d:19:8c:38:28:b3:cc: 9e:29:89:69:cc:a0:3f:bd:37:48:06:96:76:85:ed: c7:08:be:af:93:9e:94:3d:1b:cb:4d:10:55:31:2f: 71:df:02:8b:00:75:1b:26:a3:f2:48:76:75:06:b9: 0c:0f:f5:8c:96:f8:0a:ba:9f:cf:3b:59:91:5b:62: 0f:c7:62:68:e6:1f:af:65:59:69:d0:3b:32:23:e7: 20:62:00:d0:53:da:ae:a4:cc:8c:0a:1d:36:d4:be: 11:dd:84:5c:42:6c:7e:cb:0e:26:b2:e9:21:a3:cc: c4:db:8e:7f:d7:c7:ef:ab:e5:9f:20:49:7f:a4:c9: 04:7c:0d:12:a9:13:81:b2:4c:08:29:02:29:ef:23: 84:3f:ad:b6:50:6d:8f:d9:4c:6c:dd:34:17:89:b6: a4:da:09:56:83:78:4c:7d:bf:5b:19:a2:45:42:30: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A4:5D:66:B8:8A:79:DE:FF:D1:62:5A:6F:EF:8D:C4:73:0D:A8:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9209f50b-38eb-3bb6-b0b7-a9bc59d5f0d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f2:45:ea:de:e5:6e:50:13:62:ee:f5:c3:4c:03:20:89:69: a8:b9:bb:54:26:ba:35:fc:9e:12:51:79:b4:5e:8f:69:1f:8a: af:09:ac:15:d8:8a:99:1b:df:3e:a0:b9:05:e5:58:cf:14:d4: bc:c1:25:4f:51:1d:44:74:38:9e:8c:9a:4d:44:09:2d:83:9d: 08:80:82:6e:cb:d3:d5:1d:14:41:58:c7:f9:86:78:9e:59:98: 46:3a:a2:12:65:a9:89:58:36:8b:44:cf:27:11:cc:f3:9f:e2: de:3e:16:41:63:39:7a:dd:9c:b0:88:89:59:e5:0b:ca:de:d9: 57:a3:11:f4:a0:7f:c4:16:34:77:2e:03:b7:74:4f:15:d4:46: a0:b6:9d:20:e6:62:24:13:1a:96:42:fc:54:7d:2b:d9:b5:f1: 35:5e:8a:69:6f:54:81:67:cc:be:ac:34:53:19:ec:87:63:9a: c9:49:2e:19:fd:ac:8c:b2:16:48:1b:b6:52:86:db:f3:a8:a6: 79:04:1e:c0:de:5e:d3:b8:02:f1:c9:f2:04:4d:15:fb:99:59: 11:e6:27:24:5e:54:a7:af:8a:73:55:6e:89:53:dd:63:df:f9: cd:7e:b6:23:6e:1d:bd:68:88:31:ba:b5:c4:a2:49:84:26:3a: 36:73:64:9d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYeWaXbq8zCqf1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk M2VkYTliZDUtNGJkNC00NDBmLTgwN2EtNmJlZTYzYTdjZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilZfoZpd/NozvxPaKPfpMyKbHcHII/ohV70u 0efjjXG6R4o1s+6PGw8aWld50VSRtrxB7OjhxYV3+nzLzo7SgXtTHgIUmOladj4I p8OREFOH5Z0ZjDgos8yeKYlpzKA/vTdIBpZ2he3HCL6vk56UPRvLTRBVMS9x3wKL AHUbJqPySHZ1BrkMD/WMlvgKup/PO1mRW2IPx2Jo5h+vZVlp0DsyI+cgYgDQU9qu pMyMCh021L4R3YRcQmx+yw4msukho8zE245/18fvq+WfIEl/pMkEfA0SqROBskwI KQIp7yOEP622UG2P2Uxs3TQXibak2glWg3hMfb9bGaJFQjDbawIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFSkXWa4inne/9FiWm/vjcRzDahoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTIwOWY1MGItMzhlYi0z YmI2LWIwYjctYTliYzU5ZDVmMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBi8kXq3uVuUBNi7vXDTAMgiWmoubtUJro1/J4SUXm0Xo9pH4qvCawV 2IqZG98+oLkF5VjPFNS8wSVPUR1EdDiejJpNRAktg50IgIJuy9PVHRRBWMf5hnie WZhGOqISZamJWDaLRM8nEczzn+LePhZBYzl63ZywiIlZ5QvK3tlXoxH0oH/EFjR3 LgO3dE8V1Eagtp0g5mIkExqWQvxUfSvZtfE1Xoppb1SBZ8y+rDRTGeyHY5rJSS4Z /ayMshZIG7ZShtvzqKZ5BB7A3l7TuALxyfIETRX7mVkR5ickXlSnr4pzVW6JU91j 3/nNfrYjbh29aIgxurXEokmEJjo2c2Sd -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:02 2025 by rpki-client