$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/939a6732-8f09-3e52-99a4-a51de834b739.roa File: 939a6732-8f09-3e52-99a4-a51de834b739.roa (raw, json) Hash identifier: cijGGFn5NowGDuiUBwsAb92aSW0iBrAodUtfSbiaf7Y= Subject key identifier: F3:4C:8B:9A:1A:17:33:E6:8B:06:01:2F:9C:AA:05:0B:7F:E4:D8:7D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8394E0F28D713262D8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/939a6732-8f09-3e52-99a4-a51de834b739.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 397202 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:83:94:e0:f2:8d:71:32:62:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=cf471cd5-dc95-4cad-917f-7ff555a8d4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:3d:ff:53:99:67:db:d8:3f:e9:54:0c:4a: 0c:ce:b5:9b:47:73:7d:e0:9c:7b:ff:07:a6:5f:ed: 9d:20:20:49:e6:3c:7b:e1:22:4f:9c:c9:34:42:fa: f8:6d:64:f6:c4:bf:c2:ca:63:db:1e:23:1e:31:9a: ad:9c:1d:9b:6e:7a:b9:bc:2b:46:38:5d:71:be:20: eb:86:04:db:04:18:6b:46:65:ff:91:03:dd:b5:9f: bf:9d:af:08:c4:60:d4:9c:9a:6b:a1:82:ab:5e:28: df:e3:ff:e4:46:33:41:41:d7:ec:37:3e:2b:ec:6c: a5:b8:e7:21:ec:d1:ee:88:d8:79:12:5c:e2:ce:e3: f5:e1:3b:f2:ac:28:91:20:18:7f:e5:ad:ed:98:f0: fa:fe:a0:ab:16:63:dd:99:f7:e1:dc:d7:4a:78:93: ab:f4:d0:f8:f9:37:61:c3:c2:bc:65:e4:03:d7:26: 75:95:8e:ed:3e:8f:61:64:c8:e9:1f:e4:c6:2f:5c: 1c:ea:d4:c3:97:37:ba:0a:16:a5:6a:fe:f9:a9:92: 3f:99:3d:18:d8:4c:8c:72:31:75:53:7c:08:ac:67: 16:89:8a:95:9a:d5:62:b3:06:85:e3:17:ac:fb:ae: 18:e9:97:3a:ef:28:bf:45:9b:ed:85:14:58:b2:7b: 77:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:4C:8B:9A:1A:17:33:E6:8B:06:01:2F:9C:AA:05:0B:7F:E4:D8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/939a6732-8f09-3e52-99a4-a51de834b739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:78:9f:4d:fc:57:b3:87:ea:a4:6a:80:36:7f:b3:74:f9:d5: c9:a7:f1:c3:e5:55:7b:50:96:26:95:24:da:b3:03:aa:73:b3: b2:ad:fa:52:d9:5d:4f:02:5d:53:31:bf:a7:6d:59:ce:65:5f: 7a:d3:e3:20:dc:95:69:b5:c2:49:68:78:c9:a6:9f:86:4c:bc: 3c:6e:cd:c7:64:f4:48:78:a3:4b:7f:40:b7:e2:65:5a:d0:df: 34:3b:1d:12:7c:57:a3:b1:b5:11:88:77:ad:2b:df:5e:e4:cd: 35:c1:53:37:d4:16:ce:33:51:58:6f:0c:cd:66:d7:2c:5c:04: 3b:f8:64:a8:b4:49:e1:bc:fc:33:99:89:ce:f8:a7:98:21:a0: fb:de:f2:93:de:42:71:c2:a9:40:f3:40:67:ba:68:c0:bc:b9: 16:8d:92:35:ff:4c:b4:d0:19:a8:39:ff:13:75:b8:9f:09:fa: a4:32:6f:cf:13:8c:39:fb:dc:a6:0d:e1:d9:4b:4e:c2:0a:f3: a9:8f:ff:c7:cd:3a:a5:2e:36:e5:04:58:cc:92:ac:61:cd:e9: 35:e1:b5:b8:2d:d2:35:ca:cd:af:c6:72:e9:b6:da:c3:51:15: 4f:c3:f0:2a:46:79:08:2c:0a:f5:45:80:1d:bc:b0:06:f9:9b: b3:39:f3:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIOU4PKNcTJi2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk Y2Y0NzFjZDUtZGM5NS00Y2FkLTkxN2YtN2ZmNTU1YThkNGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriQ9/1OZZ9vYP+lUDEoMzrWbR3N94Jx7/wem X+2dICBJ5jx74SJPnMk0Qvr4bWT2xL/CymPbHiMeMZqtnB2bbnq5vCtGOF1xviDr hgTbBBhrRmX/kQPdtZ+/na8IxGDUnJproYKrXijf4//kRjNBQdfsNz4r7GyluOch 7NHuiNh5ElzizuP14TvyrCiRIBh/5a3tmPD6/qCrFmPdmffh3NdKeJOr9ND4+Tdh w8K8ZeQD1yZ1lY7tPo9hZMjpH+TGL1wc6tTDlze6Chalav75qZI/mT0Y2EyMcjF1 U3wIrGcWiYqVmtViswaF4xes+64Y6Zc67yi/RZvthRRYsnt3OQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPNMi5oaFzPmiwYBL5yqBQt/5Nh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTM5YTY3MzItOGYwOS0z ZTUyLTk5YTQtYTUxZGU4MzRiNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA2eJ9N/Fezh+qkaoA2f7N0+dXJp/HD5VV7UJYmlSTaswOqc7OyrfpS 2V1PAl1TMb+nbVnOZV960+Mg3JVptcJJaHjJpp+GTLw8bs3HZPRIeKNLf0C34mVa 0N80Ox0SfFejsbURiHetK99e5M01wVM31BbOM1FYbwzNZtcsXAQ7+GSotEnhvPwz mYnO+KeYIaD73vKT3kJxwqlA80BnumjAvLkWjZI1/0y00BmoOf8TdbifCfqkMm/P E4w5+9ymDeHZS07CCvOpj//HzTqlLjblBFjMkqxhzek14bW4LdI1ys2vxnLpttrD URVPw/AqRnkILAr1RYAdvLAG+ZuzOfNa -----END CERTIFICATE-----Generated at Mon Oct 20 09:39:42 2025 by rpki-client