$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa File: 9524857f-8331-3f47-83f9-be33c61b1f2b.roa (raw, json) Hash identifier: bTTZnYZiX3zwvQtTb4NPvuZvftZ0N0KeKiS4C+X/PZ4= Subject key identifier: 65:E0:09:12:DF:CA:6F:AD:7C:0E:9F:89:5E:A5:41:0A:1A:E0:47:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8675067C181B6F5BFE8A Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 397209 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:86:75:06:7c:18:1b:6f:5b:fe:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=e9fbcf3c-98bc-43d3-91ad-e3a332ba489e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ea:97:4d:d3:ea:9f:90:c8:ac:61:db:06:bd: f9:6c:5e:61:33:5a:68:9d:74:98:84:d3:b7:0a:d9: e0:ad:71:fe:14:9d:28:78:c7:dc:22:10:9c:e6:83: 34:75:a6:c8:b0:b1:a3:df:03:91:3b:d0:dd:15:72: 5a:be:4a:76:c3:54:8a:b0:ac:31:8e:ab:3f:b8:91: ff:ba:c1:cc:d5:0f:05:7d:8e:dd:f6:c5:7d:71:64: df:02:b5:c1:a0:df:60:d9:82:af:2c:51:a3:05:ca: 3c:fc:92:38:7d:41:89:2c:b7:b2:28:5f:54:05:47: 2e:43:11:33:92:1d:66:f3:ba:16:9b:0b:99:b3:50: 60:b7:ca:7f:8d:6e:c7:35:89:33:08:bc:f2:0e:0b: 1c:b2:01:0c:74:29:80:db:32:3f:b7:ad:32:cb:ee: 87:fd:18:5e:cf:72:cc:4f:21:2d:2b:c2:7c:ed:5a: a6:18:f8:e6:b7:4e:4a:35:8a:3e:d6:11:29:bf:c4: 45:56:36:df:11:1c:eb:7a:cc:fb:b3:c5:b5:74:d7: 10:1d:2b:78:fc:fb:80:f2:90:2e:be:9f:54:df:43: 62:43:66:a9:c9:d8:7a:40:07:d7:b1:94:89:23:96: d9:43:fe:3a:53:c8:41:07:10:f1:ec:40:2c:cf:9e: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E0:09:12:DF:CA:6F:AD:7C:0E:9F:89:5E:A5:41:0A:1A:E0:47:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9524857f-8331-3f47-83f9-be33c61b1f2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a8:58:47:b1:ed:29:bc:85:3c:17:e0:03:d6:d3:c5:2c:b3: ae:9f:61:bd:1a:85:9c:19:a0:00:1a:e0:c9:5f:8d:24:a6:4d: 94:77:e1:66:b6:44:68:d7:8c:2f:46:4c:07:e0:2b:08:61:c6: 53:f6:47:9f:66:22:27:0f:9b:bf:c7:be:8e:e7:01:ca:de:d7: 48:1a:80:5d:14:e2:83:c6:77:4d:c5:88:35:27:7a:0e:05:a4: f4:9b:0e:81:56:0a:e1:d3:ab:11:78:a6:fc:1c:4d:be:35:8f: d2:ff:b1:b9:dd:87:89:10:f4:a8:45:5c:c6:57:bc:55:6d:07: 0a:8b:3b:1c:b4:e3:69:cd:e9:59:77:3d:aa:19:24:0f:23:97: ed:d2:e6:cd:ad:3b:ed:d1:cc:c9:0d:62:d6:25:7f:51:59:f1: 24:89:e0:5b:78:f0:f1:c0:a6:5c:67:80:15:dc:45:e8:af:bb: d5:29:19:49:af:c1:69:58:f1:fd:b3:58:95:f7:eb:b2:ab:b2: 0f:b7:67:6b:2b:26:bd:fc:8c:01:01:7a:a0:8a:88:41:3e:50: 19:d8:40:6f:6b:c5:ee:62:ec:71:4c:04:b4:1a:d3:e4:40:69: e1:99:36:e0:f5:4f:8c:f4:c6:32:db:77:a1:46:c1:67:f7:fe: 9f:3f:be:2a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIZ1BnwYG29b/oowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTlmYmNmM2MtOThiYy00M2QzLTkxYWQtZTNhMzMyYmE0ODllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+qXTdPqn5DIrGHbBr35bF5hM1ponXSYhNO3 CtngrXH+FJ0oeMfcIhCc5oM0dabIsLGj3wORO9DdFXJavkp2w1SKsKwxjqs/uJH/ usHM1Q8FfY7d9sV9cWTfArXBoN9g2YKvLFGjBco8/JI4fUGJLLeyKF9UBUcuQxEz kh1m87oWmwuZs1Bgt8p/jW7HNYkzCLzyDgscsgEMdCmA2zI/t60yy+6H/Rhez3LM TyEtK8J87VqmGPjmt05KNYo+1hEpv8RFVjbfERzresz7s8W1dNcQHSt4/PuA8pAu vp9U30NiQ2apydh6QAfXsZSJI5bZQ/46U8hBBxDx7EAsz56X4wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGXgCRLfym+tfA6fiV6lQQoa4EeJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTUyNDg1N2YtODMzMS0z ZjQ3LTgzZjktYmUzM2M2MWIxZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBsqFhHse0pvIU8F+AD1tPFLLOun2G9GoWcGaAAGuDJX40kpk2Ud+Fm tkRo14wvRkwH4CsIYcZT9kefZiInD5u/x76O5wHK3tdIGoBdFOKDxndNxYg1J3oO BaT0mw6BVgrh06sReKb8HE2+NY/S/7G53YeJEPSoRVzGV7xVbQcKizsctONpzelZ dz2qGSQPI5ft0ubNrTvt0czJDWLWJX9RWfEkieBbePDxwKZcZ4AV3EXor7vVKRlJ r8FpWPH9s1iV9+uyq7IPt2drKya9/IwBAXqgiohBPlAZ2EBva8XuYuxxTAS0GtPk QGnhmTbg9U+M9MYy23ehRsFn9/6fP74q -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:22 2025 by rpki-client