$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa File: 978b852e-6909-336a-9078-8b28915c3136.roa (raw, json) Hash identifier: QVGJUkHVEjFPo4oziJ+35HdaizZ6NUIbropWSlYEndA= Subject key identifier: 63:B4:D2:CD:84:08:3F:C8:C8:C5:40:17:EB:04:51:41:78:E9:26:BB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61E4481A9B43852EEA4340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396597 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e4:48:1a:9b:43:85:2e:ea:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=6b436c6f-340f-4736-919b-af30cfb4ca92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:79:cc:1c:10:de:5a:32:6e:3d:61:d4:eb:e8: ac:b7:2c:7a:2a:d2:4f:ff:aa:a9:0f:34:0d:27:71: 26:ed:d6:a6:2e:10:ab:4e:e0:d5:0f:41:c3:e5:fc: 07:10:16:f5:20:f4:6b:df:03:b3:17:f8:d4:d9:c5: 24:9f:09:30:8d:aa:89:a0:75:b7:f1:f0:62:dc:8e: 85:db:49:84:e1:5b:f6:c3:41:37:90:4f:c1:89:91: 09:f3:bf:2e:95:a0:3c:13:3e:e7:13:36:43:b6:c0: ae:bc:fd:c1:2f:49:87:c1:47:85:d4:f0:ae:e3:d4: 07:b5:2b:33:4f:12:e8:e6:45:0f:38:9f:0b:dc:23: 2a:1c:4c:d5:2f:3e:d3:37:02:6d:12:c8:f8:6e:ec: 00:3d:71:ce:93:d4:24:12:95:2a:fc:50:2f:2b:e4: 73:ad:a7:d2:c8:89:01:fb:59:ec:dc:a7:42:09:39: 9e:b3:c1:3d:fb:8d:b2:b3:a1:d5:ca:54:fa:a3:f2: 74:f2:ad:c9:42:ed:d1:84:d1:d5:de:1d:af:5b:3e: e1:c2:89:57:00:19:73:b5:a1:bc:8d:ea:e6:ed:d5: bf:f2:e1:46:79:00:0e:3a:ff:a9:2a:ce:99:65:db: 74:ab:e3:bc:63:7d:6e:50:6a:67:a7:0b:fe:67:09: 0f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B4:D2:CD:84:08:3F:C8:C8:C5:40:17:EB:04:51:41:78:E9:26:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/978b852e-6909-336a-9078-8b28915c3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:84:15:93:16:ae:f6:3e:46:d8:57:b4:83:79:42:b8:12:35: 2d:d0:92:bf:f6:ee:8b:3b:26:f3:7f:ec:f8:ec:d5:c9:f5:e9: b2:ef:de:18:0b:f2:e9:7e:30:ed:36:2a:8e:64:a7:c8:ca:1b: 59:20:4d:e0:75:12:d2:42:4d:fa:9d:c2:66:9b:57:47:b3:82: 22:5e:07:c6:d6:11:6b:1e:9a:47:b4:72:6f:84:21:e2:de:3a: 71:cb:49:2f:24:38:08:e7:87:fe:df:f0:64:ff:95:31:8e:6c: e6:77:c0:3d:dd:73:b2:cd:bc:d4:5d:12:b1:79:0b:c3:d2:ad: a8:d8:fa:60:36:08:36:7a:71:33:f6:0a:09:7f:3f:2a:6f:bb: 3f:1b:ae:04:bb:17:90:b9:bc:3d:2a:38:79:17:4d:77:85:be: 5a:14:0d:5d:fd:63:5d:28:ef:1e:62:dd:d9:5e:42:1d:44:92: 50:e8:ab:08:ce:b8:9a:87:3a:7f:2d:11:d4:7c:46:cd:65:c0: a9:ed:82:49:9b:e9:f6:9f:ca:60:6d:f3:0d:cc:2d:bf:ee:58: f7:c4:91:94:40:82:b8:10:45:56:d8:73:0d:4e:a4:7e:57:d9: 68:ee:17:ec:51:da:89:2d:24:16:c9:27:c1:1d:3a:67:be:9e: 91:7a:1e:3a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYeRIGptDhS7qQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NmI0MzZjNmYtMzQwZi00NzM2LTkxOWItYWYzMGNmYjRjYTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnnMHBDeWjJuPWHU6+istyx6KtJP/6qpDzQN J3Em7damLhCrTuDVD0HD5fwHEBb1IPRr3wOzF/jU2cUknwkwjaqJoHW38fBi3I6F 20mE4Vv2w0E3kE/BiZEJ878ulaA8Ez7nEzZDtsCuvP3BL0mHwUeF1PCu49QHtSsz TxLo5kUPOJ8L3CMqHEzVLz7TNwJtEsj4buwAPXHOk9QkEpUq/FAvK+RzrafSyIkB +1ns3KdCCTmes8E9+42ys6HVylT6o/J08q3JQu3RhNHV3h2vWz7hwolXABlztaG8 jerm7dW/8uFGeQAOOv+pKs6ZZdt0q+O8Y31uUGpnpwv+ZwkP2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGO00s2ECD/IyMVAF+sEUUF46Sa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTc4Yjg1MmUtNjkwOS0z MzZhLTkwNzgtOGIyODkxNWMzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBKhBWTFq72PkbYV7SDeUK4EjUt0JK/9u6LOybzf+z47NXJ9emy794Y C/LpfjDtNiqOZKfIyhtZIE3gdRLSQk36ncJmm1dHs4IiXgfG1hFrHppHtHJvhCHi 3jpxy0kvJDgI54f+3/Bk/5Uxjmzmd8A93XOyzbzUXRKxeQvD0q2o2PpgNgg2enEz 9goJfz8qb7s/G64EuxeQubw9Kjh5F013hb5aFA1d/WNdKO8eYt3ZXkIdRJJQ6KsI zriahzp/LRHUfEbNZcCp7YJJm+n2n8pgbfMNzC2/7lj3xJGUQIK4EEVW2HMNTqR+ V9lo7hfsUdqJLSQWySfBHTpnvp6Reh46 -----END CERTIFICATE-----Generated at Mon Oct 20 15:24:14 2025 by rpki-client