$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa File: 9f95ef66-277d-301c-a319-98353b50df8b.roa (raw, json) Hash identifier: ud9u1Np/QPn3Z1Lr6YzdzHjz3E1CWeawjY+6C7YtYJw= Subject key identifier: BF:17:BD:E3:1E:1D:F2:89:4D:A3:4C:21:AB:CB:C4:4B:45:BB:AA:4F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C84A3A2FD64A5D815B300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396574 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:84:a3:a2:fd:64:a5:d8:15:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=2e61f8c6-679d-406e-b68b-b3d1d6e00fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:34:5d:f6:f7:17:9a:39:21:15:0a:95:07:d7: bb:6e:43:69:24:36:f9:ee:54:55:e0:c6:28:aa:3f: 79:e4:c5:ca:68:f3:57:c2:b5:24:04:f3:d8:06:61: 3a:81:a4:d4:59:41:1f:cd:9b:71:fd:ea:d4:d8:76: c2:65:b7:11:17:47:45:07:20:2a:12:7e:b2:82:7a: c2:03:51:43:be:04:f6:b9:18:3e:fa:d1:6a:69:a1: c1:0b:02:ef:f5:17:36:03:59:c1:0d:27:8b:b9:dc: fa:f7:fc:d6:8b:ce:15:18:24:10:35:ef:d7:1c:2c: 16:e4:92:5f:03:e8:93:e8:9d:80:31:3d:f4:55:4e: 6e:ab:1e:a0:8f:d3:9b:26:ff:b6:30:58:c4:9d:92: 92:c7:93:f3:f5:ba:a1:c2:2e:82:e6:98:42:05:19: 68:10:05:98:33:6c:0e:6b:a9:c8:56:c9:12:7b:49: 61:96:e0:4a:e9:8e:75:a8:77:ba:e4:09:31:4a:00: cb:16:96:80:55:89:59:02:f7:34:fa:96:86:13:d0: ec:85:94:c2:6a:f0:88:5e:cb:2a:2b:85:86:dd:de: ad:8d:33:79:57:fe:1f:4d:1d:58:ac:88:fd:13:d6: 72:b2:fc:cd:75:c5:33:fe:42:d7:51:93:91:c3:db: 5e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:17:BD:E3:1E:1D:F2:89:4D:A3:4C:21:AB:CB:C4:4B:45:BB:AA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9f95ef66-277d-301c-a319-98353b50df8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:cd:fb:05:0f:c7:b4:c4:d1:db:d9:6e:11:de:a3:4b:92:f2: 78:8e:40:8a:0b:ef:35:51:ec:c0:68:98:f2:2d:a8:08:dd:14: 8a:75:b1:96:6a:48:9c:95:99:2c:8a:4e:ec:dd:89:ab:3c:83: ff:80:b5:9b:2b:cb:00:3c:8e:27:cc:38:69:ea:84:8d:82:55: 6d:83:fd:79:e2:17:e1:84:85:80:e9:78:c4:02:90:b0:96:9c: a8:3d:9b:d2:6e:b1:a5:be:dd:23:6e:50:56:8c:fb:a1:94:e2: ea:0c:72:42:db:5f:94:27:e9:28:76:18:68:af:98:ee:60:12: 5d:7c:e1:25:42:32:ac:ae:f9:e3:e5:1d:60:49:66:12:a1:c1: 8a:98:3e:ad:f8:b3:9e:73:ff:af:e1:e5:e9:30:ca:fa:51:ca: cf:81:9b:49:26:1a:f1:2c:8f:e4:5f:cb:98:a8:d0:44:3b:4b: 2b:a7:aa:2b:43:4d:0e:28:5f:56:19:ea:65:14:c4:ad:ff:69: a3:71:2b:93:f9:65:eb:77:02:cb:74:09:67:a3:01:74:63:85: 5f:fb:bb:a0:d3:d1:a6:fa:d5:a2:b2:15:5e:d3:a0:9c:c2:1e: c1:c8:a2:87:a4:d9:93:e6:fe:14:8c:26:7f:07:e6:f3:18:1f: 2a:70:e6:05 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDISjov1kpdgVswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MmU2MWY4YzYtNjc5ZC00MDZlLWI2OGItYjNkMWQ2ZTAwZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zRd9vcXmjkhFQqVB9e7bkNpJDb57lRV4MYo qj955MXKaPNXwrUkBPPYBmE6gaTUWUEfzZtx/erU2HbCZbcRF0dFByAqEn6ygnrC A1FDvgT2uRg++tFqaaHBCwLv9Rc2A1nBDSeLudz69/zWi84VGCQQNe/XHCwW5JJf A+iT6J2AMT30VU5uqx6gj9ObJv+2MFjEnZKSx5Pz9bqhwi6C5phCBRloEAWYM2wO a6nIVskSe0lhluBK6Y51qHe65AkxSgDLFpaAVYlZAvc0+paGE9DshZTCavCIXssq K4WG3d6tjTN5V/4fTR1YrIj9E9ZysvzNdcUz/kLXUZORw9teDQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFL8XveMeHfKJTaNMIavLxEtFu6pPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWY5NWVmNjYtMjc3ZC0z MDFjLWEzMTktOTgzNTNiNTBkZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUzfsFD8e0xNHb2W4R3qNLkvJ4jkCKC+81UezAaJjyLagI3RSKdbGW akiclZksik7s3YmrPIP/gLWbK8sAPI4nzDhp6oSNglVtg/154hfhhIWA6XjEApCw lpyoPZvSbrGlvt0jblBWjPuhlOLqDHJC21+UJ+kodhhor5juYBJdfOElQjKsrvnj 5R1gSWYSocGKmD6t+LOec/+v4eXpMMr6UcrPgZtJJhrxLI/kX8uYqNBEO0srp6or Q00OKF9WGeplFMSt/2mjcSuT+WXrdwLLdAlnowF0Y4Vf+7ug09Gm+tWishVe06Cc wh7ByKKHpNmT5v4UjCZ/B+bzGB8qcOYF -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:40 2025 by rpki-client