$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0221a63-a454-3815-96e9-02cc76b94ba8.roa File: a0221a63-a454-3815-96e9-02cc76b94ba8.roa (raw, json) Hash identifier: 3hwNCygO3nypL9Nt2VRCJgWbIzoFyhBOmZpeANgUB1U= Subject key identifier: 7C:12:97:17:02:C9:25:DB:6A:D2:10:90:AE:49:42:17:4B:84:E6:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B39870E0F91695322C789F280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0221a63-a454-3815-96e9-02cc76b94ba8.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 397206 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0e:0f:91:69:53:22:c7:89:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=04509c74-a031-4ea9-bab2-bb73ea37cca1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:98:5b:7c:86:5d:7b:c6:2d:1a:b5:11:03: 82:ad:db:91:cb:d9:16:52:54:8c:5c:bd:e3:5c:10: 76:2f:ae:37:02:61:34:0a:f0:2f:12:96:88:ab:7d: 41:d4:ff:e5:c8:dd:72:ec:37:da:4b:fc:f2:59:c5: da:70:83:31:b6:bb:57:35:c5:6e:5a:e5:0f:e4:6d: e1:43:49:e9:7c:f2:14:f6:da:08:77:a6:16:82:02: 07:e5:6d:b7:a8:3d:a3:0c:b7:d5:d9:1f:40:42:85: a4:69:25:ba:16:2d:88:9f:88:ef:d4:85:16:93:7b: 4a:58:d5:da:f1:01:7e:18:0c:cb:4d:ba:10:2b:ba: 9e:f9:61:c9:55:d1:e6:af:c5:b3:c5:1a:6d:1a:d8: 40:38:77:7f:08:54:0b:67:d5:21:be:41:e6:ea:09: 45:13:65:7c:e3:93:29:c9:cf:1d:c7:20:6f:88:60: 36:3d:9a:75:9f:b1:b2:c2:54:03:e8:23:4f:d6:7f: d0:5d:85:2c:a0:e7:4a:69:a3:01:11:e9:25:2b:ef: 90:86:17:1a:45:a8:80:a5:eb:15:5f:5f:bc:ba:38: 1d:b2:35:76:04:62:94:1a:60:2c:42:e8:a0:8a:7a: 31:7a:bc:b7:48:10:85:85:5e:6d:dc:0e:2c:e0:70: 31:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:12:97:17:02:C9:25:DB:6A:D2:10:90:AE:49:42:17:4B:84:E6:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0221a63-a454-3815-96e9-02cc76b94ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d9:37:01:53:60:28:9c:61:bd:b2:0d:59:12:2d:0d:5e:3e: 11:68:f1:b5:ce:58:b7:e1:64:17:8a:6e:be:1d:b8:99:ca:e7: c7:20:89:9c:9a:d6:88:b8:7e:3f:53:e5:ef:64:9f:4a:e2:8d: 81:89:74:33:7a:ec:23:c5:f6:5a:a7:d6:c1:96:4b:66:de:53: b7:2b:71:ab:88:7e:d3:c2:df:db:7b:66:8e:fe:44:75:6d:50: 35:d6:dc:7b:6f:34:0f:53:dd:6c:7e:1a:20:a1:62:1c:ec:19: ea:c0:b3:37:a1:8e:d0:b1:86:1f:09:af:72:fa:f7:e5:be:9e: 66:91:9a:1e:c4:7d:0d:41:5d:39:2b:62:9b:2b:0d:c0:b3:2b: e7:08:73:88:d0:7c:69:0e:c7:75:6f:1d:44:4a:44:4e:e2:c8: 98:d7:79:5e:82:e9:e2:13:a3:b6:52:8e:f2:1c:df:96:3f:0f: 03:a4:00:29:79:43:4a:92:22:9b:ad:e4:c3:f4:0d:52:0b:6b: 1a:57:7c:09:65:b4:67:fd:4b:19:1d:8d:be:6c:bb:7b:d0:f0: 3e:69:50:b6:c3:15:d8:cf:a5:55:91:c9:55:16:2b:fd:a3:de: a5:70:30:e0:9f:7b:46:76:d4:fb:f0:9a:5c:c5:61:f5:c2:84: 91:6b:fd:29 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hw4PkWlTIseJ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MDQ1MDljNzQtYTAzMS00ZWE5LWJhYjItYmI3M2VhMzdjY2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluCYW3yGXXvGLRq1EQOCrduRy9kWUlSMXL3j XBB2L643AmE0CvAvEpaIq31B1P/lyN1y7DfaS/zyWcXacIMxtrtXNcVuWuUP5G3h Q0npfPIU9toId6YWggIH5W23qD2jDLfV2R9AQoWkaSW6Fi2In4jv1IUWk3tKWNXa 8QF+GAzLTboQK7qe+WHJVdHmr8WzxRptGthAOHd/CFQLZ9UhvkHm6glFE2V845Mp yc8dxyBviGA2PZp1n7GywlQD6CNP1n/QXYUsoOdKaaMBEeklK++QhhcaRaiApesV X1+8ujgdsjV2BGKUGmAsQuiginoxery3SBCFhV5t3A4s4HAxgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHwSlxcCySXbatIQkK5JQhdLhOZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTAyMjFhNjMtYTQ1NC0z ODE1LTk2ZTktMDJjYzc2Yjk0YmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCX2TcBU2AonGG9sg1ZEi0NXj4RaPG1zli34WQXim6+HbiZyufHIImc mtaIuH4/U+XvZJ9K4o2BiXQzeuwjxfZap9bBlktm3lO3K3GriH7Twt/be2aO/kR1 bVA11tx7bzQPU91sfhogoWIc7BnqwLM3oY7QsYYfCa9y+vflvp5mkZoexH0NQV05 K2KbKw3AsyvnCHOI0HxpDsd1bx1ESkRO4siY13leguniE6O2Uo7yHN+WPw8DpAAp eUNKkiKbreTD9A1SC2saV3wJZbRn/UsZHY2+bLt70PA+aVC2wxXYz6VVkclVFiv9 o96lcDDgn3tGdtT78JpcxWH1woSRa/0p -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:05 2025 by rpki-client