$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77f75e1-b464-3deb-8681-d6c1e875c10f.roa File: a77f75e1-b464-3deb-8681-d6c1e875c10f.roa (raw, json) Hash identifier: kpnkrKaCNM/t9aKJhCj0YxW6tY/v5N5GWY6+LkEJJl0= Subject key identifier: 52:A2:52:35:9A:74:6B:D6:1C:0F:7B:EE:8C:19:35:56:C1:6F:D8:55 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C90944DE8114CB5656200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77f75e1-b464-3deb-8681-d6c1e875c10f.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396612 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:90:94:4d:e8:11:4c:b5:65:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=0754f71d-6530-4a63-bbe4-fa7b78197588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:f4:98:ba:93:75:22:8c:ac:27:83:b4:d8: a6:d5:46:0d:b4:e9:ac:f9:27:02:12:d8:08:4f:a1: 72:ec:e9:55:26:9b:ba:1e:dd:82:04:cb:d1:a7:f3: 18:d6:86:9c:7b:6d:64:7b:e8:c9:c5:a1:f3:27:f4: 39:3f:5c:ac:97:55:1b:9b:27:5e:27:ef:80:93:83: 4c:52:49:56:5c:a5:58:aa:17:e7:95:94:6d:39:02: 88:5a:b8:e6:54:be:cd:23:4b:74:1d:e6:00:ae:fd: f7:db:a3:42:b2:39:9a:02:d8:2a:35:d5:ac:a5:ef: 64:18:7b:59:f6:a6:21:91:45:1b:f4:f4:12:f4:c3: 13:bf:f7:b6:18:cd:9f:9e:df:43:15:79:c7:31:e5: 85:ab:7b:e7:1f:c7:b0:7b:56:1c:e2:13:1b:21:4a: 61:c7:8b:27:32:c9:04:02:e2:2f:2b:55:54:24:cb: d7:bf:66:ca:d6:35:98:4a:d8:e3:10:fa:f4:70:96: 16:f0:b6:58:a0:9e:e5:0e:19:6c:52:9d:61:6a:c0: d1:65:21:9d:23:ef:e8:0c:b0:47:b9:9d:25:45:3d: 49:46:19:df:7c:2c:81:a6:85:41:fc:1f:89:90:8c: fd:ef:9b:5b:b1:7a:13:e6:35:5e:a7:d4:2e:f3:5c: ae:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A2:52:35:9A:74:6B:D6:1C:0F:7B:EE:8C:19:35:56:C1:6F:D8:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a77f75e1-b464-3deb-8681-d6c1e875c10f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a4:07:e4:32:cb:03:0b:b3:16:16:19:15:99:7d:50:7c:5d: da:f0:40:09:97:d4:61:ca:c2:46:37:33:dc:ff:17:4b:f0:ef: a7:57:cc:b9:62:e2:89:4f:4c:8b:2b:83:ac:75:5f:8c:89:5d: 2d:7f:ca:e1:f7:1e:b9:35:08:5b:f7:6e:f8:ac:df:37:0d:b0: c6:ed:3f:fa:36:bf:c2:19:e2:6b:46:63:b9:38:ab:06:47:6c: 55:b0:38:fc:c8:16:09:45:c6:5b:a0:04:c9:73:3e:5e:7d:61: 3e:e7:c4:56:98:36:a2:c8:50:65:1c:73:61:c3:31:bf:6d:70: 4e:57:cb:fa:87:97:53:0c:ee:96:27:aa:8c:91:0e:43:5f:fd: 5d:54:ca:bf:ea:45:a3:fc:f6:ea:51:f2:63:ef:46:35:0d:19: 1a:09:03:6c:8c:6b:59:02:79:9a:06:fa:3c:d1:f0:08:e4:46: 52:62:06:90:d0:e9:8a:21:73:5d:ef:65:63:82:e9:85:2e:51: fd:1b:20:db:9e:7f:21:f0:4c:fc:fa:99:f9:41:51:12:51:bd: 94:b2:c2:cb:76:20:77:87:86:9f:10:cc:c4:4b:2e:64:ad:0e: ae:df:a6:e4:4c:0f:24:76:72:5f:f1:78:c1:1a:bf:dc:a6:98: a8:ba:fa:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfJCUTegRTLVlYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MDc1NGY3MWQtNjUzMC00YTYzLWJiZTQtZmE3Yjc4MTk3NTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM/0mLqTdSKMrCeDtNim1UYNtOms+ScCEtgI T6Fy7OlVJpu6Ht2CBMvRp/MY1oace21ke+jJxaHzJ/Q5P1ysl1UbmydeJ++Ak4NM UklWXKVYqhfnlZRtOQKIWrjmVL7NI0t0HeYArv3326NCsjmaAtgqNdWspe9kGHtZ 9qYhkUUb9PQS9MMTv/e2GM2fnt9DFXnHMeWFq3vnH8ewe1Yc4hMbIUphx4snMskE AuIvK1VUJMvXv2bK1jWYStjjEPr0cJYW8LZYoJ7lDhlsUp1hasDRZSGdI+/oDLBH uZ0lRT1JRhnffCyBpoVB/B+JkIz975tbsXoT5jVep9Qu81yunwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFKiUjWadGvWHA977owZNVbBb9hVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTc3Zjc1ZTEtYjQ2NC0z ZGViLTg2ODEtZDZjMWU4NzVjMTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCVpAfkMssDC7MWFhkVmX1QfF3a8EAJl9RhysJGNzPc/xdL8O+nV8y5 YuKJT0yLK4OsdV+MiV0tf8rh9x65NQhb9274rN83DbDG7T/6Nr/CGeJrRmO5OKsG R2xVsDj8yBYJRcZboATJcz5efWE+58RWmDaiyFBlHHNhwzG/bXBOV8v6h5dTDO6W J6qMkQ5DX/1dVMq/6kWj/PbqUfJj70Y1DRkaCQNsjGtZAnmaBvo80fAI5EZSYgaQ 0OmKIXNd72VjgumFLlH9GyDbnn8h8Ez8+pn5QVESUb2UssLLdiB3h4afEMzESy5k rQ6u36bkTA8kdnJf8XjBGr/cppiouvqT -----END CERTIFICATE-----Generated at Mon Oct 20 03:46:32 2025 by rpki-client