$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a91a1a2e-bafc-371e-bb49-c46d6482405f.roa File: a91a1a2e-bafc-371e-bb49-c46d6482405f.roa (raw, json) Hash identifier: Bl7DRQjn1gV322lKdoADDorSw7UHh6TXWUJuMIAtTEQ= Subject key identifier: 78:39:CA:23:65:53:58:D0:3F:AC:62:34:2D:99:E6:F8:A4:1F:DC:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF73F8C54290E17B67D3980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a91a1a2e-bafc-371e-bb49-c46d6482405f.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396605 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:3f:8c:54:29:0e:17:b6:7d:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=bbc2bee9-cef0-4f7f-bd66-144b8ccb0223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:51:ea:db:d3:fa:03:48:49:17:ca:25:4e:21: 3b:d3:8f:91:c5:e9:1c:2b:42:26:79:34:42:73:19: 64:db:19:dc:fd:56:16:c5:8a:bb:9d:59:05:01:9b: a1:c5:44:67:9f:a5:69:55:b3:e7:79:d7:87:2b:8e: 9a:fb:4a:ec:ee:cc:f4:d8:a5:71:27:52:55:54:55: 05:12:6d:54:a6:d5:29:ef:ec:a1:d3:8d:96:87:de: c8:10:ef:4a:f9:07:29:17:72:6b:b7:91:d2:dc:8a: f7:8c:25:54:b6:fd:13:1d:31:2e:1e:15:52:68:88: e0:0a:46:d4:61:46:37:89:3e:df:ed:06:34:ab:72: 14:ee:b1:1e:52:25:e8:f1:12:d2:67:a7:99:ef:46: e0:f5:bf:c1:af:03:b6:10:1f:58:d7:15:34:ba:57: 4d:57:f4:ed:ae:c7:89:82:23:37:10:6f:33:f6:af: 5f:54:4c:5f:a6:bd:e2:55:f9:7d:b0:d6:2b:d2:13: 68:ff:bb:e2:0d:8d:bf:8f:01:85:bd:0f:32:12:78: e2:bb:90:ee:e7:fa:d9:98:fb:e7:6e:04:54:8a:c6: d0:7e:54:6d:5c:a3:c2:9b:d7:68:16:d5:88:e7:38: c5:63:72:c7:28:4f:c9:bb:c4:5f:5a:d1:d0:10:a5: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:39:CA:23:65:53:58:D0:3F:AC:62:34:2D:99:E6:F8:A4:1F:DC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a91a1a2e-bafc-371e-bb49-c46d6482405f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e4:3c:18:1d:3b:1a:36:bf:1f:59:52:b9:d1:de:78:d7:9f: ad:2f:f0:a8:8b:b2:0e:39:61:ec:eb:5d:86:32:57:3c:65:5c: 7e:1f:06:8c:ca:3e:24:60:e5:8b:7c:39:1f:d6:ff:c7:d6:92: 17:3c:ef:43:a2:42:2d:41:0a:26:24:e7:b0:ab:4a:72:fe:cc: 39:2a:15:35:ce:8e:22:2a:ae:da:13:da:a8:93:2e:0f:41:93: 52:9b:94:2c:4c:ea:e1:e0:eb:fa:9b:70:7c:0a:bd:08:e8:3e: 0d:7f:b4:34:81:9e:69:d6:f6:fc:f5:9c:ff:e3:88:c8:ef:61: f6:f9:70:63:2c:0a:57:35:4d:cf:90:f6:2c:5c:0e:07:99:7b: bd:7f:ce:eb:7b:86:b1:19:ce:c7:3e:d8:6a:e7:39:d5:c8:56: 77:76:0f:1d:2e:14:22:c8:7f:81:0e:ab:4f:e9:27:2c:8e:3d: 66:bd:a5:0b:fd:b6:ce:da:68:2d:09:f3:77:1a:f9:e0:a6:e4: 42:b6:51:5f:bf:ca:4c:43:1a:c0:27:e0:2c:d3:4b:09:7d:aa: 92:4f:ab:cb:2d:04:8b:32:cd:76:a9:bc:d2:80:f0:0d:35:40: 69:78:57:02:94:e5:21:9f:69:4b:2b:d6:71:db:7a:c9:f5:dc: e4:59:4e:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv9z+MVCkOF7Z9OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk YmJjMmJlZTktY2VmMC00ZjdmLWJkNjYtMTQ0YjhjY2IwMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllHq29P6A0hJF8olTiE704+RxekcK0ImeTRC cxlk2xnc/VYWxYq7nVkFAZuhxURnn6VpVbPnedeHK46a+0rs7sz02KVxJ1JVVFUF Em1UptUp7+yh042Wh97IEO9K+QcpF3Jrt5HS3Ir3jCVUtv0THTEuHhVSaIjgCkbU YUY3iT7f7QY0q3IU7rEeUiXo8RLSZ6eZ70bg9b/BrwO2EB9Y1xU0uldNV/TtrseJ giM3EG8z9q9fVExfpr3iVfl9sNYr0hNo/7viDY2/jwGFvQ8yEnjiu5Du5/rZmPvn bgRUisbQflRtXKPCm9doFtWI5zjFY3LHKE/Ju8RfWtHQEKVNvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg5yiNlU1jQP6xiNC2Z5vikH9yZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTkxYTFhMmUtYmFmYy0z NzFlLWJiNDktYzQ2ZDY0ODI0MDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALkPBgdOxo2vx9ZUrnR3njXn60v8KiLsg45YezrXYYyVzxlXH4fBozK PiRg5Yt8OR/W/8fWkhc870OiQi1BCiYk57CrSnL+zDkqFTXOjiIqrtoT2qiTLg9B k1KblCxM6uHg6/qbcHwKvQjoPg1/tDSBnmnW9vz1nP/jiMjvYfb5cGMsClc1Tc+Q 9ixcDgeZe71/zut7hrEZzsc+2GrnOdXIVnd2Dx0uFCLIf4EOq0/pJyyOPWa9pQv9 ts7aaC0J83ca+eCm5EK2UV+/ykxDGsAn4CzTSwl9qpJPq8stBIsyzXapvNKA8A01 QGl4VwKU5SGfaUsr1nHbesn13ORZTgo= -----END CERTIFICATE-----Generated at Mon Oct 20 06:24:41 2025 by rpki-client