$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa File: aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa (raw, json) Hash identifier: kb+K9yKCjxlaD2D+cy1jctDx3ZlPqLpNlfvdDAEGruU= Subject key identifier: 81:3B:62:8A:27:3C:62:53:6B:84:40:2A:DF:9F:FD:58:D9:E3:E2:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C8AF425142210565268C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396544 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:8a:f4:25:14:22:10:56:52:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=e539bf4d-6eee-48cd-94e1-cef3c06b6227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:f6:be:24:2b:f1:67:07:4e:58:0c:90:1d: c1:b3:4a:a1:11:7b:62:c7:17:0b:10:2b:3b:57:26: 3c:ed:c5:54:04:e5:dd:ee:26:0e:7d:c4:54:7a:10: e7:0d:35:35:eb:eb:29:bd:e0:f7:fb:01:8b:9a:4e: 46:0e:6c:e8:15:12:61:5f:a5:ff:1a:8f:1f:14:3c: 9f:8f:40:27:8d:a7:3b:00:37:13:93:79:b5:bb:35: 17:9c:43:eb:fc:37:e2:ef:d6:4c:67:e6:ba:dd:1e: 29:55:1d:33:69:56:f7:d5:d3:f8:cc:46:62:ac:87: 69:68:fb:73:77:23:b7:ff:c1:32:44:45:32:f8:26: 57:96:ba:d7:c1:0a:f2:a0:35:8e:ac:f0:a0:82:c9: bc:2f:a9:86:a8:6c:8e:aa:5c:c9:38:62:32:8a:e9: 15:78:4b:5f:25:0f:92:0f:94:2d:52:e5:a2:d2:74: 16:aa:11:63:7f:b5:5a:f2:35:4f:97:ca:b9:dc:5b: b3:9c:8e:75:2e:d2:1d:ab:26:15:a6:8f:dc:47:22: 92:fd:47:06:9e:49:67:57:97:5c:0c:c2:19:a3:e5: 53:38:46:88:19:ba:78:b1:8b:01:98:59:ca:b7:ae: 65:ad:dd:3c:59:b0:e8:7f:ba:4b:bf:92:59:cf:be: 86:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:62:8A:27:3C:62:53:6B:84:40:2A:DF:9F:FD:58:D9:E3:E2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa9fd22c-13f2-3b32-ae2d-7b16049363ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:44:cd:06:94:f6:c2:20:46:50:08:61:0a:af:59:49:3d:f2: 08:e5:ad:9b:f0:fb:15:89:b1:f9:32:28:5e:f2:5e:70:2e:b6: d8:42:19:87:c5:44:ff:49:00:c6:17:69:bc:b1:bc:c9:03:50: cf:fc:e1:eb:1a:6b:b9:8a:f1:b6:31:09:cf:ef:e2:fd:9b:82: c5:fb:05:92:3c:46:df:b7:ab:54:44:ed:ef:f1:6b:c0:aa:d8: 92:69:00:51:be:08:b3:f1:f2:89:8a:b4:60:0f:93:9b:aa:23: 0a:16:8e:bd:ec:64:8c:15:00:6e:3b:e7:88:95:76:e7:f7:75: 9a:eb:b0:31:1d:d0:f4:92:87:14:ca:0f:b6:3e:12:85:21:ca: d5:09:7c:f5:53:83:71:8c:fe:6c:ac:a0:ce:32:e6:9d:62:bd: 38:c6:46:ad:f7:d2:bb:f0:82:0f:6e:d8:87:84:61:fb:45:1b: d1:8e:59:be:2e:0e:95:34:07:9b:47:98:db:11:da:16:67:5d: 3e:96:98:70:4a:d8:26:88:6d:0d:02:47:1a:49:1b:c8:89:8b: ec:6a:1c:6c:f5:96:3e:99:3c:89:a6:27:7e:b0:72:c2:47:02: 13:af:24:b4:47:01:b6:23:6d:16:5f:8a:a1:a6:9a:10:10:cc: fe:4c:fd:f0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIr0JRQiEFZSaMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZTUzOWJmNGQtNmVlZS00OGNkLTk0ZTEtY2VmM2MwNmI2MjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcv2viQr8WcHTlgMkB3Bs0qhEXtixxcLECs7 VyY87cVUBOXd7iYOfcRUehDnDTU16+spveD3+wGLmk5GDmzoFRJhX6X/Go8fFDyf j0Anjac7ADcTk3m1uzUXnEPr/Dfi79ZMZ+a63R4pVR0zaVb31dP4zEZirIdpaPtz dyO3/8EyREUy+CZXlrrXwQryoDWOrPCggsm8L6mGqGyOqlzJOGIyiukVeEtfJQ+S D5QtUuWi0nQWqhFjf7Va8jVPl8q53FuznI51LtIdqyYVpo/cRyKS/UcGnklnV5dc DMIZo+VTOEaIGbp4sYsBmFnKt65lrd08WbDof7pLv5JZz76GuQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIE7YoonPGJTa4RAKt+f/VjZ4+INMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE5ZmQyMmMtMTNmMi0z YjMyLWFlMmQtN2IxNjA0OTM2M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCBRM0GlPbCIEZQCGEKr1lJPfII5a2b8PsVibH5Mihe8l5wLrbYQhmH xUT/SQDGF2m8sbzJA1DP/OHrGmu5ivG2MQnP7+L9m4LF+wWSPEbft6tURO3v8WvA qtiSaQBRvgiz8fKJirRgD5ObqiMKFo697GSMFQBuO+eIlXbn93Wa67AxHdD0kocU yg+2PhKFIcrVCXz1U4NxjP5srKDOMuadYr04xkat99K78IIPbtiHhGH7RRvRjlm+ Lg6VNAebR5jbEdoWZ10+lphwStgmiG0NAkcaSRvIiYvsahxs9ZY+mTyJpid+sHLC RwITryS0RwG2I20WX4qhppoQEMz+TP3w -----END CERTIFICATE-----Generated at Mon Oct 20 03:24:33 2025 by rpki-client