$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa3acd7-7043-375d-889a-3b1a95fbca98.roa File: aaa3acd7-7043-375d-889a-3b1a95fbca98.roa (raw, json) Hash identifier: s85W4aHwcbAqHvgx+zu5LX4zJ0laFdAT/YpdtemMqAY= Subject key identifier: E6:F6:66:0D:35:F5:AA:B1:EA:7E:29:EC:D7:54:26:A9:30:F1:3E:04 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C85FD75FBE74DCE0C4EC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa3acd7-7043-375d-889a-3b1a95fbca98.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396583 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:85:fd:75:fb:e7:4d:ce:0c:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=79f63523-2ea8-429f-a7ce-e7118a1c39fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:79:6a:a6:1b:2d:f5:a4:2c:e1:a5:2e:a5: 67:f1:dd:39:fd:db:da:ef:11:06:d6:3b:f6:c2:5a: bc:cd:4f:8c:4e:e4:1a:86:02:05:be:c5:e0:e0:bd: e4:e2:fd:5b:39:08:5f:ea:4e:b8:48:ea:a1:a3:da: 5b:9e:b0:e4:87:ed:d2:58:87:84:ce:d1:53:fa:a3: 30:b5:57:37:ac:ba:bc:f1:ab:68:93:ff:6c:92:a0: 55:1b:7d:3b:6a:d0:31:30:55:92:d7:b6:a1:37:09: 86:08:01:ae:0b:67:6e:9a:8d:f9:0a:b5:3a:b1:cf: ef:f3:bb:74:03:18:4a:74:36:47:81:c6:1e:7e:a8: 1a:aa:51:09:eb:d0:4b:60:7c:2e:ef:9f:a8:3f:93: 30:a3:ab:c3:08:10:c9:17:f3:fb:23:82:0f:e8:49: d9:9d:b7:8a:51:a3:88:d1:46:f7:f8:6a:3b:c0:32: d4:6b:ec:0c:b9:55:ca:bc:b5:f2:e3:5b:fa:0d:a8: b0:1a:d7:7f:11:60:6f:fd:bc:ef:1f:73:e0:22:f1: 65:b9:cd:4c:70:ec:d8:f6:88:1a:6a:a2:8e:50:69: 2f:7b:2d:65:c0:5c:01:cd:4a:8c:4d:20:e9:f4:54: 73:e7:e4:a8:35:a1:f2:45:d8:9d:73:35:a2:44:50: 7d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F6:66:0D:35:F5:AA:B1:EA:7E:29:EC:D7:54:26:A9:30:F1:3E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aaa3acd7-7043-375d-889a-3b1a95fbca98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:8f:22:2b:d8:32:f2:49:d3:27:22:f0:eb:eb:f3:e2:27:69: 76:a3:54:9d:eb:4a:fb:51:3b:3f:e5:25:03:47:f5:73:45:1a: 66:af:8e:19:06:e9:72:a5:0e:e9:7e:f9:37:82:09:27:31:f3: c5:da:ce:02:09:22:77:ed:33:a6:f6:e3:a1:4e:ac:9d:20:d6: 5c:3d:6c:2b:ea:68:e1:e1:b7:7e:ec:74:d0:a9:1d:45:00:bf: 31:1d:5b:1e:67:fd:4e:e4:4a:83:d3:ac:9f:7e:c2:b6:da:d9: b0:d8:bb:0e:a9:6d:d3:f4:f4:e4:07:f8:fa:93:eb:d0:72:2e: 40:f5:91:16:c4:ac:c7:4e:cd:00:ed:58:b1:75:3c:f7:b4:a7: 07:8f:00:e5:99:d9:8d:e0:74:58:bc:e9:06:c6:c6:80:f7:0b: 66:94:be:93:72:24:1b:a8:64:4d:1e:d2:0e:c7:79:09:80:e6: 8a:b1:7e:ec:d7:84:6a:c4:65:e4:eb:f6:57:e6:7c:6b:e0:c6: d9:c0:42:0e:84:6e:e4:0f:76:33:c1:76:a6:7e:03:00:c8:59: 1d:fb:16:7c:10:0c:74:e6:bd:9a:39:46:65:5d:cc:69:4c:c6: 3d:a1:f8:d1:e9:ff:83:99:d7:5d:02:9f:60:9d:b8:ac:2f:33: c9:b6:9b:75 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIX9dfvnTc4MTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk NzlmNjM1MjMtMmVhOC00MjlmLWE3Y2UtZTcxMThhMWMzOWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleR5aqYbLfWkLOGlLqVn8d05/dva7xEG1jv2 wlq8zU+MTuQahgIFvsXg4L3k4v1bOQhf6k64SOqho9pbnrDkh+3SWIeEztFT+qMw tVc3rLq88atok/9skqBVG307atAxMFWS17ahNwmGCAGuC2dumo35CrU6sc/v87t0 AxhKdDZHgcYefqgaqlEJ69BLYHwu75+oP5Mwo6vDCBDJF/P7I4IP6EnZnbeKUaOI 0Ub3+Go7wDLUa+wMuVXKvLXy41v6DaiwGtd/EWBv/bzvH3PgIvFluc1McOzY9oga aqKOUGkvey1lwFwBzUqMTSDp9FRz5+SoNaHyRdidczWiRFB9IQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOb2Zg019aqx6n4p7NdUJqkw8T4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWFhM2FjZDctNzA0My0z NzVkLTg4OWEtM2IxYTk1ZmJjYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQATjyIr2DLySdMnIvDr6/PiJ2l2o1Sd60r7UTs/5SUDR/VzRRpmr44Z BulypQ7pfvk3ggknMfPF2s4CCSJ37TOm9uOhTqydINZcPWwr6mjh4bd+7HTQqR1F AL8xHVseZ/1O5EqD06yffsK22tmw2LsOqW3T9PTkB/j6k+vQci5A9ZEWxKzHTs0A 7VixdTz3tKcHjwDlmdmN4HRYvOkGxsaA9wtmlL6TciQbqGRNHtIOx3kJgOaKsX7s 14RqxGXk6/ZX5nxr4MbZwEIOhG7kD3YzwXamfgMAyFkd+xZ8EAx05r2aOUZlXcxp TMY9ofjR6f+DmdddAp9gnbisLzPJtpt1 -----END CERTIFICATE-----Generated at Mon Oct 20 03:55:52 2025 by rpki-client