$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2db6fa-ea50-3d45-962b-5d3db1928dd8.roa File: ab2db6fa-ea50-3d45-962b-5d3db1928dd8.roa (raw, json) Hash identifier: g8Bto2AdODygOTVPYosxwtBrUVB/XT5dNPtG43BNNaM= Subject key identifier: 2E:96:67:77:75:E2:99:84:DC:4C:C1:DF:46:26:18:C0:5D:24:70:FB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74705F67149B3DF71D500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2db6fa-ea50-3d45-962b-5d3db1928dd8.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396550 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:47:05:f6:71:49:b3:df:71:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=28f7027f-65bb-466c-a618-a1be2e07c33a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:14:cb:ba:87:5b:44:60:3c:5f:a4:c8:71:2f: 47:02:7b:36:22:9e:0c:32:88:06:20:ac:dd:4c:0c: 51:18:a2:07:cb:d7:f5:75:45:f0:4f:45:6f:2f:d2: d2:5b:52:9b:69:6a:99:b1:9a:c4:5f:11:98:1a:1d: fb:93:19:bc:23:73:97:e2:e3:1e:e1:50:fc:e8:4b: be:c4:a0:d6:51:cc:17:fc:f9:51:84:e9:3f:88:82: 59:10:61:40:ab:b3:73:dd:5c:15:db:3b:6a:67:1b: b5:49:5b:ed:85:19:05:da:e5:86:74:89:4e:3f:af: 23:ad:8f:5c:c4:25:3a:43:1a:67:c7:28:42:ef:df: 1c:16:65:db:21:63:01:7f:cf:f0:16:41:6d:90:f7: 7f:72:4d:be:df:65:ed:c9:0c:1c:ec:aa:fe:be:7c: 31:bb:5a:7e:50:65:d9:54:3e:1d:2a:5f:26:7a:bc: 2f:8e:4f:ed:c2:89:0b:05:23:57:6c:b7:fc:c8:17: 6d:12:48:c7:f1:a6:24:ef:41:35:39:65:bf:0e:73: 82:a6:24:7b:02:40:83:8e:15:c3:b2:03:4d:0b:5c: db:1a:fb:68:aa:e2:8d:a6:33:13:58:a5:90:83:e0: e3:62:a7:3d:1b:31:2a:98:d2:59:a8:a8:b3:94:7d: e8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:96:67:77:75:E2:99:84:DC:4C:C1:DF:46:26:18:C0:5D:24:70:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab2db6fa-ea50-3d45-962b-5d3db1928dd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5b:80:b2:06:3f:cb:74:ba:1d:1e:cf:a5:38:2d:c5:15:3f: ca:d6:d1:3a:f8:e8:ce:a6:20:12:a4:79:27:57:78:8d:12:39: 73:58:81:23:9a:f7:d0:6f:31:ae:24:91:45:d7:2b:2d:0b:57: 38:a7:f4:0c:5b:2d:2e:6a:0b:fd:c5:47:ba:e4:64:01:55:86: ca:5c:69:5e:a2:a2:a8:97:d4:22:38:11:fc:e4:fe:9a:2b:5e: 3e:1b:2d:5a:a0:f4:d9:cf:fd:86:f5:9c:ee:51:f6:9a:5d:00: b7:c8:56:dd:79:4f:5b:dc:2b:68:f1:7b:5a:96:af:db:d0:1f: 32:f0:5d:ca:4a:96:52:22:a3:c3:3d:f0:ad:88:ef:e5:d1:a6: e7:47:13:46:0f:9d:0a:32:2a:93:f4:e5:9c:5c:9d:3d:33:f0: 9a:82:04:b5:13:6e:97:b2:0c:02:b9:0a:d6:67:be:3f:58:0f: a6:6f:a0:6c:e5:04:97:87:a8:87:10:2c:cc:39:84:91:8e:2d: 47:40:76:0d:33:09:0f:2e:15:58:8d:d1:ea:cd:0d:3f:d9:bc: 4f:21:50:5a:ed:82:85:b7:6f:59:00:8e:5a:92:b6:fc:a3:cf: fb:6f:06:26:6b:ff:56:8a:7f:33:0f:7a:30:d7:aa:21:cd:4b: dd:3c:78:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90cF9nFJs99x1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk MjhmNzAyN2YtNjViYi00NjZjLWE2MTgtYTFiZTJlMDdjMzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxTLuodbRGA8X6TIcS9HAns2Ip4MMogGIKzd TAxRGKIHy9f1dUXwT0VvL9LSW1KbaWqZsZrEXxGYGh37kxm8I3OX4uMe4VD86Eu+ xKDWUcwX/PlRhOk/iIJZEGFAq7Nz3VwV2ztqZxu1SVvthRkF2uWGdIlOP68jrY9c xCU6QxpnxyhC798cFmXbIWMBf8/wFkFtkPd/ck2+32XtyQwc7Kr+vnwxu1p+UGXZ VD4dKl8merwvjk/twokLBSNXbLf8yBdtEkjH8aYk70E1OWW/DnOCpiR7AkCDjhXD sgNNC1zbGvtoquKNpjMTWKWQg+DjYqc9GzEqmNJZqKizlH3otwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6WZ3d14pmE3EzB30YmGMBdJHD7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWIyZGI2ZmEtZWE1MC0z ZDQ1LTk2MmItNWQzZGIxOTI4ZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9bgLIGP8t0uh0ez6U4LcUVP8rW0Tr46M6mIBKkeSdXeI0SOXNYgSOa 99BvMa4kkUXXKy0LVzin9AxbLS5qC/3FR7rkZAFVhspcaV6ioqiX1CI4Efzk/por Xj4bLVqg9NnP/Yb1nO5R9ppdALfIVt15T1vcK2jxe1qWr9vQHzLwXcpKllIio8M9 8K2I7+XRpudHE0YPnQoyKpP05ZxcnT0z8JqCBLUTbpeyDAK5CtZnvj9YD6ZvoGzl BJeHqIcQLMw5hJGOLUdAdg0zCQ8uFViN0erNDT/ZvE8hUFrtgoW3b1kAjlqStvyj z/tvBiZr/1aKfzMPejDXqiHNS908eNY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:15:03 2025 by rpki-client