$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa File: ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa (raw, json) Hash identifier: AVuUvPmZnbapnurdMQuQ7abPbwM9s1FE6ta/jx0S0yo= Subject key identifier: 7C:BF:D3:96:43:8B:CA:AB:17:04:D6:BF:75:0C:17:72:12:6B:8D:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B39870E4D50C3BCC2642BE9AC Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 396588 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0e:4d:50:c3:bc:c2:64:2b:e9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=2ae52a0a-3cef-4e39-b09b-1db6a78b0f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c3:20:0a:81:fe:ec:7c:46:8f:75:7c:29:12: 85:54:85:c4:03:05:63:79:d1:ce:5d:ba:38:88:25: eb:93:eb:42:6e:62:41:a5:12:1b:53:68:a7:5c:78: 5d:74:7e:68:02:b8:ad:c4:d5:e6:d6:22:96:34:7f: 6c:8e:04:e7:74:7f:3e:b8:b1:ad:2d:93:08:84:01: 37:f6:41:a9:0c:14:e9:be:96:ef:63:2e:3f:e5:5b: 84:2c:79:4b:91:5f:ff:9c:37:8e:89:3c:a1:95:93: 80:81:0f:07:cc:18:4f:3f:2f:e8:ee:73:8a:b6:19: 62:78:fa:a8:f8:df:5d:2e:c3:2e:52:43:3f:00:b3: ff:f3:a9:dd:c2:15:9d:ea:9e:54:fd:de:cc:be:a5: 62:e6:44:6f:1f:0c:ba:cb:93:c1:a4:9d:30:da:33: 5c:3a:2c:40:0d:c7:e9:d9:9f:71:57:47:a7:e8:20: f0:ff:68:2a:97:bb:37:e7:be:01:a6:bb:a5:25:ca: 12:df:f6:d0:b9:7b:db:8e:53:fd:57:1a:7e:dd:52: 4f:73:94:e6:6f:6a:64:9a:85:c6:68:e0:f4:a2:80: 57:d1:d4:31:7e:67:27:b3:40:99:6d:b6:0f:99:22: ed:73:47:52:da:d7:a5:da:27:b6:bd:37:e1:39:05: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:BF:D3:96:43:8B:CA:AB:17:04:D6:BF:75:0C:17:72:12:6B:8D:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ad69dae7-fde2-32f2-9910-e121a2ce2b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:95:3f:28:57:5b:0c:9d:c9:00:1b:9d:8f:16:4c:1f:d0:bb: 73:27:7c:fe:6b:82:34:66:ae:09:8a:47:58:55:24:16:58:9b: 9a:68:5d:86:0b:90:2f:21:ae:2e:cd:9e:58:d0:e4:d0:84:8a: 84:6f:bf:18:63:01:01:1d:d8:52:07:3c:a0:7b:90:39:4d:2e: 40:fd:c4:9a:a4:68:00:60:7d:8d:80:74:49:47:e9:17:6d:42: af:95:5a:ab:4c:8b:2f:32:e2:df:95:73:d0:38:7e:26:78:57: d2:4a:05:dc:7c:11:9b:e9:35:4f:16:53:ef:29:c9:6d:df:ac: 81:fa:ef:01:37:fe:80:3a:a0:fd:b1:ce:11:3f:14:0a:28:01: ca:53:f2:c2:b0:3e:9d:78:a5:50:97:2d:4d:b8:86:df:b3:1a: d6:37:55:34:6f:9a:7c:49:81:53:08:80:30:57:4f:69:39:70: b6:ee:98:3d:de:a8:3d:a9:b0:c0:49:d7:83:d0:d8:91:4c:3f: b2:0d:b1:a3:d8:bc:3e:0d:b8:3a:7c:36:43:f1:84:b1:10:7e: 7c:ad:9c:14:c0:b1:e4:46:98:46:1a:bc:bb:40:03:66:da:06: e0:a8:5c:3c:b2:55:87:15:ca:ba:76:3d:13:3a:f8:6c:20:8e: 92:40:e2:93 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hw5NUMO8wmQr6awwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MmFlNTJhMGEtM2NlZi00ZTM5LWIwOWItMWRiNmE3OGIwZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcMgCoH+7HxGj3V8KRKFVIXEAwVjedHOXbo4 iCXrk+tCbmJBpRIbU2inXHhddH5oAritxNXm1iKWNH9sjgTndH8+uLGtLZMIhAE3 9kGpDBTpvpbvYy4/5VuELHlLkV//nDeOiTyhlZOAgQ8HzBhPPy/o7nOKthliePqo +N9dLsMuUkM/ALP/86ndwhWd6p5U/d7MvqVi5kRvHwy6y5PBpJ0w2jNcOixADcfp 2Z9xV0en6CDw/2gql7s3574BprulJcoS3/bQuXvbjlP9Vxp+3VJPc5Tmb2pkmoXG aOD0ooBX0dQxfmcns0CZbbYPmSLtc0dS2tel2ie2vTfhOQWpVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHy/05ZDi8qrFwTWv3UMF3ISa41AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWQ2OWRhZTctZmRlMi0z MmYyLTk5MTAtZTEyMWEyY2UyYjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhlT8oV1sMnckAG52PFkwf0LtzJ3z+a4I0Zq4JikdYVSQWWJuaaF2G C5AvIa4uzZ5Y0OTQhIqEb78YYwEBHdhSBzyge5A5TS5A/cSapGgAYH2NgHRJR+kX bUKvlVqrTIsvMuLflXPQOH4meFfSSgXcfBGb6TVPFlPvKclt36yB+u8BN/6AOqD9 sc4RPxQKKAHKU/LCsD6deKVQly1NuIbfsxrWN1U0b5p8SYFTCIAwV09pOXC27pg9 3qg9qbDASdeD0NiRTD+yDbGj2Lw+Dbg6fDZD8YSxEH58rZwUwLHkRphGGry7QANm 2gbgqFw8slWHFcq6dj0TOvhsII6SQOKT -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:23 2025 by rpki-client