$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa File: b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa (raw, json) Hash identifier: YYmh1t+NUDD4npsyiXgoXQ//6+17oQCgNJ4QSaWxvOQ= Subject key identifier: 83:E4:29:1B:B7:60:96:74:9B:DD:76:50:BA:0F:B0:B9:9E:9B:AD:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C83540EB88031DD19A580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396566 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:83:54:0e:b8:80:31:dd:19:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=29d59cb0-4ee7-4d7e-b119-7278861e1aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:34:ab:bf:da:b5:99:8c:04:f4:c8:5c:0c:81: d9:9a:a4:b1:7a:fb:b6:83:96:30:89:94:e1:9e:b6: 09:84:cb:ac:04:a9:d3:f6:19:2d:2f:c2:fb:82:d6: c4:eb:f8:18:cb:cb:78:01:db:79:e9:a9:26:ab:0d: 47:a4:9c:fc:d7:0f:75:4d:08:81:ba:12:fb:20:0c: c2:cd:07:29:10:b6:be:3b:cb:01:8c:9e:9d:fe:d9: c3:3a:ee:60:62:23:ff:05:35:7b:5d:97:06:b9:ea: e1:c1:ff:c5:51:41:d6:16:46:dd:87:24:f2:d3:8a: 02:d8:ba:f2:e5:b1:60:dc:9e:64:31:0f:52:44:32: 62:6b:1b:d0:11:e8:b1:60:d3:ea:01:b0:4a:49:67: f0:2e:8d:66:1a:45:b4:8b:08:00:77:c3:51:a9:05: be:af:17:fa:48:d6:1c:06:80:b0:9d:66:bb:24:26: c4:70:41:1f:8b:c9:c2:cf:79:ee:1d:27:6e:5a:3a: c5:ac:03:b0:df:9c:e6:ec:ab:d1:06:73:df:d8:72: 08:1d:f7:f0:3f:70:94:11:13:c2:1f:0d:fd:2a:7c: 8c:58:b5:6e:90:56:bf:8b:cd:c7:4e:b5:72:2f:8f: 23:9b:f8:6f:f7:12:4d:b4:3a:a0:f8:19:8c:a9:42: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E4:29:1B:B7:60:96:74:9B:DD:76:50:BA:0F:B0:B9:9E:9B:AD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4b98ffd-9332-374a-82aa-4b68879fd5b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:1c:b2:70:2c:ad:5a:73:14:f1:d9:53:17:8f:e6:f6:32:83: a2:dd:64:91:14:1f:89:03:a9:6b:46:d9:2a:19:3a:5b:51:e9: e2:45:d9:c7:4e:a8:1b:6f:b0:c8:a7:4f:ec:f0:3b:75:b7:1b: 0c:e4:36:56:9d:d1:d4:2a:99:15:11:83:8c:cc:94:ef:c9:9f: 5c:9b:74:00:f0:91:6c:cd:42:2f:e7:de:3a:31:7c:ff:46:16: 70:1c:2c:4c:58:4e:20:31:1b:6f:d2:53:e0:99:9e:9c:83:49: 58:2b:ae:d4:3e:3b:a3:8e:f3:e3:a5:16:80:42:bb:6d:d9:36: 3d:0c:d5:aa:64:4e:9a:ae:21:be:15:8e:7f:9f:04:07:dd:ba: 9c:43:b7:9c:4c:39:c5:3b:57:dc:b2:2d:6e:9c:9c:d5:eb:35: 3d:04:bd:af:24:53:9a:a9:eb:1e:4e:84:ff:c9:ce:41:d9:06: e3:d7:80:06:78:82:c6:77:1d:2f:97:38:8d:73:7c:62:1c:38: da:62:fd:b8:11:1f:80:88:60:16:da:ef:e4:8c:2f:e7:82:45: 95:89:f1:6d:a2:dc:f8:d8:2d:6c:e0:6c:c4:8e:31:52:f0:bb: 62:a2:ce:e4:41:bc:a3:6f:b8:86:ae:5a:ca:ad:0a:11:00:49: 3d:35:53:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDINUDriAMd0ZpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MjlkNTljYjAtNGVlNy00ZDdlLWIxMTktNzI3ODg2MWUxYWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszSrv9q1mYwE9MhcDIHZmqSxevu2g5YwiZTh nrYJhMusBKnT9hktL8L7gtbE6/gYy8t4Adt56akmqw1HpJz81w91TQiBuhL7IAzC zQcpELa+O8sBjJ6d/tnDOu5gYiP/BTV7XZcGuerhwf/FUUHWFkbdhyTy04oC2Lry 5bFg3J5kMQ9SRDJiaxvQEeixYNPqAbBKSWfwLo1mGkW0iwgAd8NRqQW+rxf6SNYc BoCwnWa7JCbEcEEfi8nCz3nuHSduWjrFrAOw35zm7KvRBnPf2HIIHffwP3CUERPC Hw39KnyMWLVukFa/i83HTrVyL48jm/hv9xJNtDqg+BmMqUJspwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIPkKRu3YJZ0m912ULoPsLmem60cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjRiOThmZmQtOTMzMi0z NzRhLTgyYWEtNGI2ODg3OWZkNWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQClHLJwLK1acxTx2VMXj+b2MoOi3WSRFB+JA6lrRtkqGTpbUeniRdnH Tqgbb7DIp0/s8Dt1txsM5DZWndHUKpkVEYOMzJTvyZ9cm3QA8JFszUIv5946MXz/ RhZwHCxMWE4gMRtv0lPgmZ6cg0lYK67UPjujjvPjpRaAQrtt2TY9DNWqZE6ariG+ FY5/nwQH3bqcQ7ecTDnFO1fcsi1unJzV6zU9BL2vJFOaqeseToT/yc5B2Qbj14AG eILGdx0vlziNc3xiHDjaYv24ER+AiGAW2u/kjC/ngkWVifFtotz42C1s4GzEjjFS 8Ltios7kQbyjb7iGrlrKrQoRAEk9NVPI -----END CERTIFICATE-----Generated at Mon Oct 20 07:07:52 2025 by rpki-client