$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa File: ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa (raw, json) Hash identifier: W4BqnVGIVDW2Ds4j4cSM9Zq/0q8Zh/ppCImk2c/+154= Subject key identifier: E3:7D:55:0C:60:DC:D9:72:0F:77:EC:6A:34:10:BA:96:50:9C:9E:7E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74AC82FCBF5F97046B680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396567 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:4a:c8:2f:cb:f5:f9:70:46:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=84c4939a-f1eb-48f6-904e-d0880a45182f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:6e:92:e5:12:74:ab:df:4f:03:b8:36:ce: 46:7e:53:f0:89:3a:48:3d:27:ce:c9:e3:02:97:c3: f9:46:e3:0d:a6:08:1c:64:03:25:8e:15:e5:33:41: 86:63:06:61:fb:44:a5:0c:58:34:ba:80:24:84:88: 0f:dc:21:3a:20:79:39:4d:b5:6c:b5:45:36:a0:cc: 85:28:9f:87:84:4b:d5:c7:20:6f:4d:26:b7:34:18: 67:63:31:e7:75:12:85:39:f8:01:97:26:31:25:ad: b5:24:2f:0b:a3:12:9a:2c:af:b7:3e:d1:b6:f6:12: 64:14:10:5f:9d:5f:bc:ed:3b:24:b6:fa:24:36:be: a1:c8:d8:78:62:33:f4:49:60:e5:e5:1d:1d:40:79: fe:b5:c7:46:49:a1:48:61:c2:60:b3:26:5f:c3:c0: d9:97:f9:7e:09:b9:89:1f:04:96:4f:b7:e7:bd:20: 20:fd:8b:d2:42:20:a3:63:95:43:35:03:88:52:03: cd:26:aa:41:52:20:97:0c:02:52:5a:89:eb:c6:44: 63:1c:52:13:20:f9:59:68:64:a6:d3:be:5c:c2:e1: 61:2a:0f:f5:bb:7d:a0:26:fa:f9:3b:35:36:e4:ce: 3a:40:e9:a6:6d:ba:de:44:11:14:0e:59:4a:ff:c3: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:7D:55:0C:60:DC:D9:72:0F:77:EC:6A:34:10:BA:96:50:9C:9E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba677fbe-e7a3-3dcb-b7f0-454096ab9152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:20:ae:6e:17:39:83:0d:43:27:30:41:3a:38:56:92:70:6a: ac:65:a6:c2:8a:d3:91:41:ba:c1:d0:54:75:87:0f:c8:ae:d5: 64:50:ef:01:64:fd:3f:88:7a:56:3b:ac:8f:c7:0f:c6:d8:ca: f6:d2:1a:a1:cb:32:04:0b:ea:60:a6:68:e2:2f:fd:fe:2a:c4: ba:66:28:da:56:a6:1a:e1:86:d7:b2:7a:ec:7b:88:5e:bf:83: ed:20:58:2d:b8:ad:97:a7:74:42:a0:1f:ac:4d:95:ad:d3:d7: 37:a2:b7:c6:77:b2:b3:ca:24:7b:31:90:2f:75:ce:37:4b:4a: 4f:17:43:28:0a:67:f4:51:0e:3b:f1:5c:cc:f1:6f:4c:52:34: 1d:a3:02:ec:bd:c1:a1:63:f2:44:da:87:ec:a8:e3:a9:b5:3e: 34:82:67:5d:51:85:34:ed:be:f7:6e:e8:68:8d:7b:37:a9:3c: 1b:78:51:29:38:68:b2:35:38:19:3a:b4:66:a1:f6:69:13:b0: 58:dc:2f:a8:11:73:38:da:0e:75:b5:b2:40:00:c5:52:6a:d3: 62:52:41:cf:b1:68:49:90:28:18:ce:56:79:97:5c:26:ab:f3: a8:47:df:1e:50:18:01:6f:25:da:b8:7a:03:16:c3:ca:67:00: 06:b2:a1:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90rIL8v1+XBGtoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk ODRjNDkzOWEtZjFlYi00OGY2LTkwNGUtZDA4ODBhNDUxODJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuNukuUSdKvfTwO4Ns5GflPwiTpIPSfOyeMC l8P5RuMNpggcZAMljhXlM0GGYwZh+0SlDFg0uoAkhIgP3CE6IHk5TbVstUU2oMyF KJ+HhEvVxyBvTSa3NBhnYzHndRKFOfgBlyYxJa21JC8LoxKaLK+3PtG29hJkFBBf nV+87TsktvokNr6hyNh4YjP0SWDl5R0dQHn+tcdGSaFIYcJgsyZfw8DZl/l+CbmJ HwSWT7fnvSAg/YvSQiCjY5VDNQOIUgPNJqpBUiCXDAJSWonrxkRjHFITIPlZaGSm 075cwuFhKg/1u32gJvr5OzU25M46QOmmbbreRBEUDllK/8NCWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFON9VQxg3NlyD3fsajQQupZQnJ5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmE2NzdmYmUtZTdhMy0z ZGNiLWI3ZjAtNDU0MDk2YWI5MTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkgrm4XOYMNQycwQTo4VpJwaqxlpsKK05FBusHQVHWHD8iu1WRQ7wFk /T+IelY7rI/HD8bYyvbSGqHLMgQL6mCmaOIv/f4qxLpmKNpWphrhhteyeux7iF6/ g+0gWC24rZendEKgH6xNla3T1zeit8Z3srPKJHsxkC91zjdLSk8XQygKZ/RRDjvx XMzxb0xSNB2jAuy9waFj8kTah+yo46m1PjSCZ11RhTTtvvdu6GiNezepPBt4USk4 aLI1OBk6tGah9mkTsFjcL6gRczjaDnW1skAAxVJq02JSQc+xaEmQKBjOVnmXXCar 86hH3x5QGAFvJdq4egMWw8pnAAayoYs= -----END CERTIFICATE-----Generated at Mon Oct 20 03:34:56 2025 by rpki-client