$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa File: bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa (raw, json) Hash identifier: v8wOc9XTqN09djBT+AsN9XJ3UFxBeMgkRiKLeKk2lBk= Subject key identifier: 8B:26:93:15:14:8D:BE:C8:B1:CF:62:76:33:4C:A3:55:68:0F:58:98 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C848024FD5FEA2A425B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 36624 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:84:80:24:fd:5f:ea:2a:42:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=bee662b2-c38e-4eef-ad12-058657ccc9da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0c:45:7e:37:9b:72:0d:4e:f0:98:8d:16:98: 1e:bb:93:5e:00:ce:02:9b:60:c9:fd:6a:26:c2:df: 59:c3:bd:44:88:26:ef:dd:c3:cd:7e:4a:e5:c4:25: b8:7d:4e:fc:41:82:8c:e5:d8:b3:16:46:41:6c:38: d9:a7:4e:96:63:49:8f:09:37:14:8e:8d:6f:49:34: 09:9c:dc:67:76:e6:1a:6c:7d:c9:08:52:b7:d1:5b: be:e5:15:2c:5c:89:76:65:54:b2:58:39:e9:8b:d3: 7c:0a:b9:12:36:5a:b5:3d:4e:13:0d:0c:15:2b:a5: 5a:37:c5:dd:28:9b:cb:ba:5d:b9:62:e9:a8:92:e9: 8c:59:09:da:4a:99:aa:b5:9c:9a:01:18:a3:da:fc: ef:5e:91:c5:20:ba:cd:f9:8f:e8:88:09:00:26:07: ad:30:fc:22:da:71:6d:1a:34:d1:0d:c3:b6:ed:33: ca:8d:a2:92:68:de:8b:dd:6b:6b:5a:1d:4b:62:78: 55:3f:a8:d7:1b:68:72:23:ee:3c:d4:8b:2d:ee:96: 73:22:56:23:bc:2f:df:42:a9:ac:e6:dd:e7:02:ca: 20:d9:dc:65:14:06:fc:5b:ac:e0:10:44:8e:60:9c: 5b:11:5a:49:80:44:1b:80:7a:5e:86:07:bc:26:cd: 9c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:26:93:15:14:8D:BE:C8:B1:CF:62:76:33:4C:A3:55:68:0F:58:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbd10a16-7edd-38b6-8c89-e5088b7a7e5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:bc:89:63:d0:2a:3d:5c:8c:35:41:8b:b8:fe:cf:16:b1:1d: 77:84:e5:24:cd:4b:64:9c:08:31:55:3d:9b:15:66:4d:32:a8: 66:e6:68:36:9c:ab:c5:a5:14:45:83:5d:45:7a:34:5d:1c:03: 16:1d:7c:fe:24:d4:bc:74:b8:0b:b5:d8:4b:ce:a5:06:b7:b0: 40:c8:2e:6a:86:cb:28:7d:c4:4f:1c:80:43:aa:49:3a:e1:16: db:81:04:a9:ce:ba:08:a4:db:8d:07:63:51:67:f7:37:ff:db: 51:70:40:91:26:12:e2:74:a3:ba:60:af:72:07:6c:af:8f:76: 8a:be:ff:c5:c6:ff:5a:7d:50:ed:0a:14:0f:b0:a4:d2:17:bc: 3d:f4:4a:a4:73:72:ed:09:22:f8:4e:83:9e:18:ed:c4:ad:c2: 12:2b:27:f3:f9:92:58:98:c9:1c:c8:ad:56:f6:09:58:57:45: 06:70:34:06:4d:e0:c2:d9:54:b7:c3:ed:23:64:9a:f3:fa:58: bc:f6:11:de:b1:3c:41:e2:1b:e8:72:d8:2f:9d:cf:51:df:cc: e5:c5:07:5a:ad:0f:fe:c2:8e:b8:93:94:1c:15:66:05:5a:b1: fc:4b:af:b5:a6:03:43:22:bf:bb:ef:4c:a7:02:84:31:5f:88: 15:33:a9:6c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfISAJP1f6ipCW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YmVlNjYyYjItYzM4ZS00ZWVmLWFkMTItMDU4NjU3Y2NjOWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgxFfjebcg1O8JiNFpgeu5NeAM4Cm2DJ/Wom wt9Zw71EiCbv3cPNfkrlxCW4fU78QYKM5dizFkZBbDjZp06WY0mPCTcUjo1vSTQJ nNxnduYabH3JCFK30Vu+5RUsXIl2ZVSyWDnpi9N8CrkSNlq1PU4TDQwVK6VaN8Xd KJvLul25YumokumMWQnaSpmqtZyaARij2vzvXpHFILrN+Y/oiAkAJgetMPwi2nFt GjTRDcO27TPKjaKSaN6L3WtrWh1LYnhVP6jXG2hyI+481Ist7pZzIlYjvC/fQqms 5t3nAsog2dxlFAb8W6zgEESOYJxbEVpJgEQbgHpehge8Js2cXwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIsmkxUUjb7Isc9idjNMo1VoD1iYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJkMTBhMTYtN2VkZC0z OGI2LThjODktZTUwODhiN2E3ZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCSvIlj0Co9XIw1QYu4/s8WsR13hOUkzUtknAgxVT2bFWZNMqhm5mg2 nKvFpRRFg11FejRdHAMWHXz+JNS8dLgLtdhLzqUGt7BAyC5qhssofcRPHIBDqkk6 4RbbgQSpzroIpNuNB2NRZ/c3/9tRcECRJhLidKO6YK9yB2yvj3aKvv/Fxv9afVDt ChQPsKTSF7w99Eqkc3LtCSL4ToOeGO3ErcISKyfz+ZJYmMkcyK1W9glYV0UGcDQG TeDC2VS3w+0jZJrz+li89hHesTxB4hvoctgvnc9R38zlxQdarQ/+wo64k5QcFWYF WrH8S6+1pgNDIr+770ynAoQxX4gVM6ls -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:04 2025 by rpki-client