$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf65d986-a042-36f3-aa4f-9413c822a7cc.roa File: bf65d986-a042-36f3-aa4f-9413c822a7cc.roa (raw, json) Hash identifier: lQ0Egr3KvNGUUb84+y9d1brEhwQQXgryuO1UIL2ApF4= Subject key identifier: 5C:89:5F:3F:5C:82:92:28:2E:37:4C:3D:B6:35:58:C1:CE:07:B9:49 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B39870F3A3CC93FF3889DEEC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf65d986-a042-36f3-aa4f-9413c822a7cc.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 36630 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0f:3a:3c:c9:3f:f3:88:9d:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=0551fb81-cf5c-48a0-a5a6-31c454564abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8f:d3:82:c3:0c:85:7e:44:08:6f:77:68:b2: 20:b0:3f:f2:5c:ce:2d:84:0a:13:e1:84:9f:43:9f: 68:b3:77:60:75:68:c3:5d:b9:b0:59:f8:dd:29:5c: 32:df:84:ae:89:1d:fd:f6:22:26:83:2b:79:1a:73: b1:9e:37:ab:54:cc:43:40:ea:76:35:a1:a8:c1:70: e6:86:d6:6c:4a:c1:a7:46:ab:b4:ec:2f:e6:24:59: d6:55:1f:5e:b0:e0:45:79:46:99:5c:86:c5:01:84: 66:d8:05:24:b3:29:eb:84:b5:d7:ac:5b:32:73:62: 84:49:5a:4a:d3:a0:82:86:b5:d1:59:e2:73:dd:06: 65:cf:d7:93:aa:e3:91:cb:60:f8:c7:a5:4d:02:e7: 75:2a:99:1d:85:d1:9a:4f:1c:03:3f:91:07:e0:bf: 4c:12:f3:c3:30:5c:a8:fb:80:d3:5d:f7:25:a9:73: 71:63:a2:92:ec:17:3a:cf:20:c8:7a:de:17:05:4a: c6:72:8a:88:55:ef:cd:a4:6f:90:cc:47:49:df:d5: ce:ea:b7:94:a5:12:d1:5a:50:61:09:b8:8e:06:d2: 42:90:b1:13:99:06:5f:03:34:cb:40:cd:d9:d5:67: 8f:99:2f:7f:60:dd:8f:22:c2:c2:90:d1:da:d2:df: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:89:5F:3F:5C:82:92:28:2E:37:4C:3D:B6:35:58:C1:CE:07:B9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf65d986-a042-36f3-aa4f-9413c822a7cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0e:d5:49:eb:c3:07:38:66:c7:b2:2f:79:9b:ec:60:eb:7e: e6:3d:be:e7:ff:74:cd:59:66:f1:46:7a:e4:27:c2:1b:bd:db: a7:fe:54:f9:54:a0:33:a2:b3:5e:28:33:43:6b:b4:fa:30:d8: 75:13:6c:67:ab:02:37:8c:ac:d7:01:d9:69:24:43:c5:db:54: ec:30:68:7c:e7:ec:2e:f4:65:3c:f1:2b:e1:52:2e:8e:c9:db: 27:6d:91:68:a6:fb:d7:6e:d0:46:ec:71:66:35:c1:ff:8a:b6: 9e:e3:d9:bc:c6:92:65:5d:f9:f3:9e:5b:f1:ed:36:32:ea:8e: 8e:08:e2:a1:1e:82:24:ee:a9:97:9d:85:57:08:e1:e4:5c:29: 57:65:39:eb:54:d2:9d:e2:70:b9:57:82:68:30:d4:a1:25:b3: 0f:49:30:15:b5:c1:cf:f2:e3:ad:f1:6c:83:d4:44:a1:b1:0d: 76:36:bf:ae:e9:b5:97:b5:0a:47:1a:ec:b4:7d:25:20:64:0e: 34:52:33:c2:94:22:88:68:96:35:a2:ac:9e:3b:68:e2:88:18: f1:44:c1:48:c2:f4:15:56:da:48:82:dc:d6:e0:2f:5d:3e:df: a9:c8:64:c2:fd:e7:96:9c:5c:8d:02:82:60:9c:c1:6f:f2:97: 23:ce:f8:5a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hw86PMk/84id7sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk MDU1MWZiODEtY2Y1Yy00OGEwLWE1YTYtMzFjNDU0NTY0YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo/TgsMMhX5ECG93aLIgsD/yXM4thAoT4YSf Q59os3dgdWjDXbmwWfjdKVwy34SuiR399iImgyt5GnOxnjerVMxDQOp2NaGowXDm htZsSsGnRqu07C/mJFnWVR9esOBFeUaZXIbFAYRm2AUksynrhLXXrFsyc2KESVpK 06CChrXRWeJz3QZlz9eTquORy2D4x6VNAud1KpkdhdGaTxwDP5EH4L9MEvPDMFyo +4DTXfclqXNxY6KS7Bc6zyDIet4XBUrGcoqIVe/NpG+QzEdJ39XO6reUpRLRWlBh CbiOBtJCkLETmQZfAzTLQM3Z1WePmS9/YN2PIsLCkNHa0t/jGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFyJXz9cgpIoLjdMPbY1WMHOB7lJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmY2NWQ5ODYtYTA0Mi0z NmYzLWFhNGYtOTQxM2M4MjJhN2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApDtVJ68MHOGbHsi95m+xg637mPb7n/3TNWWbxRnrkJ8Ibvdun/lT5 VKAzorNeKDNDa7T6MNh1E2xnqwI3jKzXAdlpJEPF21TsMGh85+wu9GU88SvhUi6O ydsnbZFopvvXbtBG7HFmNcH/irae49m8xpJlXfnznlvx7TYy6o6OCOKhHoIk7qmX nYVXCOHkXClXZTnrVNKd4nC5V4JoMNShJbMPSTAVtcHP8uOt8WyD1EShsQ12Nr+u 6bWXtQpHGuy0fSUgZA40UjPClCKIaJY1oqyeO2jiiBjxRMFIwvQVVtpIgtzW4C9d Pt+pyGTC/eeWnFyNAoJgnMFv8pcjzvha -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:02 2025 by rpki-client