$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa File: c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa (raw, json) Hash identifier: tOqQTy61PkPH+sQ/CNqqPEng2HkVAv4TRNHwv4VHZy8= Subject key identifier: 42:60:11:ED:48:0F:74:0B:71:F2:EE:AD:A5:81:56:6D:99:FF:20:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74352DF55A21A43531220 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396592 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:43:52:df:55:a2:1a:43:53:12:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=c7a940d6-abd6-49ef-a7b3-8da1be43c214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:73:5b:a4:ca:52:05:bf:72:26:a7:b2:46: 90:19:9c:e1:5a:4b:04:82:e4:32:86:f5:e3:58:bb: c1:34:36:2a:14:85:f6:d9:fd:8d:f5:8d:2d:53:00: 91:3d:2c:fc:53:75:f4:8e:c8:f6:e6:cc:22:54:69: 61:2d:d3:99:db:fe:37:b1:3b:a5:9f:3a:8a:0c:b3: 9b:b9:31:9c:82:ea:72:2c:ab:a6:23:89:7c:33:71: bd:92:94:f3:ca:88:1d:c3:bf:5d:28:d5:90:42:f6: a0:5a:fe:ff:69:88:29:dd:6c:af:6f:70:77:55:6d: e0:5a:f2:8a:96:84:12:ba:e1:83:e2:68:d9:55:52: 9a:9b:b8:1b:b9:45:f7:db:19:0b:25:95:4d:f9:d8: 74:96:9f:98:cb:1e:e9:ca:40:83:a7:9a:0b:cb:3e: 44:50:a2:b6:f2:cf:2d:4f:2f:2c:76:50:52:93:4e: da:6f:26:da:23:87:f3:68:e6:5a:fd:a4:ce:9e:8e: 9e:99:1d:15:0a:84:cc:22:bb:0a:c3:2e:8d:17:e9: 3b:e5:c7:91:78:ad:98:05:c3:ea:6c:95:c9:db:4f: be:df:42:3c:07:35:95:6b:f3:1a:fc:81:9f:39:7e: fd:f4:13:b6:0f:d4:d6:98:d5:5c:7f:cb:2e:c9:bf: fa:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:60:11:ED:48:0F:74:0B:71:F2:EE:AD:A5:81:56:6D:99:FF:20:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c85e773b-c9f0-33ca-8e8f-f2078f0ec437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:51:c0:9c:74:ac:2a:ce:33:d6:eb:0c:62:a7:a3:03:70:8f: 70:39:8d:00:d8:cb:a9:8d:d8:a4:1b:3f:3d:a5:33:df:8a:2d: 20:d8:8c:f0:43:b1:e6:e9:3e:62:3f:1a:a1:5f:17:f4:6f:88: d4:d1:b8:01:d9:e9:43:b7:73:67:59:98:c1:09:e6:26:70:90: ae:19:d2:de:d9:d4:6d:c5:51:6c:b7:56:57:2f:b2:59:4a:cf: 85:58:f3:76:b6:eb:84:a0:4f:35:b8:4e:3e:e5:94:25:1c:8b: 3e:a7:47:98:98:1b:da:2e:c5:0f:28:34:e5:34:1c:0f:87:06: cb:45:01:87:2a:cf:d2:7f:bd:bc:36:ab:5b:f3:74:4b:88:c9: 8a:08:fa:db:f8:50:4c:54:f8:a7:74:0b:54:d3:36:b3:09:09: 45:95:9a:4b:fe:45:f1:e1:6d:c1:b0:b6:f3:ce:3b:e2:17:8f: bb:e3:b1:d2:c0:00:75:f5:60:27:38:66:2c:13:b8:64:72:79: 0e:08:27:e3:a2:33:68:a0:91:89:52:7e:1d:13:c5:0e:bf:31: 8c:75:2e:df:24:d0:74:24:ab:56:8a:25:88:86:c1:de:7f:4a: cb:9f:ec:d0:4e:d4:cc:f6:26:c2:3b:42:58:de:9c:37:3e:02: 85:e3:2b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90NS31WiGkNTEiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk YzdhOTQwZDYtYWJkNi00OWVmLWE3YjMtOGRhMWJlNDNjMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHlzW6TKUgW/cianskaQGZzhWksEguQyhvXj WLvBNDYqFIX22f2N9Y0tUwCRPSz8U3X0jsj25swiVGlhLdOZ2/43sTulnzqKDLOb uTGcgupyLKumI4l8M3G9kpTzyogdw79dKNWQQvagWv7/aYgp3Wyvb3B3VW3gWvKK loQSuuGD4mjZVVKam7gbuUX32xkLJZVN+dh0lp+Yyx7pykCDp5oLyz5EUKK28s8t Ty8sdlBSk07abybaI4fzaOZa/aTOno6emR0VCoTMIrsKwy6NF+k75ceReK2YBcPq bJXJ20++30I8BzWVa/Ma/IGfOX799BO2D9TWmNVcf8suyb/6cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJgEe1ID3QLcfLuraWBVm2Z/yClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzg1ZTc3M2ItYzlmMC0z M2NhLThlOGYtZjIwNzhmMGVjNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBRwJx0rCrOM9brDGKnowNwj3A5jQDYy6mN2KQbPz2lM9+KLSDYjPBD sebpPmI/GqFfF/RviNTRuAHZ6UO3c2dZmMEJ5iZwkK4Z0t7Z1G3FUWy3VlcvsllK z4VY83a264SgTzW4Tj7llCUciz6nR5iYG9ouxQ8oNOU0HA+HBstFAYcqz9J/vbw2 q1vzdEuIyYoI+tv4UExU+Kd0C1TTNrMJCUWVmkv+RfHhbcGwtvPOO+IXj7vjsdLA AHX1YCc4ZiwTuGRyeQ4IJ+OiM2igkYlSfh0TxQ6/MYx1Lt8k0HQkq1aKJYiGwd5/ Ssuf7NBO1Mz2JsI7QljenDc+AoXjK/k= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:47 2025 by rpki-client