$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8a340fc-3052-3a3e-ad48-b57a1b830470.roa File: c8a340fc-3052-3a3e-ad48-b57a1b830470.roa (raw, json) Hash identifier: lQ93utk/qyHVMJF66rxokZOy6FYxhvo3uqDdKvXgnyU= Subject key identifier: 78:39:62:57:B7:F2:A2:07:9F:03:C5:A7:78:3B:45:E9:A7:8E:16:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C836DD404196834D1A260 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8a340fc-3052-3a3e-ad48-b57a1b830470.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396600 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:83:6d:d4:04:19:68:34:d1:a2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=e3db067d-5cad-467e-b403-a9451339ab35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0a:ae:10:90:e4:60:86:ec:3c:58:07:9d:ff: 6a:98:81:2b:aa:d5:59:7b:04:b6:a5:05:fa:07:42: 2c:aa:df:98:5b:9c:fa:26:2b:c8:4b:d0:6a:ea:ef: b7:58:f0:28:85:32:3b:03:45:71:95:ad:0c:b7:52: 72:ca:19:87:00:93:25:8e:cc:c0:40:97:2d:3f:5d: 61:1d:46:f2:ec:77:20:e5:94:9e:3e:b3:9d:f2:56: 35:ad:ab:b3:dd:89:42:f8:25:12:47:08:b1:d8:66: 56:f8:ac:04:03:37:03:aa:91:be:2c:41:a0:54:cd: 4c:6f:75:17:a0:ae:1d:f9:21:3e:88:68:23:b5:db: 94:63:b8:51:b4:87:c8:d7:bc:2e:fe:95:e2:4f:96: b6:4b:c2:b8:2d:7c:a1:7a:45:56:3c:31:da:84:91: 00:d0:d3:81:bf:34:54:38:d1:1a:ba:7d:d4:6e:d4: 76:78:42:fd:fd:c7:9d:6c:31:d5:b3:57:38:3d:11: 8d:8b:44:1d:9b:ee:9d:c1:b0:43:28:3d:52:76:60: 68:f9:11:d9:34:9c:e3:9a:03:9f:26:05:0b:0b:7e: f7:92:7c:c7:c1:c7:a8:28:aa:fd:7d:34:d3:99:68: b1:fc:2c:8c:77:8e:36:57:9b:94:7f:32:27:48:18: 6f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:39:62:57:B7:F2:A2:07:9F:03:C5:A7:78:3B:45:E9:A7:8E:16:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c8a340fc-3052-3a3e-ad48-b57a1b830470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:7f:f9:7b:a3:79:1c:2b:fa:60:c3:43:01:e0:23:30:18:5f: 09:17:7d:f3:38:b0:b0:88:86:61:36:e0:4b:3d:08:fc:b0:ce: fb:8b:aa:68:55:e9:92:2f:cd:86:13:02:7a:51:4c:4f:a9:6f: f6:c0:13:3c:68:3e:dd:35:2c:ac:6b:cb:25:2c:24:08:19:81: cc:cd:01:a5:6a:6f:dc:22:44:60:3b:ce:53:ac:36:b8:dc:86: ed:06:5d:ab:23:cb:e4:23:26:00:cf:f3:75:b9:ba:91:8f:bd: 83:3d:6b:3e:45:35:f0:ef:64:cb:67:3a:85:86:7f:75:86:fc: dc:8c:ab:a3:18:30:ae:20:87:33:61:f7:77:3a:af:b2:51:06: 92:ae:55:01:23:5d:81:b4:c4:2f:4a:eb:67:c7:c1:db:6c:09: 7f:0e:41:3e:72:2c:39:4f:f8:07:43:35:dc:60:45:5c:da:ac: 2e:45:b6:49:2c:18:f5:9d:22:dd:a9:0f:66:c1:aa:24:44:76: 1f:4e:18:c7:81:9d:f8:1b:2b:3e:7a:e3:a5:40:89:17:61:8a: 15:85:cd:d2:ef:b5:81:40:9c:02:5e:8c:8e:03:72:e6:ae:3b: 2a:56:ad:46:a4:e7:23:74:a7:ce:6f:fe:a0:67:92:49:e9:34: e5:02:a4:8e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfINt1AQZaDTRomAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZTNkYjA2N2QtNWNhZC00NjdlLWI0MDMtYTk0NTEzMzlhYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgquEJDkYIbsPFgHnf9qmIErqtVZewS2pQX6 B0Isqt+YW5z6JivIS9Bq6u+3WPAohTI7A0Vxla0Mt1JyyhmHAJMljszAQJctP11h HUby7Hcg5ZSePrOd8lY1rauz3YlC+CUSRwix2GZW+KwEAzcDqpG+LEGgVM1Mb3UX oK4d+SE+iGgjtduUY7hRtIfI17wu/pXiT5a2S8K4LXyhekVWPDHahJEA0NOBvzRU ONEaun3UbtR2eEL9/cedbDHVs1c4PRGNi0Qdm+6dwbBDKD1SdmBo+RHZNJzjmgOf JgULC373knzHwceoKKr9fTTTmWix/CyMd442V5uUfzInSBhvrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHg5Yle38qIHnwPFp3g7RemnjhYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzhhMzQwZmMtMzA1Mi0z YTNlLWFkNDgtYjU3YTFiODMwNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCIf/l7o3kcK/pgw0MB4CMwGF8JF33zOLCwiIZhNuBLPQj8sM77i6po VemSL82GEwJ6UUxPqW/2wBM8aD7dNSysa8slLCQIGYHMzQGlam/cIkRgO85TrDa4 3IbtBl2rI8vkIyYAz/N1ubqRj72DPWs+RTXw72TLZzqFhn91hvzcjKujGDCuIIcz Yfd3Oq+yUQaSrlUBI12BtMQvSutnx8HbbAl/DkE+ciw5T/gHQzXcYEVc2qwuRbZJ LBj1nSLdqQ9mwaokRHYfThjHgZ34Gys+euOlQIkXYYoVhc3S77WBQJwCXoyOA3Lm rjsqVq1GpOcjdKfOb/6gZ5JJ6TTlAqSO -----END CERTIFICATE-----Generated at Mon Oct 20 15:14:28 2025 by rpki-client