$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa File: cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa (raw, json) Hash identifier: QKAvpLmUkSMb63cUxNLTpM7DUauBXqcD2/aowsRk6M0= Subject key identifier: F2:99:4C:51:60:50:8E:11:D0:37:4F:B0:45:BE:83:67:5C:E7:F9:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B33F1B13BC5EFF412ACFA9A60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 20431 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:b1:3b:c5:ef:f4:12:ac:fa:9a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=5499a95c-b0c5-4284-ae74-2dc9f61fb036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:26:d0:b8:a3:1d:53:33:9f:05:69:c3:41:40: 12:45:03:fc:6a:c3:4f:48:75:28:03:af:49:96:19: dc:b7:9c:6a:e1:51:db:3d:a8:40:21:1f:59:8d:d7: f8:0e:b8:e5:df:0f:d6:a8:28:3e:a9:c5:2f:d3:0e: 80:de:86:c0:9c:47:08:e9:df:b3:f1:8b:1c:67:52: fa:16:6e:d1:26:b3:27:41:47:9b:2e:10:97:00:6c: 88:06:0d:66:6c:8f:81:7c:fb:57:b5:98:bf:3c:da: 66:99:67:fa:e2:5b:b4:dd:e7:b6:9b:e0:51:b2:48: 53:08:49:74:ea:19:54:01:af:63:40:c1:25:23:2c: e0:64:b8:1e:90:46:99:a2:0d:34:94:23:d8:86:ca: 6f:4c:d3:76:7b:ad:b8:21:d0:f5:b9:26:25:01:6b: b5:3f:27:fd:35:17:8f:b4:b0:77:ae:0f:33:3c:ad: 2c:51:c6:86:0a:52:34:4b:de:ae:4d:9b:6b:9e:8a: 99:b0:bd:fb:27:79:6b:d2:f3:32:81:24:70:74:92: 48:c8:d8:2b:20:1c:7c:f8:1d:31:25:48:d7:f6:d8: 50:c7:37:2d:2b:0f:69:d2:31:49:3b:e4:32:8e:4b: 4d:74:ef:b3:11:ae:58:95:ca:29:48:ca:1b:3a:67: 19:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:99:4C:51:60:50:8E:11:D0:37:4F:B0:45:BE:83:67:5C:E7:F9:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd5d5225-602e-366a-ab04-8856fb9ae6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:cd:ba:e1:2c:11:4b:e0:3f:cb:d0:8d:0a:49:88:a6:6d:13: 35:72:7a:14:3b:75:fe:fb:3c:3f:5e:a7:37:30:ad:a7:48:93: 02:9b:68:68:46:0f:1d:5c:fe:60:86:dc:98:d0:6e:ea:c0:a4: bf:a6:5d:01:b4:57:a4:01:8f:a2:e3:00:5a:11:b8:f9:9a:02: 0e:bb:fb:48:13:7b:f3:b9:ea:b9:38:cc:6a:e4:fa:0f:e2:14: de:d9:65:89:bd:35:f6:df:cc:3e:b3:a2:14:e7:55:11:11:eb: 19:e2:3b:2d:04:5c:a3:15:e5:e6:ac:f7:59:30:da:ab:da:ab: e3:5e:1d:14:4e:12:88:64:8b:19:e8:c0:bf:fc:38:66:72:a9: 71:bc:cf:2c:83:16:6d:dc:e6:62:ea:50:fb:d3:fb:91:85:fb: e8:76:e7:5a:ba:19:c5:54:b2:d3:70:14:fe:e6:0f:70:b5:c6: b5:8a:36:fb:5b:65:8d:a7:8c:d5:9a:a4:2d:88:4c:ec:26:8f: 60:33:de:44:b5:78:a0:a7:78:ae:d2:5b:20:fc:80:5e:9d:fa: 09:5d:90:64:41:d7:93:85:a1:74:c8:65:af:0b:1d:d4:50:73: ef:37:f7:97:65:64:a9:18:df:aa:3e:be:60:5e:49:c2:2b:c8: 7e:dc:49:87 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8bE7xe/0Eqz6mmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NTQ5OWE5NWMtYjBjNS00Mjg0LWFlNzQtMmRjOWY2MWZiMDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCbQuKMdUzOfBWnDQUASRQP8asNPSHUoA69J lhnct5xq4VHbPahAIR9Zjdf4Drjl3w/WqCg+qcUv0w6A3obAnEcI6d+z8YscZ1L6 Fm7RJrMnQUebLhCXAGyIBg1mbI+BfPtXtZi/PNpmmWf64lu03ee2m+BRskhTCEl0 6hlUAa9jQMElIyzgZLgekEaZog00lCPYhspvTNN2e624IdD1uSYlAWu1Pyf9NReP tLB3rg8zPK0sUcaGClI0S96uTZtrnoqZsL37J3lr0vMygSRwdJJIyNgrIBx8+B0x JUjX9thQxzctKw9p0jFJO+QyjktNdO+zEa5YlcopSMobOmcZgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPKZTFFgUI4R0DdPsEW+g2dc5/lrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q1ZDUyMjUtNjAyZS0z NjZhLWFiMDQtODg1NmZiOWFlNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALzbrhLBFL4D/L0I0KSYimbRM1cnoUO3X++zw/Xqc3MK2nSJMCm2ho Rg8dXP5ghtyY0G7qwKS/pl0BtFekAY+i4wBaEbj5mgIOu/tIE3vzueq5OMxq5PoP 4hTe2WWJvTX238w+s6IU51UREesZ4jstBFyjFeXmrPdZMNqr2qvjXh0UThKIZIsZ 6MC//DhmcqlxvM8sgxZt3OZi6lD70/uRhfvodudauhnFVLLTcBT+5g9wtca1ijb7 W2WNp4zVmqQtiEzsJo9gM95EtXigp3iu0lsg/IBenfoJXZBkQdeThaF0yGWvCx3U UHPvN/eXZWSpGN+qPr5gXknCK8h+3EmH -----END CERTIFICATE-----Generated at Mon Oct 20 03:47:23 2025 by rpki-client