$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cea23394-c805-3b3a-bf18-d17bf3f5f37d.roa File: cea23394-c805-3b3a-bf18-d17bf3f5f37d.roa (raw, json) Hash identifier: 4WTYzm1984cP0gp68B/lt9Kmo9zP/jHJTOV0hq0dmZE= Subject key identifier: 31:11:1E:83:91:E2:F8:3B:6C:C0:38:A2:10:B6:52:8D:6D:80:B0:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74AF043A5FC89CE4BE810 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cea23394-c805-3b3a-bf18-d17bf3f5f37d.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396563 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:4a:f0:43:a5:fc:89:ce:4b:e8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=89c08196-0c93-48fb-80d9-51d87b40cec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:65:de:53:1e:3c:fc:66:b9:43:58:dd:24:02: 30:aa:42:a3:08:cf:e6:f4:dd:77:08:c8:29:ce:f9: 39:c0:70:f5:a8:a0:c2:80:27:c3:4e:1c:2d:2f:5f: 56:e1:62:c8:88:16:6c:c3:45:0b:3b:53:74:0c:47: 30:5e:cd:8c:ba:77:ac:84:31:d0:b6:fe:d1:2b:96: 08:a9:41:25:82:d2:93:9c:67:67:ea:b2:3d:7c:72: d2:51:f2:c8:b9:a5:ba:90:af:62:5e:1a:f2:9b:7e: 09:a2:a4:54:8a:00:68:62:44:62:43:12:70:54:cb: a1:7d:c9:1b:7e:04:5f:95:21:5e:67:19:63:ab:cc: b1:01:4f:31:f8:0c:71:71:4f:53:27:ae:cd:7b:77: 78:da:49:d1:d7:64:57:03:61:da:f4:ca:df:dc:23: 4b:1f:22:d8:1f:ff:dc:52:f0:07:db:b3:d5:9e:e3: 41:78:a7:6d:13:87:94:dc:b4:0c:a5:9a:51:a5:5e: 4c:f8:b8:38:4d:86:8a:a4:f1:97:d7:db:95:53:fb: e7:52:94:b9:d0:b5:26:0c:80:7f:83:6e:1b:16:be: 93:24:27:a2:b7:27:0a:bb:28:4c:d8:4d:87:fb:49: 26:bb:fb:34:1f:35:c0:d3:d9:ec:92:ec:c3:4e:52: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:11:1E:83:91:E2:F8:3B:6C:C0:38:A2:10:B6:52:8D:6D:80:B0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cea23394-c805-3b3a-bf18-d17bf3f5f37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d9:0d:b7:39:94:2e:58:c3:2b:7d:dc:6b:63:2d:5b:ac:74: ae:52:cc:b1:cb:96:da:bd:d7:81:5b:28:d4:b6:d2:b6:de:d6: 4d:09:4d:e3:f8:07:ab:47:8a:1e:b9:ac:47:88:30:a5:13:00: 7b:18:3d:f7:a4:c1:cb:35:e5:da:9a:54:d0:26:55:2a:57:2a: 2a:57:e2:bf:bc:ba:14:42:da:b2:2e:cb:06:a1:5d:43:43:42: dd:7d:5b:20:bb:1f:31:e3:af:42:13:ca:d0:7d:a6:17:d1:99: af:92:fd:17:56:d4:0c:cf:dd:6b:f3:b8:77:fc:1b:2a:ff:56: 69:38:8d:ff:c1:49:49:76:3e:ea:9a:57:ef:9c:c1:35:ec:7c: 11:ce:3f:1d:cb:a6:05:58:6b:7c:bc:a0:16:d3:47:ae:4e:82: 70:d1:8d:b2:58:9b:ea:0e:a5:fe:2e:99:4e:b2:f1:58:3b:aa: c8:5e:ea:b1:40:63:a8:89:66:47:9b:c6:31:a3:c1:09:5e:eb: d3:2b:e2:fd:27:b1:dd:4c:5e:38:4f:e3:13:de:a1:8f:f4:79: bf:d7:80:22:2e:00:67:b5:3d:2d:79:63:96:6e:b5:68:74:8a: 99:b6:87:d3:84:50:68:ec:ae:7e:2f:29:92:84:22:ce:7f:ed: b5:26:1d:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90rwQ6X8ic5L6BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk ODljMDgxOTYtMGM5My00OGZiLTgwZDktNTFkODdiNDBjZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWXeUx48/Ga5Q1jdJAIwqkKjCM/m9N13CMgp zvk5wHD1qKDCgCfDThwtL19W4WLIiBZsw0ULO1N0DEcwXs2MuneshDHQtv7RK5YI qUElgtKTnGdn6rI9fHLSUfLIuaW6kK9iXhrym34JoqRUigBoYkRiQxJwVMuhfckb fgRflSFeZxljq8yxAU8x+AxxcU9TJ67Ne3d42knR12RXA2Ha9Mrf3CNLHyLYH//c UvAH27PVnuNBeKdtE4eU3LQMpZpRpV5M+Lg4TYaKpPGX19uVU/vnUpS50LUmDIB/ g24bFr6TJCeitycKuyhM2E2H+0kmu/s0HzXA09nskuzDTlLTkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDERHoOR4vg7bMA4ohC2Uo1tgLB3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2VhMjMzOTQtYzgwNS0z YjNhLWJmMTgtZDE3YmYzZjVmMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPZDbc5lC5Ywyt93GtjLVusdK5SzLHLltq914FbKNS20rbe1k0JTeP4 B6tHih65rEeIMKUTAHsYPfekwcs15dqaVNAmVSpXKipX4r+8uhRC2rIuywahXUND Qt19WyC7HzHjr0ITytB9phfRma+S/RdW1AzP3WvzuHf8Gyr/Vmk4jf/BSUl2Puqa V++cwTXsfBHOPx3LpgVYa3y8oBbTR65OgnDRjbJYm+oOpf4umU6y8Vg7qshe6rFA Y6iJZkebxjGjwQle69Mr4v0nsd1MXjhP4xPeoY/0eb/XgCIuAGe1PS15Y5ZutWh0 ipm2h9OEUGjsrn4vKZKEIs5/7bUmHWM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:33:00 2025 by rpki-client