$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1bd9bf-fdef-33dc-935c-82d8a80d3660.roa File: cf1bd9bf-fdef-33dc-935c-82d8a80d3660.roa (raw, json) Hash identifier: c+fNKfvazqU/9XqWZ2cdUsjhinf+gpsQNq/+3/G5ku0= Subject key identifier: DD:AE:AC:52:5E:63:9F:02:94:CA:E7:49:76:F3:BE:BA:C2:2A:04:1A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B33F1AFBEADF71A6261D0F320 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1bd9bf-fdef-33dc-935c-82d8a80d3660.roa Signing time: Mon 15 Sep 2025 13:00:40 +0000 ROA not before: Mon 15 Sep 2025 13:00:40 +0000 ROA not after: Sun 14 Dec 2025 14:00:40 +0000 asID: 21313 IP address blocks: 192.42.174.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:33:f1:af:be:ad:f7:1a:62:61:d0:f3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 15 13:00:40 2025 GMT Not After : Dec 14 14:00:40 2025 GMT Subject: CN=63ec6a9a-31e9-4efc-9a39-6c5d4f040e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:85:51:cb:0b:25:12:0d:b6:0e:0c:d7:fe:84: 3b:33:9c:be:5d:c6:d5:7f:23:bd:2d:f6:96:5f:57: 6b:79:2a:a3:de:c0:93:a9:69:2c:c8:de:69:72:29: 5f:87:a0:df:e3:0b:88:0d:82:a4:a1:e5:6c:a9:92: 49:95:d4:1f:2e:30:42:c2:4c:13:0b:22:9a:0d:aa: f1:50:d2:a8:14:3f:01:92:18:ab:eb:6a:0c:c8:23: 73:c6:d3:65:95:3b:07:87:9a:66:3e:80:da:db:ad: 17:6c:52:7e:75:ea:09:4a:55:08:df:88:28:41:95: 07:cf:96:d2:c3:5d:6e:17:6a:5b:25:98:65:77:4c: f1:58:df:a3:ec:67:ab:85:0d:79:40:f5:0a:e4:20: b9:ad:36:c5:f0:56:36:e3:d2:c0:1b:f5:16:f5:1c: 98:a4:bb:fc:bd:44:85:60:6b:f1:d8:96:04:07:51: 8e:4c:4b:0a:fb:c1:8b:82:38:09:5f:86:a0:e2:72: 51:08:9e:18:30:c5:f1:c7:fe:75:e2:a6:c4:52:ea: 2a:14:48:b1:54:bc:e9:de:16:0a:8a:00:09:b5:4f: 59:29:41:3f:d6:45:e3:82:79:24:bc:75:d6:b3:aa: 83:57:53:d6:e5:af:c2:be:15:e1:3c:5d:57:8f:69: fd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AE:AC:52:5E:63:9F:02:94:CA:E7:49:76:F3:BE:BA:C2:2A:04:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf1bd9bf-fdef-33dc-935c-82d8a80d3660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.174.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:63:6f:04:da:63:f6:71:29:e4:85:5a:bc:b5:dc:94:a1:c7: c8:ff:cf:70:2c:9a:e4:32:c2:b0:43:85:12:ae:a4:5a:02:9e: 30:a1:51:c5:23:8d:96:6d:be:55:e1:39:10:0c:d6:a9:81:5a: d1:1c:97:75:ae:f2:56:c2:f8:83:ce:14:31:e7:d5:24:ba:51: f0:80:58:a1:3a:06:2e:66:d4:36:7b:46:0b:93:d8:fb:eb:86: 69:e6:f1:a7:1d:c4:36:17:4e:26:5a:78:70:58:4e:7e:e6:4a: ee:ae:23:97:5a:31:19:99:87:9f:d8:37:67:0c:7a:1b:01:aa: 01:bc:fd:e8:56:4c:31:ab:2b:b9:c0:13:0e:28:6f:50:8a:b2: 9e:bf:58:e5:12:22:80:7b:83:51:a3:18:c3:28:f7:6b:33:f3: fd:b5:36:a8:a5:dc:3c:e5:4b:3f:a9:51:4f:06:b8:1e:b2:d1: 95:c0:47:24:11:25:52:87:b6:27:bc:a0:af:51:63:99:58:db: cd:8c:77:4e:36:36:f2:9f:ea:aa:5b:2b:d1:42:d4:35:65:e9: 58:12:b3:91:1a:d3:56:d6:08:50:2d:44:47:94:c6:74:00:d1: 43:35:d6:95:7d:92:95:71:bf:a9:09:b4:3d:6c:78:01:7b:d6: 70:e8:18:d7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsz8a++rfcaYmHQ8yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNTEzMDA0MFoXDTI1MTIxNDE0MDA0MFowLzEtMCsGA1UEAxMk NjNlYzZhOWEtMzFlOS00ZWZjLTlhMzktNmM1ZDRmMDQwZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIVRywslEg22DgzX/oQ7M5y+XcbVfyO9LfaW X1dreSqj3sCTqWksyN5pcilfh6Df4wuIDYKkoeVsqZJJldQfLjBCwkwTCyKaDarx UNKoFD8Bkhir62oMyCNzxtNllTsHh5pmPoDa260XbFJ+deoJSlUI34goQZUHz5bS w11uF2pbJZhld0zxWN+j7GerhQ15QPUK5CC5rTbF8FY249LAG/UW9RyYpLv8vUSF YGvx2JYEB1GOTEsK+8GLgjgJX4ag4nJRCJ4YMMXxx/514qbEUuoqFEixVLzp3hYK igAJtU9ZKUE/1kXjgnkkvHXWs6qDV1PW5a/CvhXhPF1Xj2n9XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFN2urFJeY58ClMrnSXbzvrrCKgQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YxYmQ5YmYtZmRlZi0z M2RjLTkzNWMtODJkOGE4MGQzNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCquHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCuY28E2mP2cSnkhVq8tdyUocfI/89wLJrkMsKwQ4USrqRaAp4woVHF I42Wbb5V4TkQDNapgVrRHJd1rvJWwviDzhQx59UkulHwgFihOgYuZtQ2e0YLk9j7 64Zp5vGnHcQ2F04mWnhwWE5+5kruriOXWjEZmYef2DdnDHobAaoBvP3oVkwxqyu5 wBMOKG9QirKev1jlEiKAe4NRoxjDKPdrM/P9tTaopdw85Us/qVFPBrgestGVwEck ESVSh7YnvKCvUWOZWNvNjHdONjbyn+qqWyvRQtQ1ZelYErORGtNW1ghQLURHlMZ0 ANFDNdaVfZKVcb+pCbQ9bHgBe9Zw6BjX -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:26 2025 by rpki-client