$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa File: cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa (raw, json) Hash identifier: jEtLtcLH8aUOL84u6gNx1vGP2vQm95wZ3kCBClXnyjc= Subject key identifier: 00:92:E1:53:7B:F3:37:C8:93:89:EB:7D:65:D7:92:A6:15:9D:50:7E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8A22B2C040F90F8D2480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20362 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8a:22:b2:c0:40:f9:0f:8d:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=220ed177-a35f-452f-814c-5750d07e6324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:4a:81:f3:e3:a6:7c:0a:0c:35:8a:08:f4: 43:3f:63:7e:1c:38:b9:d1:98:36:99:e8:29:c5:47: 2b:5a:10:d6:4e:c7:b8:78:5c:f8:a9:67:c9:cd:88: e0:7e:3e:eb:85:ef:7a:d5:98:34:63:35:9d:f9:fd: 82:ce:8e:27:e3:ca:c9:c0:10:fd:9a:ef:17:34:09: f2:43:94:c7:9f:fa:d8:d5:b1:21:59:88:7d:ac:f0: 26:0f:cc:dd:e4:93:f2:86:8b:b1:ac:2b:cf:b8:3c: b5:5b:7f:63:52:30:c2:59:fd:9d:89:8a:30:66:d7: ce:63:4c:89:d4:c7:7b:5b:25:b9:bb:47:7d:3b:8d: ed:59:27:19:c2:89:af:b7:c0:d9:01:88:f5:d0:f7: f7:1b:6a:e4:06:ea:8f:42:bb:ef:1f:1e:46:bf:43: b5:60:89:4a:f5:c1:6b:cd:bf:39:da:2c:2e:b3:24: 3b:0e:f9:b8:a2:e6:25:66:63:1f:fb:73:c8:58:a1: e6:c2:fe:71:18:2d:1a:e1:ca:e0:1f:f2:d0:23:42: b9:f0:8f:7f:29:11:b5:89:c8:27:81:34:d3:f5:12: b1:15:b3:86:33:e4:6f:e9:26:5b:06:c5:1e:1a:7f: 26:76:55:7b:ae:e1:e3:d9:59:38:52:01:6a:41:7d: ad:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:92:E1:53:7B:F3:37:C8:93:89:EB:7D:65:D7:92:A6:15:9D:50:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf390753-7ff5-3dc6-ae3b-4922903cf08e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:97:3b:29:de:8f:bc:78:1a:a9:fd:4d:0e:61:0c:25:02:b5: 53:5b:52:96:c8:bd:27:15:95:26:b2:a6:6b:41:ae:79:81:2c: 01:f8:30:41:1b:36:f1:95:e0:96:65:0c:84:e5:f2:2e:dc:aa: 17:d3:91:56:2e:f5:0a:eb:a3:da:95:01:ca:0a:8f:14:89:82: 66:f8:d7:0f:1a:db:fc:27:06:7d:db:66:c9:6a:6a:74:7e:3c: b1:8f:57:3e:f4:a7:a1:ab:cf:5f:a6:5a:07:c5:22:2c:3f:de: f4:ff:f0:0c:6e:e4:16:f0:bb:f5:3f:c0:3f:e8:f8:e2:db:a4: ac:74:85:2d:63:d1:e4:63:f3:05:85:13:46:35:09:bf:20:7b: 1c:f9:09:e1:17:20:d4:24:8d:d0:67:7c:b3:72:25:c9:67:2c: 05:74:a0:22:4f:8f:b7:8a:d9:71:63:91:a1:e4:a1:7e:c1:f2: 2e:bb:93:6a:7d:3d:23:5a:93:d4:58:14:56:b4:3e:29:cc:58: 86:de:3e:55:b3:b5:60:b2:3d:83:a5:4d:9c:d2:a3:4e:dc:29: d8:c3:b1:2b:57:44:21:d6:64:99:e9:ed:f1:3c:d4:d7:20:80: 88:8c:76:f1:26:0e:1e:bc:ac:6a:db:6b:ca:e1:d3:d5:70:7e: 75:3f:df:2f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIoissBA+Q+NJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk MjIwZWQxNzctYTM1Zi00NTJmLTgxNGMtNTc1MGQwN2U2MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfNKgfPjpnwKDDWKCPRDP2N+HDi50Zg2megp xUcrWhDWTse4eFz4qWfJzYjgfj7rhe961Zg0YzWd+f2Czo4n48rJwBD9mu8XNAny Q5THn/rY1bEhWYh9rPAmD8zd5JPyhouxrCvPuDy1W39jUjDCWf2diYowZtfOY0yJ 1Md7WyW5u0d9O43tWScZwomvt8DZAYj10Pf3G2rkBuqPQrvvHx5Gv0O1YIlK9cFr zb852iwusyQ7Dvm4ouYlZmMf+3PIWKHmwv5xGC0a4crgH/LQI0K58I9/KRG1icgn gTTT9RKxFbOGM+Rv6SZbBsUeGn8mdlV7ruHj2Vk4UgFqQX2tcQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFACS4VN78zfIk4nrfWXXkqYVnVB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YzOTA3NTMtN2ZmNS0z ZGM2LWFlM2ItNDkyMjkwM2NmMDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCYlzsp3o+8eBqp/U0OYQwlArVTW1KWyL0nFZUmsqZrQa55gSwB+DBB GzbxleCWZQyE5fIu3KoX05FWLvUK66PalQHKCo8UiYJm+NcPGtv8JwZ922bJamp0 fjyxj1c+9Kehq89fploHxSIsP970//AMbuQW8Lv1P8A/6Pji26SsdIUtY9HkY/MF hRNGNQm/IHsc+QnhFyDUJI3QZ3yzciXJZywFdKAiT4+3itlxY5Gh5KF+wfIuu5Nq fT0jWpPUWBRWtD4pzFiG3j5Vs7Vgsj2DpU2c0qNO3CnYw7ErV0Qh1mSZ6e3xPNTX IICIjHbxJg4evKxq22vK4dPVcH51P98v -----END CERTIFICATE-----Generated at Mon Oct 20 15:43:13 2025 by rpki-client