$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d487a749-bfab-3505-85b2-02bc7577c11a.roa File: d487a749-bfab-3505-85b2-02bc7577c11a.roa (raw, json) Hash identifier: CXVUPaAk/vY0KfEs3891BzJf6jJpPgHtrSiA+W06r4U= Subject key identifier: 30:75:EC:8C:D1:93:AE:95:8C:48:24:E6:30:EF:6C:7F:27:93:0A:16 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8F2D711E26800F66E000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d487a749-bfab-3505-85b2-02bc7577c11a.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396615 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8f:2d:71:1e:26:80:0f:66:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=d6dc7926-322a-4aff-80cb-f10666b29a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:b0:5a:d3:99:a9:87:9a:16:05:31:17:ae: 9c:14:eb:4d:97:b7:78:ef:75:2c:42:6a:cc:3b:22: 6d:22:34:1e:2a:48:af:64:9f:e7:68:e9:3a:6c:da: 41:58:14:d7:79:27:ce:00:d3:52:14:33:27:1e:1c: d3:69:6f:6f:f0:b2:90:c2:e9:68:ad:f7:36:1a:91: 66:ca:d7:d0:15:86:08:74:e1:71:7f:7c:84:0d:cc: a5:ab:96:00:21:3b:a2:7d:42:7b:e9:51:ed:9e:b9: 56:f1:f3:63:56:93:32:aa:ac:dc:5a:b2:f9:e1:16: 03:ae:5d:b0:3e:26:6f:b6:b0:b6:05:5e:c0:aa:ee: 95:c1:15:e2:29:75:08:19:e7:63:15:0c:b1:e2:b7: 95:5e:c6:84:93:8c:be:d8:17:08:09:91:16:84:e3: 56:22:e1:8b:2a:e8:3b:32:90:82:cd:f7:d8:23:bb: 8d:74:81:52:1e:03:56:60:56:da:0f:d5:8a:be:4d: ff:a9:15:28:51:a3:0d:f1:c0:90:a8:c5:f3:4d:57: 06:3a:4b:0a:c4:85:b4:57:51:6c:35:34:db:f3:e7: 4c:be:85:18:0e:c2:19:2c:b6:85:23:77:94:51:31: d5:75:e2:aa:9c:f4:08:1d:ae:0f:99:0d:b1:42:a2: 94:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:75:EC:8C:D1:93:AE:95:8C:48:24:E6:30:EF:6C:7F:27:93:0A:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d487a749-bfab-3505-85b2-02bc7577c11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:17:2c:25:a3:9b:3c:d0:f0:bc:cb:e0:52:7f:46:e9:e2:22: 2c:a8:d3:01:c3:22:da:0e:4a:56:d1:aa:65:bd:59:91:2a:98: 37:ff:23:ba:40:8b:13:65:ec:a9:74:34:3b:e5:a3:36:81:c3: f2:68:bf:10:0e:07:17:18:95:9c:68:86:ef:fb:28:ca:cf:32: eb:94:36:c5:95:aa:5e:6d:f5:4c:8b:75:b3:b2:5b:ee:58:59: 25:d1:6e:27:63:79:1b:56:56:34:9c:d3:93:b7:61:a8:f7:fb: 57:ba:2b:00:8a:2d:3f:11:a6:bd:25:f9:58:a6:04:f6:7d:94: dc:18:c9:fd:52:28:41:59:3b:ec:79:e5:07:a7:14:45:a8:4a: 13:c8:d1:64:33:24:9e:e1:78:fa:b9:69:ec:90:54:18:35:5f: 5a:af:61:bc:d5:8f:59:84:c3:63:ba:62:b0:0d:72:9d:fa:f2: ed:4f:33:6a:9c:77:c8:53:eb:de:d9:7f:8a:9c:d1:43:ec:65: 74:af:8e:7d:35:bc:52:3f:a1:11:e0:06:06:d6:ac:b4:f2:58: e7:28:bc:61:28:f0:95:31:09:5c:37:1b:9f:2d:09:4c:3e:81: 90:e8:cf:26:6c:cf:0f:69:c0:c8:e0:7b:38:89:04:2c:a9:18: b2:a4:7f:cc -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI8tcR4mgA9m4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk ZDZkYzc5MjYtMzIyYS00YWZmLTgwY2ItZjEwNjY2YjI5YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC+wWtOZqYeaFgUxF66cFOtNl7d473UsQmrM OyJtIjQeKkivZJ/naOk6bNpBWBTXeSfOANNSFDMnHhzTaW9v8LKQwulorfc2GpFm ytfQFYYIdOFxf3yEDcylq5YAITuifUJ76VHtnrlW8fNjVpMyqqzcWrL54RYDrl2w PiZvtrC2BV7Aqu6VwRXiKXUIGedjFQyx4reVXsaEk4y+2BcICZEWhONWIuGLKug7 MpCCzffYI7uNdIFSHgNWYFbaD9WKvk3/qRUoUaMN8cCQqMXzTVcGOksKxIW0V1Fs NTTb8+dMvoUYDsIZLLaFI3eUUTHVdeKqnPQIHa4PmQ2xQqKUPQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDB17IzRk66VjEgk5jDvbH8nkwoWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDQ4N2E3NDktYmZhYi0z NTA1LTg1YjItMDJiYzc1NzdjMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBtFywlo5s80PC8y+BSf0bp4iIsqNMBwyLaDkpW0aplvVmRKpg3/yO6 QIsTZeypdDQ75aM2gcPyaL8QDgcXGJWcaIbv+yjKzzLrlDbFlapebfVMi3Wzslvu WFkl0W4nY3kbVlY0nNOTt2Go9/tXuisAii0/Eaa9JflYpgT2fZTcGMn9UihBWTvs eeUHpxRFqEoTyNFkMySe4Xj6uWnskFQYNV9ar2G81Y9ZhMNjumKwDXKd+vLtTzNq nHfIU+ve2X+KnNFD7GV0r459NbxSP6ER4AYG1qy08ljnKLxhKPCVMQlcNxufLQlM PoGQ6M8mbM8PacDI4Hs4iQQsqRiypH/M -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:16 2025 by rpki-client