$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7187e96-2f05-36e7-afc8-f00fb9e69686.roa File: d7187e96-2f05-36e7-afc8-f00fb9e69686.roa (raw, json) Hash identifier: crV4wXCHQi3RmPGm5ndHC8lQRx4bcOMEniIXlcdW6+M= Subject key identifier: E2:F8:D1:8F:88:1A:05:25:D2:7A:25:9B:B0:E1:A9:F4:07:57:E5:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74AB423C1977E011E6700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7187e96-2f05-36e7-afc8-f00fb9e69686.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396577 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:4a:b4:23:c1:97:7e:01:1e:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=016498e5-96d6-4602-9d6b-471bbbac1f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7e:6c:97:23:98:ab:f5:5e:36:03:00:85:dc: 6b:0a:dd:2f:39:f8:7e:62:9b:94:2d:cf:43:be:eb: 62:42:7d:05:ed:78:15:17:77:89:89:9a:9d:b6:98: 84:cf:9c:d2:b8:b5:84:db:17:85:98:37:e6:15:0c: a7:45:d3:53:cb:45:e0:aa:51:4f:35:43:98:1a:6e: 26:54:6f:3c:1a:bf:25:db:4d:75:60:cd:40:43:58: e9:f4:dd:b8:a9:eb:22:0f:fc:67:ea:fb:24:0b:1f: f2:46:84:15:b8:44:4f:e9:6e:36:97:41:86:8f:13: 4b:47:ef:61:f0:52:89:80:90:52:1a:34:19:5a:88: 4d:4a:f3:3c:41:fd:04:84:68:e8:32:b3:a0:ed:9e: 5c:7a:fa:23:f8:4e:66:77:e8:d3:28:94:eb:92:a7: ed:3b:35:25:db:41:f2:9a:bb:be:29:29:06:63:e9: d8:c2:67:cb:59:00:62:17:22:01:b5:75:58:47:e1: c4:70:96:ef:78:a9:ed:1d:78:ac:bb:5a:95:76:9a: 15:6c:78:a4:9b:be:e8:af:c2:5a:4d:c9:36:77:0a: 24:c6:c5:43:6f:50:ee:d8:f4:e7:81:31:fa:7d:45: 43:50:b8:c4:bd:a8:81:fc:f0:2f:a7:ef:8c:16:27: 73:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F8:D1:8F:88:1A:05:25:D2:7A:25:9B:B0:E1:A9:F4:07:57:E5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7187e96-2f05-36e7-afc8-f00fb9e69686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ed:5b:dd:02:a8:59:cd:c5:61:3a:ce:92:81:01:f5:21:6f: fb:90:e5:94:16:7d:57:83:5a:30:e0:04:28:ad:8c:81:ac:9e: 4e:ab:35:08:78:d5:71:be:6a:7a:9d:0d:eb:08:60:d8:bf:3a: 1b:db:8e:d6:fe:9c:34:a7:23:ef:51:65:b3:90:7b:2c:2a:39: 54:da:08:fc:6e:59:d0:9a:00:c5:19:fb:ac:07:21:b8:7a:1f: 66:2c:eb:6b:ac:1a:81:ad:fb:9a:b2:52:a0:b8:7a:08:37:12: aa:ec:3d:72:a8:22:eb:31:3d:a3:35:41:ac:9e:fa:31:62:e8: 37:2f:fa:59:3b:df:5b:7e:68:d2:49:78:80:cd:87:a2:ec:c7: e6:14:e2:d3:28:25:21:7f:b5:14:b2:77:78:e0:2a:ff:78:65: 54:b3:29:4c:fa:f0:48:23:eb:07:48:5d:15:f6:9d:75:74:ee: db:19:e6:78:88:00:00:6b:32:3d:4a:29:a3:16:3c:82:10:4a: e0:c5:ae:2f:f2:dc:66:fe:14:22:2c:c9:85:fc:78:3a:55:fb: c7:7f:fc:6b:b7:1b:c7:59:85:07:39:51:1d:33:ed:c5:37:59: a5:25:a2:ad:e6:97:49:83:35:00:50:2d:1c:3e:1a:c8:31:ca: 3c:9f:53:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90q0I8GXfgEeZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk MDE2NDk4ZTUtOTZkNi00NjAyLTlkNmItNDcxYmJiYWMxZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz35slyOYq/VeNgMAhdxrCt0vOfh+YpuULc9D vutiQn0F7XgVF3eJiZqdtpiEz5zSuLWE2xeFmDfmFQynRdNTy0XgqlFPNUOYGm4m VG88Gr8l2011YM1AQ1jp9N24qesiD/xn6vskCx/yRoQVuERP6W42l0GGjxNLR+9h 8FKJgJBSGjQZWohNSvM8Qf0EhGjoMrOg7Z5cevoj+E5md+jTKJTrkqftOzUl20Hy mru+KSkGY+nYwmfLWQBiFyIBtXVYR+HEcJbveKntHXisu1qVdpoVbHikm77or8Ja Tck2dwokxsVDb1Du2PTngTH6fUVDULjEvaiB/PAvp++MFidzSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOL40Y+IGgUl0nolm7DhqfQHV+WIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDcxODdlOTYtMmYwNS0z NmU3LWFmYzgtZjAwZmI5ZTY5Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAftW90CqFnNxWE6zpKBAfUhb/uQ5ZQWfVeDWjDgBCitjIGsnk6rNQh4 1XG+anqdDesIYNi/Ohvbjtb+nDSnI+9RZbOQeywqOVTaCPxuWdCaAMUZ+6wHIbh6 H2Ys62usGoGt+5qyUqC4egg3EqrsPXKoIusxPaM1Qaye+jFi6Dcv+lk731t+aNJJ eIDNh6Lsx+YU4tMoJSF/tRSyd3jgKv94ZVSzKUz68Egj6wdIXRX2nXV07tsZ5niI AABrMj1KKaMWPIIQSuDFri/y3Gb+FCIsyYX8eDpV+8d//Gu3G8dZhQc5UR0z7cU3 WaUloq3ml0mDNQBQLRw+GsgxyjyfU7U= -----END CERTIFICATE-----Generated at Mon Oct 20 06:37:16 2025 by rpki-client