$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa File: d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa (raw, json) Hash identifier: JQ5qfnfJii6w7AB95UqSsbygTnpqc7f+5LuwEN0DGqw= Subject key identifier: 56:F5:F6:03:D0:50:C8:12:17:D1:C4:31:1B:00:09:9E:F5:F9:C0:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF742A0867EEFBE6601DC60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 211369 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:42:a0:86:7e:ef:be:66:01:dc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=aab5241f-a0c0-4bb8-ac82-9f50df4a6aa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:ab:a2:b0:7d:82:7c:28:23:ee:19:a7:4c: 34:a6:58:5f:1d:4f:b8:35:5b:a7:e2:55:23:88:14: 04:40:25:c2:a4:12:ed:31:82:3b:39:99:ca:6f:d4: 0c:5b:80:26:5d:29:e5:dd:a4:f0:43:4d:dc:e7:ff: b3:27:c3:4a:31:9f:39:98:df:35:2e:60:8a:86:47: 2d:0e:72:b2:92:c8:84:51:50:c2:69:e9:bc:7e:1d: 76:db:5e:3e:70:9b:32:86:ad:97:93:ae:ab:cb:ec: aa:fd:54:1e:82:11:1a:f8:a5:b8:ff:22:f4:70:c9: d5:2f:73:85:8a:45:4a:75:5b:8d:37:7d:48:0b:42: 4f:57:31:e5:66:e6:94:56:41:a0:88:b5:f0:8f:33: 58:63:54:c7:3c:51:92:c2:e0:a5:f4:74:42:d3:30: f3:9e:2b:7b:a4:ea:7f:f0:fd:b2:26:e2:97:59:80: 27:fb:53:da:8d:f9:5d:7a:c5:a2:65:bb:60:bc:c5: 50:47:bf:fd:96:a5:33:6f:86:c4:40:85:99:1e:61: f7:8c:48:a1:f2:cc:2a:96:6d:50:c0:ba:3c:4f:6a: f4:b0:96:39:5d:65:ad:85:e8:aa:3e:20:29:90:ce: 0b:e0:72:9a:aa:d9:f1:76:fc:fa:73:18:cc:13:12: 1e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F5:F6:03:D0:50:C8:12:17:D1:C4:31:1B:00:09:9E:F5:F9:C0:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:95:76:69:c2:92:70:f0:b4:f1:0a:90:66:4a:d6:7e:22:6d: 87:be:44:04:9f:4b:41:79:ff:bc:03:29:80:9d:b4:14:f9:bb: 10:87:d3:53:c7:fd:e9:88:42:e2:18:3c:1e:de:29:51:47:3d: 34:c0:1a:fa:90:d5:05:ec:d0:2b:ad:14:21:0c:be:e9:72:d4: 0f:e6:2a:e5:50:9f:79:ed:93:f9:8e:d8:db:8d:e2:b3:34:4b: 6c:5f:76:00:6e:aa:33:83:60:92:1a:39:f7:4f:4e:d7:d9:b1: 7c:8c:eb:0e:a4:81:74:41:59:4b:79:b9:e1:f4:31:63:85:d5: a8:f2:39:7b:a2:c9:44:24:48:65:53:e3:23:b0:0f:9b:ee:69: 03:54:b9:d0:de:3d:50:7b:de:cd:bf:f2:2c:f7:46:c1:39:24: a7:07:76:da:32:8a:1d:15:6c:ac:73:d3:cf:1e:ee:13:f0:d7: 63:e9:30:96:b9:c6:65:a0:a8:9a:d8:7b:56:06:11:46:a9:39: 9d:9f:12:81:9e:c7:ee:c4:22:28:44:ea:0b:25:07:2e:e2:bb: 10:bd:78:8a:29:2a:11:8b:29:90:80:be:6e:5f:78:59:89:91: f2:65:50:ba:9e:51:74:06:05:42:45:6e:7b:38:9c:90:5f:15: b3:e7:1f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90Kghn7vvmYB3GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk YWFiNTI0MWYtYTBjMC00YmI4LWFjODItOWY1MGRmNGE2YWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmryrorB9gnwoI+4Zp0w0plhfHU+4NVun4lUj iBQEQCXCpBLtMYI7OZnKb9QMW4AmXSnl3aTwQ03c5/+zJ8NKMZ85mN81LmCKhkct DnKyksiEUVDCaem8fh12214+cJsyhq2Xk66ry+yq/VQeghEa+KW4/yL0cMnVL3OF ikVKdVuNN31IC0JPVzHlZuaUVkGgiLXwjzNYY1THPFGSwuCl9HRC0zDznit7pOp/ 8P2yJuKXWYAn+1PajfldesWiZbtgvMVQR7/9lqUzb4bEQIWZHmH3jEih8swqlm1Q wLo8T2r0sJY5XWWtheiqPiApkM4L4HKaqtnxdvz6cxjMExIeHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFb19gPQUMgSF9HEMRsACZ71+cB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDlmYzFkOGItMzA0ZC0z NDU3LWEwNWEtM2UzNmY2YTc0YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImVdmnCknDwtPEKkGZK1n4ibYe+RASfS0F5/7wDKYCdtBT5uxCH01PH /emIQuIYPB7eKVFHPTTAGvqQ1QXs0CutFCEMvuly1A/mKuVQn3ntk/mO2NuN4rM0 S2xfdgBuqjODYJIaOfdPTtfZsXyM6w6kgXRBWUt5ueH0MWOF1ajyOXuiyUQkSGVT 4yOwD5vuaQNUudDePVB73s2/8iz3RsE5JKcHdtoyih0VbKxz088e7hPw12PpMJa5 xmWgqJrYe1YGEUapOZ2fEoGex+7EIihE6gslBy7iuxC9eIopKhGLKZCAvm5feFmJ kfJlULqeUXQGBUJFbns4nJBfFbPnH/s= -----END CERTIFICATE-----Generated at Mon Oct 20 06:25:47 2025 by rpki-client