$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5345345-1f1d-31bf-ac2f-34e26af34e00.roa File: e5345345-1f1d-31bf-ac2f-34e26af34e00.roa (raw, json) Hash identifier: BDmM0Lg1EYOxxg9TdyaQpNzafH0FI5H+K0cn8KI+knk= Subject key identifier: BB:40:5D:DC:03:C8:25:BE:C7:47:CA:B4:26:A6:61:5B:95:38:FD:DE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C87C0D8396DCEA90F3680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5345345-1f1d-31bf-ac2f-34e26af34e00.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 36631 IP address blocks: 192.68.126.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:87:c0:d8:39:6d:ce:a9:0f:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=999bb8aa-db6f-43f0-a895-86a451daf170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:32:07:23:18:ce:ed:8f:62:18:0f:89:28:3f: 62:c6:37:bf:f9:82:ce:4d:e3:6b:79:e2:9e:cc:4e: 05:f1:bb:9d:97:d0:ae:05:bf:fe:56:b9:05:a6:9d: b7:7c:37:7d:7e:16:18:73:92:b5:fb:92:4d:6c:b7: e1:4e:8b:41:d0:e7:ff:65:3a:3c:10:1d:fc:6c:fc: 9d:51:17:d0:45:65:f2:d7:73:d2:29:f9:58:40:5d: 05:d7:98:fa:89:ae:8c:ed:ce:18:03:63:5e:65:97: 65:50:68:e6:95:5c:c0:9e:61:31:c5:34:63:8f:a1: f9:6c:7a:6c:e6:12:15:78:68:b0:76:74:5a:8a:37: f8:c5:6c:fd:bd:ba:16:c0:a8:60:6e:52:bb:c1:86: 00:b0:be:29:8d:8a:5f:aa:6a:4b:6d:d9:79:1a:7f: d8:a7:b2:a1:81:16:c2:2d:33:23:47:e9:e0:bf:7a: 23:e8:b2:59:03:ed:f6:68:17:7f:e6:a5:8c:70:0a: 2f:0d:55:ef:6d:eb:03:a7:4c:88:95:61:95:81:d0: eb:f6:11:66:6b:f7:36:f1:cf:a9:a9:c9:b3:d8:92: 9e:76:45:b6:11:ee:46:2c:38:6b:9b:ec:e6:d6:7c: c4:5c:d6:76:b5:17:5c:f0:04:41:fe:e8:dc:83:ac: 89:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:5D:DC:03:C8:25:BE:C7:47:CA:B4:26:A6:61:5B:95:38:FD:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e5345345-1f1d-31bf-ac2f-34e26af34e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7b:86:2b:63:4a:b1:ec:31:05:16:76:f7:82:6b:8f:00:6f: 55:19:7f:5e:e3:cd:4a:12:da:13:1d:61:6f:fc:dc:f9:c1:49: c2:17:0b:1a:8b:e8:e0:b4:1f:4f:cd:db:d0:ca:7f:5d:89:ac: 4d:dd:61:c8:fe:fa:be:6b:00:b4:54:49:bb:37:16:56:38:8b: 2b:b2:89:1f:cc:38:7f:63:65:8d:6e:54:13:3d:e9:50:99:35: ed:8e:13:c4:fa:ca:2a:53:2a:ea:1a:e9:4a:04:f5:55:20:d1: 24:ae:4e:24:df:65:02:25:ea:6d:39:1a:a4:73:e9:b0:b4:e5: 66:d4:64:6f:13:37:50:63:d7:73:21:91:ad:28:5e:70:81:df: 48:a4:02:eb:f1:5a:c0:ba:81:5b:30:ba:42:38:a5:58:18:4d: 60:70:f3:98:81:18:f7:8b:7b:ec:cd:38:e4:ff:ab:ff:b5:ad: 74:f9:9f:90:1d:11:4b:a5:a1:05:42:54:99:86:70:96:fa:77: 61:b5:d2:95:20:89:ed:1e:f8:fb:04:7c:73:13:ad:38:21:50: 18:d9:75:25:88:ac:ca:6e:d4:ce:7a:3d:37:1b:dd:4f:22:da: c7:35:50:a5:99:a6:62:21:47:21:8a:59:cb:00:ae:9d:2f:3c: af:bf:9e:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIfA2DltzqkPNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk OTk5YmI4YWEtZGI2Zi00M2YwLWE4OTUtODZhNDUxZGFmMTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzIHIxjO7Y9iGA+JKD9ixje/+YLOTeNreeKe zE4F8budl9CuBb/+VrkFpp23fDd9fhYYc5K1+5JNbLfhTotB0Of/ZTo8EB38bPyd URfQRWXy13PSKflYQF0F15j6ia6M7c4YA2NeZZdlUGjmlVzAnmExxTRjj6H5bHps 5hIVeGiwdnRaijf4xWz9vboWwKhgblK7wYYAsL4pjYpfqmpLbdl5Gn/Yp7KhgRbC LTMjR+ngv3oj6LJZA+32aBd/5qWMcAovDVXvbesDp0yIlWGVgdDr9hFma/c28c+p qcmz2JKedkW2Ee5GLDhrm+zm1nzEXNZ2tRdc8ARB/ujcg6yJfwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLtAXdwDyCW+x0fKtCamYVuVOP3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTUzNDUzNDUtMWYxZC0z MWJmLWFjMmYtMzRlMjZhZjM0ZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAoe4YrY0qx7DEFFnb3gmuPAG9VGX9e481KEtoTHWFv/Nz5wUnCFwsa i+jgtB9PzdvQyn9diaxN3WHI/vq+awC0VEm7NxZWOIsrsokfzDh/Y2WNblQTPelQ mTXtjhPE+soqUyrqGulKBPVVINEkrk4k32UCJeptORqkc+mwtOVm1GRvEzdQY9dz IZGtKF5wgd9IpALr8VrAuoFbMLpCOKVYGE1gcPOYgRj3i3vszTjk/6v/ta10+Z+Q HRFLpaEFQlSZhnCW+ndhtdKVIIntHvj7BHxzE604IVAY2XUliKzKbtTOej03G91P ItrHNVClmaZiIUchilnLAK6dLzyvv54T -----END CERTIFICATE-----Generated at Mon Oct 20 08:04:19 2025 by rpki-client