$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa File: e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa (raw, json) Hash identifier: OWxXpg9/Md1DzBWvzLdtJ8Me0HsP5Ox7eRNlqNyNSGc= Subject key identifier: CF:1F:9C:CB:DC:4A:23:AB:CA:0A:50:5E:5E:7D:89:DD:44:94:F9:2E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C8554527E38A53DC8E4A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 397204 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:85:54:52:7e:38:a5:3d:c8:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=2d0f400d-fb7f-47e8-bf26-9b547df74cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:19:42:89:bf:98:af:cb:21:c3:cf:4a:96: 36:96:7b:27:2d:c8:81:3d:26:8e:4c:99:3a:f9:30: 7b:3a:e0:a4:48:14:cf:eb:4d:4c:84:03:f3:a3:c0: 7c:51:60:35:ee:51:57:0f:f5:be:a8:22:b9:1d:e9: c0:aa:88:fd:b4:0e:c5:0b:5a:ce:4c:0f:e4:a8:d1: 62:60:b3:9b:da:08:e1:7a:f6:98:4d:f4:b9:2e:00: ee:06:6c:93:1e:8c:67:d0:17:69:9d:79:60:fc:ed: 14:f1:2b:2c:3a:73:be:88:32:4f:e1:56:d0:a6:a8: 18:b6:ba:90:ca:fb:ca:03:60:42:0a:5d:c0:ff:5c: 28:e3:be:e5:6a:fd:cd:a4:6d:2b:bb:28:09:a1:f7: 02:f8:12:85:b2:25:26:64:4f:84:3f:6f:a3:57:db: 4b:74:34:56:76:5d:a5:04:0e:a7:73:08:3b:6e:e6: 91:f5:c5:76:39:2d:49:69:f7:06:36:f5:2b:b6:a4: 7d:d4:b3:5b:2b:56:72:bd:3e:8b:15:0e:14:6c:ef: 4c:a3:93:b6:fd:99:dd:10:c0:52:09:61:96:69:9f: e4:fb:0e:2b:da:d1:02:bc:9e:48:9c:69:86:45:d8: 87:79:bc:8f:72:aa:16:43:8b:29:45:b3:08:e4:c6: 93:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1F:9C:CB:DC:4A:23:AB:CA:0A:50:5E:5E:7D:89:DD:44:94:F9:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e75a5d43-ae1f-34d1-a13b-54d389f55b5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1c:51:ec:89:cf:31:26:80:ef:a6:a5:ce:de:ef:4c:2b:5d: 26:a0:83:36:8b:24:01:54:a2:10:02:18:80:0f:2d:73:73:e6: 10:8b:1d:c8:9b:8b:f6:1a:27:9f:7b:fe:ad:c0:53:dd:82:36: 65:7f:7b:47:83:73:07:ee:89:96:06:a9:82:ec:4d:a7:54:56: a3:d0:de:a6:69:e2:26:65:74:6c:b8:78:76:10:cb:3e:76:e0: 3f:f2:39:98:29:4a:1c:57:84:8d:33:67:e3:80:68:dd:61:75: 2a:29:31:0d:02:1a:4f:00:ef:d5:90:a5:41:cc:95:3b:3c:06: 11:f0:61:e9:b5:62:a3:68:84:52:a6:38:f8:2f:bb:d3:b6:78: db:21:3c:20:a2:ef:42:21:38:c3:73:f9:12:b7:c8:31:f4:92: b0:be:2a:37:5f:48:0b:a3:3c:b5:d3:99:a9:47:88:3c:e3:f9: 5e:57:3f:94:be:81:e2:fa:be:32:22:b9:37:f0:64:14:7c:fd: 87:14:a2:df:23:2d:48:cf:ad:1a:d0:89:ba:60:74:e9:59:85: e8:b1:c0:bd:d6:6e:81:6f:a4:6b:84:4c:84:37:19:7d:87:b7: c8:b4:64:9d:a8:83:d2:cc:b6:4f:6e:4c:46:0a:b0:97:3b:d9: 4a:73:e3:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIVUUn44pT3I5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk MmQwZjQwMGQtZmI3Zi00N2U4LWJmMjYtOWI1NDdkZjc0Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi20ZQom/mK/LIcPPSpY2lnsnLciBPSaOTJk6 +TB7OuCkSBTP601MhAPzo8B8UWA17lFXD/W+qCK5HenAqoj9tA7FC1rOTA/kqNFi YLOb2gjhevaYTfS5LgDuBmyTHoxn0BdpnXlg/O0U8SssOnO+iDJP4VbQpqgYtrqQ yvvKA2BCCl3A/1wo477lav3NpG0ruygJofcC+BKFsiUmZE+EP2+jV9tLdDRWdl2l BA6ncwg7buaR9cV2OS1JafcGNvUrtqR91LNbK1ZyvT6LFQ4UbO9Mo5O2/ZndEMBS CWGWaZ/k+w4r2tECvJ5InGmGRdiHebyPcqoWQ4spRbMI5MaTzQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFM8fnMvcSiOrygpQXl59id1ElPkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTc1YTVkNDMtYWUxZi0z NGQxLWExM2ItNTRkMzg5ZjU1YjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA7HFHsic8xJoDvpqXO3u9MK10moIM2iyQBVKIQAhiADy1zc+YQix3I m4v2Giefe/6twFPdgjZlf3tHg3MH7omWBqmC7E2nVFaj0N6maeImZXRsuHh2EMs+ duA/8jmYKUocV4SNM2fjgGjdYXUqKTENAhpPAO/VkKVBzJU7PAYR8GHptWKjaIRS pjj4L7vTtnjbITwgou9CITjDc/kSt8gx9JKwvio3X0gLozy105mpR4g84/leVz+U voHi+r4yIrk38GQUfP2HFKLfIy1Iz60a0Im6YHTpWYXoscC91m6Bb6RrhEyENxl9 h7fItGSdqIPSzLZPbkxGCrCXO9lKc+Or -----END CERTIFICATE-----Generated at Mon Oct 20 09:21:54 2025 by rpki-client