$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec93e271-6bf4-300f-a302-5d1f998e64db.roa File: ec93e271-6bf4-300f-a302-5d1f998e64db.roa (raw, json) Hash identifier: YYBjXpxx6rdXJr383/fpSAQEr0CXgYLURI0jHjhHCbE= Subject key identifier: B7:A5:9C:0C:59:FF:CA:C2:87:75:B6:09:1E:08:1B:51:5B:C1:EE:9F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF7439364C52E3CBC462E40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec93e271-6bf4-300f-a302-5d1f998e64db.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396574 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:43:93:64:c5:2e:3c:bc:46:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=5f3712f7-3f63-41af-87ec-4e7683840688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:32:55:68:6b:74:d6:ec:f5:0f:90:17:00: c8:b3:3d:47:21:97:a3:b7:6a:51:36:3c:30:5d:63: 56:19:95:ee:94:d2:01:86:56:50:25:53:a9:5b:61: 28:95:f1:29:05:98:99:77:65:4b:07:e3:1f:ff:f2: 9c:3e:2a:dc:0f:e7:98:82:e3:e8:4e:e4:dd:ca:90: 5a:81:80:11:8f:20:ea:f5:26:d2:4a:0e:42:cf:93: c2:bd:fc:ba:b5:d8:88:dd:26:db:88:29:f0:d5:b6: b6:a3:24:35:bc:eb:2d:62:13:d7:35:6e:97:44:8e: dc:db:fe:1a:63:be:22:a4:33:e2:68:dd:c6:3b:6c: 3b:bb:c7:7d:25:63:71:a2:d6:56:f1:76:2f:30:cf: b7:93:e0:e8:1f:60:27:67:f8:a9:6e:71:9b:ec:65: 28:4e:5a:bc:f5:89:6e:5b:a4:40:64:ee:c1:3a:77: ed:f0:c0:30:89:50:e9:2a:6a:e5:31:c2:54:a5:9f: be:91:c3:84:aa:93:c7:dc:06:97:e1:7e:d2:10:18: 3f:55:c1:b6:ab:d1:1c:bb:83:9c:32:0d:8c:80:84: 18:49:78:b3:01:be:f8:9b:2a:fe:80:05:df:5e:ae: fd:19:38:5a:72:8b:3e:a5:b9:bb:8e:cd:e9:fd:30: 12:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:9C:0C:59:FF:CA:C2:87:75:B6:09:1E:08:1B:51:5B:C1:EE:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec93e271-6bf4-300f-a302-5d1f998e64db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:c4:44:1b:d7:57:37:82:db:a7:e7:90:97:4b:ef:b1:d6:c9: 95:bc:5c:a5:eb:4d:72:3b:c4:46:ae:9a:62:06:10:67:32:83: f3:4a:2a:c7:42:4a:35:0c:23:1f:4d:fa:7f:52:bc:13:1d:c9: 52:20:70:42:89:c3:0b:8a:02:f5:25:b1:05:50:17:e5:59:62: d3:6e:85:4e:8d:8a:4a:fc:98:27:df:c1:43:f6:f8:f6:a5:29: 57:46:08:27:b4:1e:f0:51:dd:5e:be:04:a2:2e:ae:29:46:7d: 3a:a1:9f:49:3a:36:95:eb:0d:52:5d:3f:6f:25:44:07:f2:ec: e8:9f:49:de:2b:cf:bc:13:0c:9f:b7:12:c4:38:72:b1:b9:42: 80:f4:be:61:f6:c0:37:77:f8:e2:0f:64:6d:e2:ca:c2:67:d5: d1:98:78:8d:5a:23:86:19:66:cb:91:66:88:43:d9:ca:d8:27: a5:e8:0c:59:db:ae:0a:63:ab:00:17:0e:3a:1b:98:28:58:2e: 38:6c:01:ef:cb:e7:c4:3a:3a:20:e7:99:64:07:c1:a8:04:ac: 1f:09:d9:81:2d:23:d5:bd:ae:a9:57:71:f0:ad:84:b0:37:e0: 73:8d:c8:2d:00:f9:fd:78:f4:a3:05:c7:03:b2:be:b2:cc:b4: ba:f6:53:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90OTZMUuPLxGLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk NWYzNzEyZjctM2Y2My00MWFmLTg3ZWMtNGU3NjgzODQwNjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCgyVWhrdNbs9Q+QFwDIsz1HIZejt2pRNjww XWNWGZXulNIBhlZQJVOpW2EolfEpBZiZd2VLB+Mf//KcPircD+eYguPoTuTdypBa gYARjyDq9SbSSg5Cz5PCvfy6tdiI3SbbiCnw1ba2oyQ1vOstYhPXNW6XRI7c2/4a Y74ipDPiaN3GO2w7u8d9JWNxotZW8XYvMM+3k+DoH2AnZ/ipbnGb7GUoTlq89Ylu W6RAZO7BOnft8MAwiVDpKmrlMcJUpZ++kcOEqpPH3AaX4X7SEBg/VcG2q9Ecu4Oc Mg2MgIQYSXizAb74myr+gAXfXq79GThacos+pbm7js3p/TASoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLelnAxZ/8rCh3W2CR4IG1Fbwe6fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWM5M2UyNzEtNmJmNC0z MDBmLWEzMDItNWQxZjk5OGU2NGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbERBvXVzeC26fnkJdL77HWyZW8XKXrTXI7xEaummIGEGcyg/NKKsdC SjUMIx9N+n9SvBMdyVIgcEKJwwuKAvUlsQVQF+VZYtNuhU6Nikr8mCffwUP2+Pal KVdGCCe0HvBR3V6+BKIurilGfTqhn0k6NpXrDVJdP28lRAfy7OifSd4rz7wTDJ+3 EsQ4crG5QoD0vmH2wDd3+OIPZG3iysJn1dGYeI1aI4YZZsuRZohD2crYJ6XoDFnb rgpjqwAXDjobmChYLjhsAe/L58Q6OiDnmWQHwagErB8J2YEtI9W9rqlXcfCthLA3 4HONyC0A+f149KMFxwOyvrLMtLr2U/A= -----END CERTIFICATE-----Generated at Mon Oct 20 07:01:26 2025 by rpki-client