$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa File: ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa (raw, json) Hash identifier: xGyXSKPJ/9oI+6GHcUrHRWjAIve7J3ODj1n4Ta49ON0= Subject key identifier: 8E:E6:1D:87:A7:7F:4B:D9:EC:B7:D7:5A:B4:0C:32:0A:12:2F:09:05 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F49869306B06EFC7439F5CF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32651 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:93:06:b0:6e:fc:74:39:f5:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7bb332b7-df5d-4de3-b306-59f8753df0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:42:6c:53:68:64:02:01:7f:9a:d9:e5:ff:39: d1:fc:d5:82:ef:f8:47:ef:33:18:4b:f4:31:57:d5: 66:0d:d7:23:44:6f:96:7b:92:c6:de:1b:f7:f4:80: fc:58:1a:d4:7d:c4:b2:40:b7:fc:a0:15:76:0b:9d: db:b3:9f:b2:34:0c:b5:af:52:d1:c8:3e:ad:06:eb: f2:ff:54:bc:82:46:da:22:01:59:7d:79:b2:1e:69: 68:42:04:02:13:c4:63:a4:45:66:b8:67:6b:a4:53: e0:49:2e:c6:56:2e:47:6a:53:c8:59:56:96:b8:84: 57:63:55:4f:3c:96:96:93:0a:c1:54:82:0e:ef:fb: 9d:54:66:47:8a:fd:05:01:89:ff:9f:b2:0f:c1:42: 4b:a3:89:e7:a6:9e:8c:a8:fa:f1:56:34:7d:d7:f8: 2d:6f:9b:db:2d:eb:dd:ce:33:d0:0f:99:bc:19:16: a1:64:ee:20:71:85:46:0e:e6:6f:a2:fe:e2:e9:24: f4:74:62:f5:82:d4:e4:18:3e:b6:6b:50:cc:e6:71: 58:0d:6a:89:13:64:da:03:2e:91:94:ef:3e:21:b3: b1:99:4c:cb:42:29:c1:f9:dd:6a:b1:5f:45:3a:05: 46:93:bf:1d:63:e1:d9:4f:3e:11:c0:aa:ab:24:05: 96:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E6:1D:87:A7:7F:4B:D9:EC:B7:D7:5A:B4:0C:32:0A:12:2F:09:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ac538-23c3-3ede-b165-61405b0b3ea4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d3:3f:59:cc:a5:3c:ba:9f:6d:d0:04:36:ba:f7:e3:40:0c: 8a:7f:6d:0d:0d:91:93:be:cf:a2:c5:34:85:13:07:3b:3d:ea: 4c:ff:2d:57:a1:3c:1d:37:dc:83:c7:14:0d:7e:88:66:e3:b2: 85:2b:ed:62:df:c7:a1:8e:4e:ce:2d:7e:3f:a7:de:19:e3:87: 47:3f:35:e1:0b:d7:a2:20:78:34:31:55:19:1c:98:52:69:e8: 0e:4e:63:13:2a:86:b3:9d:dc:77:fb:1a:bd:d9:86:80:09:73: 82:aa:54:d2:be:16:8b:82:23:1d:8d:86:41:8f:00:af:10:8f: 60:8e:24:73:dc:40:33:4c:69:de:16:36:6c:9b:9f:e3:cf:d2: 4d:84:09:6f:07:04:44:14:2f:d2:82:ea:b5:12:66:95:7e:5d: bb:37:06:b7:d7:85:13:84:0a:ac:9e:a8:0d:cc:2a:23:a0:78: 92:b4:d9:c5:d5:fc:76:67:d5:f2:5c:d6:aa:48:f8:72:a8:ad: bf:b8:2d:01:d5:96:65:eb:5c:a0:1f:2b:64:4b:88:8f:cf:bb: 92:0d:4f:1c:62:2a:bd:69:c5:4d:ba:71:16:13:77:7f:03:9e: fc:98:50:e6:ac:97:68:7a:1d:53:be:1c:bf:62:fa:9b:e0:b0: 76:2c:50:45 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JhpMGsG78dDn1zwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2JiMzMyYjctZGY1ZC00ZGUzLWIzMDYtNTlmODc1M2RmMGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0JsU2hkAgF/mtnl/znR/NWC7/hH7zMYS/Qx V9VmDdcjRG+We5LG3hv39ID8WBrUfcSyQLf8oBV2C53bs5+yNAy1r1LRyD6tBuvy /1S8gkbaIgFZfXmyHmloQgQCE8RjpEVmuGdrpFPgSS7GVi5HalPIWVaWuIRXY1VP PJaWkwrBVIIO7/udVGZHiv0FAYn/n7IPwUJLo4nnpp6MqPrxVjR91/gtb5vbLevd zjPQD5m8GRahZO4gcYVGDuZvov7i6ST0dGL1gtTkGD62a1DM5nFYDWqJE2TaAy6R lO8+IbOxmUzLQinB+d1qsV9FOgVGk78dY+HZTz4RwKqrJAWW3QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI7mHYenf0vZ7LfXWrQMMgoSLwkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWYyYWM1MzgtMjNjMy0z ZWRlLWIxNjUtNjE0MDViMGIzZWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBC0z9ZzKU8up9t0AQ2uvfjQAyKf20NDZGTvs+ixTSFEwc7PepM/y1X oTwdN9yDxxQNfohm47KFK+1i38ehjk7OLX4/p94Z44dHPzXhC9eiIHg0MVUZHJhS aegOTmMTKoazndx3+xq92YaACXOCqlTSvhaLgiMdjYZBjwCvEI9gjiRz3EAzTGne FjZsm5/jz9JNhAlvBwREFC/Sguq1EmaVfl27Nwa314UThAqsnqgNzCojoHiStNnF 1fx2Z9XyXNaqSPhyqK2/uC0B1ZZl61ygHytkS4iPz7uSDU8cYiq9acVNunEWE3d/ A578mFDmrJdoeh1Tvhy/Yvqb4LB2LFBF -----END CERTIFICATE-----Generated at Fri Sep 25 18:12:18 2026 by rpki-client