$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f127deea-0751-3848-a6c2-7aab4660435a.roa File: f127deea-0751-3848-a6c2-7aab4660435a.roa (raw, json) Hash identifier: IX24L0pKceNSAXrT2ejyZLwUS0z7nrW5DrP59f0Bmn0= Subject key identifier: D0:FC:5D:18:04:CB:6C:64:C8:0C:9A:6A:1A:F5:BC:36:14:71:CD:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61E5017CEE33769BC58140 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f127deea-0751-3848-a6c2-7aab4660435a.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 36616 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e5:01:7c:ee:33:76:9b:c5:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=1ed2f419-5d58-4eb7-8c55-db4982a33576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:8a:09:4c:87:bd:cc:3f:fb:0c:75:70:1c: 7a:62:20:04:2d:9b:51:37:08:1e:88:1b:00:27:1f: 4f:7c:54:bf:58:f2:8d:b0:85:08:fe:54:0f:f7:b3: 63:54:47:b7:1c:c0:95:d0:bf:06:31:3e:d4:b2:96: d2:d2:0c:d6:29:90:69:ec:d0:85:10:0e:1b:b8:6e: 10:fc:6d:fe:79:1d:1f:e5:76:df:97:0e:91:54:83: c8:6c:6d:ff:52:ea:85:ab:29:61:dc:7e:c6:21:fe: 9b:4e:6c:8f:26:d4:86:dd:54:83:50:ad:ab:e4:52: 5f:87:02:cf:81:76:9c:e5:06:62:cc:98:42:d7:f3: e9:83:48:0a:ab:ee:20:50:24:f9:d3:82:b6:f7:03: 52:e5:7a:0d:d3:5e:f4:16:89:0d:0f:d5:dc:30:d1: 33:51:91:90:5d:bc:1b:33:58:37:73:bd:09:ca:57: 4e:dd:ac:b4:97:5c:07:f2:aa:c9:80:c1:27:18:d9: 3f:c5:e4:42:b4:ce:bf:f5:ba:e3:91:82:01:a7:82: d4:5f:95:0c:cf:ef:f5:3c:96:c8:67:ad:b6:11:01: dd:b4:c8:3d:81:32:a1:f4:1f:13:00:82:7c:d4:54: 3d:d4:81:b7:b6:4f:26:b7:67:5b:25:48:0c:f8:14: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FC:5D:18:04:CB:6C:64:C8:0C:9A:6A:1A:F5:BC:36:14:71:CD:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f127deea-0751-3848-a6c2-7aab4660435a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:07:69:58:ae:41:06:6b:b4:40:26:db:e8:ac:7f:1b:6d:26: 41:1c:60:03:07:ff:55:18:a7:d6:8e:31:c7:84:52:f0:21:b2: fa:e7:b1:a6:dd:c1:99:61:ff:ba:e7:91:63:84:31:de:1b:8d: c9:24:92:51:f6:17:cb:86:6a:69:54:d2:f5:0c:19:1d:42:60: c7:b7:e3:26:ed:3c:1b:b1:45:f4:ca:c6:ed:35:58:96:0f:53: 28:61:e9:4b:40:ce:fb:c4:88:02:73:53:72:3c:30:e5:1a:1f: 7e:f2:8e:d3:fe:bd:5e:46:80:d6:63:12:3e:6a:74:a3:72:63: c3:6f:00:4a:86:90:8a:08:23:66:c0:c6:f2:01:18:04:21:5a: 37:23:bb:f6:45:a7:3f:3f:28:9b:d9:aa:30:7e:f7:70:22:08: be:f7:dc:2c:fa:6c:37:0f:0f:21:43:ac:1a:cb:82:23:67:1b: 07:18:d2:e2:16:a8:1b:56:a9:7c:1b:44:e5:7a:f4:0f:2a:e8: 3c:3c:67:f9:62:f3:9b:ca:ed:53:86:fc:a1:86:be:88:7f:2e: ff:a6:3b:95:2f:60:f8:9a:d7:0c:7c:44:17:fa:0b:a8:28:3c: 2d:6d:e5:da:ae:63:77:1c:12:c0:22:47:2a:76:f3:04:6c:44: cf:2e:86:72 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYeUBfO4zdpvFgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MWVkMmY0MTktNWQ1OC00ZWI3LThjNTUtZGI0OTgyYTMzNTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaOKCUyHvcw/+wx1cBx6YiAELZtRNwgeiBsA Jx9PfFS/WPKNsIUI/lQP97NjVEe3HMCV0L8GMT7UspbS0gzWKZBp7NCFEA4buG4Q /G3+eR0f5Xbflw6RVIPIbG3/UuqFqylh3H7GIf6bTmyPJtSG3VSDUK2r5FJfhwLP gXac5QZizJhC1/Ppg0gKq+4gUCT504K29wNS5XoN0170FokND9XcMNEzUZGQXbwb M1g3c70JyldO3ay0l1wH8qrJgMEnGNk/xeRCtM6/9brjkYIBp4LUX5UMz+/1PJbI Z622EQHdtMg9gTKh9B8TAIJ81FQ91IG3tk8mt2dbJUgM+BS1YQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFND8XRgEy2xkyAyaahr1vDYUcc0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjEyN2RlZWEtMDc1MS0z ODQ4LWE2YzItN2FhYjQ2NjA0MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNB2lYrkEGa7RAJtvorH8bbSZBHGADB/9VGKfWjjHHhFLwIbL657Gm 3cGZYf+655FjhDHeG43JJJJR9hfLhmppVNL1DBkdQmDHt+Mm7TwbsUX0ysbtNViW D1MoYelLQM77xIgCc1NyPDDlGh9+8o7T/r1eRoDWYxI+anSjcmPDbwBKhpCKCCNm wMbyARgEIVo3I7v2Rac/Pyib2aowfvdwIgi+99ws+mw3Dw8hQ6way4IjZxsHGNLi FqgbVql8G0TlevQPKug8PGf5YvObyu1Thvyhhr6Ify7/pjuVL2D4mtcMfEQX+guo KDwtbeXarmN3HBLAIkcqdvMEbETPLoZy -----END CERTIFICATE-----Generated at Mon Oct 20 10:36:22 2025 by rpki-client