$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f52ddab5-9066-3f75-9717-363d3686d66d.roa File: f52ddab5-9066-3f75-9717-363d3686d66d.roa (raw, json) Hash identifier: roDdvDgLSFSTu7ahBGh4Vl2N5jA00jab2//+wHZT33Q= Subject key identifier: A1:F7:50:7B:D2:C7:4B:1F:E2:E0:BA:84:D4:4A:7C:23:E7:9A:B0:78 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF733BE17B0876279F9C420 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f52ddab5-9066-3f75-9717-363d3686d66d.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396588 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:33:be:17:b0:87:62:79:f9:c4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=c7990771-8925-4327-8f82-2cfdc567833c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f4:ce:93:83:17:69:26:e4:5a:ad:8a:0c:71: 6a:cd:3b:4f:73:85:89:1d:6c:bb:ba:98:be:72:3c: 34:a7:20:84:a6:0e:06:6b:23:d1:8a:89:b8:cb:bf: e4:2b:8e:5e:33:33:b8:49:cd:20:ad:55:b4:0f:99: 0d:c4:33:60:f7:ab:cc:cd:3f:c3:ea:ce:e3:c3:3f: 31:59:92:ba:c2:1e:92:fd:b7:74:e2:11:ce:ac:66: 2a:13:46:fc:4c:c1:c5:ee:45:03:9a:2f:8b:26:b7: 49:e3:83:cb:8d:59:7f:50:fe:be:65:1f:05:dc:94: 74:f6:9e:3f:80:86:6a:81:03:eb:11:7f:2d:61:ac: ed:d5:97:33:62:a3:d4:5e:be:bb:43:8a:55:85:76: 14:34:93:af:5f:ad:0b:6a:9a:70:7c:ba:6c:95:01: 94:24:d0:3e:40:ac:19:8f:7b:fc:7e:c4:6c:38:a4: 60:9e:e9:6c:a4:85:eb:f5:d4:f0:29:8c:7c:6e:dd: f6:a7:b2:56:9b:b1:c5:6f:27:b2:ca:3f:a5:49:f4: 9c:72:19:12:33:8c:82:66:d1:c9:9b:b4:f2:f0:a2: aa:83:99:d4:09:e2:9e:f4:ed:58:6b:ca:ce:43:40: aa:7c:fc:ef:f6:ed:f5:68:1e:b6:cc:d6:4a:f9:5d: 19:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F7:50:7B:D2:C7:4B:1F:E2:E0:BA:84:D4:4A:7C:23:E7:9A:B0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f52ddab5-9066-3f75-9717-363d3686d66d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:e9:e7:f4:f1:d2:fb:4e:29:97:b7:a2:76:62:95:a7:33:19: 41:94:df:a6:86:8f:63:bb:c4:24:08:ca:15:4a:a1:42:0e:ad: eb:fa:42:c2:c4:54:d4:de:35:e6:d3:38:da:a5:ed:19:b8:d3: b9:78:d1:d8:6a:11:37:71:ac:0f:b4:78:18:f0:29:ac:ba:b7: 90:ed:6b:ab:01:89:74:d8:0b:29:73:aa:73:bd:00:eb:09:c8: b5:41:75:6e:f0:85:ed:e7:d4:94:b8:9b:ca:ac:6f:d3:29:b5: dc:3d:7f:a1:da:2b:0d:1b:ed:9b:4c:44:26:8d:05:2d:2b:be: 2b:b3:9f:00:e9:eb:2e:b3:97:ff:62:98:97:49:33:d0:4b:cd: f9:06:fc:5a:3d:07:a5:7e:a8:0f:b0:74:ce:a5:38:fd:0e:79: 36:4f:f1:3c:df:20:a3:ed:7c:b0:12:5c:c2:de:0c:2d:86:2e: de:fc:4d:03:f9:85:4a:d0:a3:0f:ec:a9:84:cd:f4:53:5d:f2: fb:92:0c:74:04:5a:14:83:a3:4a:f6:71:0a:bc:bd:75:58:cf: fb:9f:c0:5f:4f:4a:6a:d1:f8:f3:3f:d5:32:b0:cc:45:eb:03: 37:4a:c1:ca:65:e6:4e:93:78:c7:92:a4:a5:37:a1:74:23:ab: 3d:c7:3b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv9zO+F7CHYnn5xCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk Yzc5OTA3NzEtODkyNS00MzI3LThmODItMmNmZGM1Njc4MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PTOk4MXaSbkWq2KDHFqzTtPc4WJHWy7upi+ cjw0pyCEpg4GayPRiom4y7/kK45eMzO4Sc0grVW0D5kNxDNg96vMzT/D6s7jwz8x WZK6wh6S/bd04hHOrGYqE0b8TMHF7kUDmi+LJrdJ44PLjVl/UP6+ZR8F3JR09p4/ gIZqgQPrEX8tYazt1ZczYqPUXr67Q4pVhXYUNJOvX60LappwfLpslQGUJNA+QKwZ j3v8fsRsOKRgnulspIXr9dTwKYx8bt32p7JWm7HFbyeyyj+lSfScchkSM4yCZtHJ m7Ty8KKqg5nUCeKe9O1Ya8rOQ0CqfPzv9u31aB62zNZK+V0ZeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKH3UHvSx0sf4uC6hNRKfCPnmrB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjUyZGRhYjUtOTA2Ni0z Zjc1LTk3MTctMzYzZDM2ODZkNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLp5/Tx0vtOKZe3onZilaczGUGU36aGj2O7xCQIyhVKoUIOrev6QsLE VNTeNebTONql7Rm407l40dhqETdxrA+0eBjwKay6t5Dta6sBiXTYCylzqnO9AOsJ yLVBdW7whe3n1JS4m8qsb9Mptdw9f6HaKw0b7ZtMRCaNBS0rviuznwDp6y6zl/9i mJdJM9BLzfkG/Fo9B6V+qA+wdM6lOP0OeTZP8TzfIKPtfLASXMLeDC2GLt78TQP5 hUrQow/sqYTN9FNd8vuSDHQEWhSDo0r2cQq8vXVYz/ufwF9PSmrR+PM/1TKwzEXr AzdKwcpl5k6TeMeSpKU3oXQjqz3HOyM= -----END CERTIFICATE-----Generated at Mon Oct 20 03:45:02 2025 by rpki-client