$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa File: f9676fd5-305e-3317-bd0d-99ca96cb0836.roa (raw, json) Hash identifier: GEKbRPBP/JsrBSOhGn8IP35ApvRxEl0YmGgBo2i0VdY= Subject key identifier: 9B:E6:CA:9A:03:42:43:77:4C:57:8D:46:6B:5A:80:1C:26:9F:83:81 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C89F63A9AB6A93CD51A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 36628 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:89:f6:3a:9a:b6:a9:3c:d5:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=6e0e99e4-a946-4c8e-8622-7e649433bea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b8:91:6f:4f:d8:79:23:9d:a4:02:22:c8:d7: fa:7e:38:e9:66:e0:c1:52:95:a8:34:29:06:4f:93: 43:26:c7:8e:b9:ea:d6:b6:3c:75:27:34:ea:31:eb: f3:80:55:58:0d:de:f8:2e:34:b0:87:f8:46:47:d9: 7c:db:ea:d2:92:9a:5b:90:b7:ce:19:5a:1a:79:3d: 3e:32:19:e6:8c:65:ff:4c:d7:fe:d4:88:89:b5:b7: e7:cb:25:47:c0:ba:49:9b:85:83:29:23:67:b8:a3: 50:ae:61:39:0b:a0:94:2d:73:8d:88:d4:34:0c:74: 04:b6:e0:b0:24:12:31:f6:1f:5c:3d:6d:4d:d4:55: 7c:86:47:00:66:56:78:5f:45:91:cd:27:a0:ce:69: 6e:b8:67:bf:f2:c2:e1:ac:a0:67:19:70:b0:85:d4: 4c:16:82:04:14:ae:ed:2b:49:ee:7e:9b:56:9d:79: 2c:90:c8:e9:8e:f1:11:dc:b5:ce:a3:d1:30:76:a8: eb:03:12:4f:cf:eb:70:89:b7:07:9c:33:73:30:00: d8:57:2c:60:e4:99:2d:42:2a:56:00:3e:2b:86:81: d9:33:bb:74:83:7f:62:9f:de:1d:26:6d:19:98:12: 82:5e:45:fa:d5:de:ea:61:20:d4:8f:58:90:8e:82: 6e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E6:CA:9A:03:42:43:77:4C:57:8D:46:6B:5A:80:1C:26:9F:83:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f9676fd5-305e-3317-bd0d-99ca96cb0836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:f6:ad:23:76:b1:df:e8:02:82:a2:c5:7a:41:be:e0:58:3d: ce:ee:b4:87:c3:fe:9b:4e:fc:e7:fa:e4:30:6b:06:ab:39:65: 5a:96:5e:54:52:50:ba:76:f1:84:34:63:07:8a:f5:e4:6e:7e: e5:38:5f:7e:f3:2d:68:f3:11:30:cf:97:58:77:cc:77:a3:a3: 74:66:74:ae:1d:cc:c2:63:e5:dc:57:0e:90:b6:e8:77:e0:ec: f1:2a:6e:0f:24:ae:42:cd:0e:01:b6:bf:68:eb:81:14:7f:54: d9:a0:49:46:61:ba:4f:da:0a:53:4d:40:55:32:8f:12:a6:64: ef:3d:b6:a8:e5:f3:5d:87:53:60:74:3b:ff:0a:70:70:3a:0d: 5b:33:5f:bf:b9:7d:e7:48:c9:e4:41:32:f2:04:a8:05:0f:60: 48:40:f7:1b:96:ae:55:1d:ab:22:c0:23:32:9c:56:8c:aa:bc: 04:e6:7c:ac:29:ad:8f:7f:e1:b3:e4:d3:ed:c1:91:23:9a:9d: a2:40:9a:09:de:ae:13:04:a0:4a:eb:2c:7e:37:1f:52:ba:88: dd:82:38:5f:31:d6:ac:50:ee:3f:3a:0a:93:15:d6:b8:52:35: 32:90:b3:ae:8c:30:28:3b:89:b3:96:41:06:c9:41:e8:2f:ca: 3a:d9:24:39 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIn2Opq2qTzVGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NmUwZTk5ZTQtYTk0Ni00YzhlLTg2MjItN2U2NDk0MzNiZWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLiRb0/YeSOdpAIiyNf6fjjpZuDBUpWoNCkG T5NDJseOuerWtjx1JzTqMevzgFVYDd74LjSwh/hGR9l82+rSkppbkLfOGVoaeT0+ MhnmjGX/TNf+1IiJtbfnyyVHwLpJm4WDKSNnuKNQrmE5C6CULXONiNQ0DHQEtuCw JBIx9h9cPW1N1FV8hkcAZlZ4X0WRzSegzmluuGe/8sLhrKBnGXCwhdRMFoIEFK7t K0nufptWnXkskMjpjvER3LXOo9EwdqjrAxJPz+twibcHnDNzMADYVyxg5JktQipW AD4rhoHZM7t0g39in94dJm0ZmBKCXkX61d7qYSDUj1iQjoJu5QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJvmypoDQkN3TFeNRmtagBwmn4OBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk2NzZmZDUtMzA1ZS0z MzE3LWJkMGQtOTljYTk2Y2IwODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCj9q0jdrHf6AKCosV6Qb7gWD3O7rSHw/6bTvzn+uQwawarOWVall5U UlC6dvGENGMHivXkbn7lOF9+8y1o8xEwz5dYd8x3o6N0ZnSuHczCY+XcVw6Qtuh3 4OzxKm4PJK5CzQ4Btr9o64EUf1TZoElGYbpP2gpTTUBVMo8SpmTvPbao5fNdh1Ng dDv/CnBwOg1bM1+/uX3nSMnkQTLyBKgFD2BIQPcblq5VHasiwCMynFaMqrwE5nys Ka2Pf+Gz5NPtwZEjmp2iQJoJ3q4TBKBK6yx+Nx9SuojdgjhfMdasUO4/OgqTFda4 UjUykLOujDAoO4mzlkEGyUHoL8o62SQ5 -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:32 2025 by rpki-client