$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa File: ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa (raw, json) Hash identifier: o6gkN2/29sy7xZfnQXGUDrJB8tCt7U/tQsNsebwD6VU= Subject key identifier: A7:82:14:9B:A2:FA:1B:40:CF:6E:A7:15:D5:6B:EB:B3:18:98:A7:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C838A3F2867F3788A64C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396554 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:83:8a:3f:28:67:f3:78:8a:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=b7b3c4b1-73a9-43a2-be08-ad9ad8d8cc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b7:e9:7e:ab:51:e5:15:a3:0c:c4:7c:c3:f0: ac:36:29:b4:e6:8f:36:75:64:43:89:57:aa:64:85: cd:8c:52:8e:d6:1c:50:65:f8:30:9b:14:ef:d1:a6: 80:d2:28:66:e4:14:3b:4b:a0:22:fb:33:21:86:63: db:27:68:a1:11:6a:f8:db:bc:c8:9f:6e:b0:39:a0: ac:20:6a:0f:e2:97:dd:83:52:0f:b6:b2:8e:df:40: 1f:d3:3d:36:a0:55:00:98:de:13:60:9c:2a:74:38: 8e:5b:a9:66:b6:8e:90:b4:bc:0d:38:46:73:37:6d: 72:55:4f:b9:ad:58:44:3c:0f:7f:38:a3:c0:0d:d4: 74:9b:11:76:d9:3c:03:cf:35:a7:22:d4:00:c9:d8: 9b:4f:40:e4:ec:24:74:28:73:70:bf:b6:db:97:f5: 65:2a:95:68:2e:9e:11:e3:3a:90:16:3a:14:db:42: 64:ea:c7:1d:68:81:58:76:1f:ee:b6:78:93:b5:84: c5:e6:8d:c3:8d:67:e7:1a:7f:23:7d:f9:86:27:d3: d3:84:c3:9e:7e:0b:d0:98:b1:5f:2c:c7:9a:e7:77: 31:40:29:84:74:cb:78:de:b0:0d:08:21:ce:73:cd: 69:30:17:e7:4b:17:40:ad:b3:13:2a:6e:43:d2:3f: 23:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:82:14:9B:A2:FA:1B:40:CF:6E:A7:15:D5:6B:EB:B3:18:98:A7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ff5a8db9-0400-3c63-8de4-6dd8489a1368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:44:d4:e8:9e:7f:64:17:85:f1:fb:43:c1:cf:7a:37:ed:e8: 64:63:c3:b9:6a:28:ea:1d:4b:47:db:78:96:f4:5c:55:5c:34: 72:43:07:aa:6b:18:08:96:94:9f:17:f9:1d:4b:93:f4:09:ef: 6e:60:b9:a3:e8:c2:32:5c:e5:21:7d:18:43:c7:fd:7c:0a:73: ae:ac:bd:85:50:51:ba:dc:e1:c4:09:ca:a0:52:bd:a9:9b:44: 93:b7:ef:44:02:3b:32:84:24:14:2b:70:65:f7:f3:b2:a9:f8: 92:bc:a7:73:c1:33:0b:97:fe:90:d5:ce:c6:4c:70:f1:91:b6: b4:99:23:b1:9f:28:04:3c:20:a9:88:d4:6f:6f:2a:e6:fb:b0: 2b:2a:37:4a:9f:b1:94:5b:72:45:83:1d:42:ee:c9:7a:b4:dc: b6:5d:15:86:4f:87:db:df:42:20:0b:47:c7:71:9f:21:f0:6f: ee:bb:ec:6c:a3:27:33:1a:57:78:e1:ee:8a:2b:99:9b:6d:8a: 96:ef:3f:e6:03:48:c4:66:1a:60:98:00:dd:ca:1f:f7:02:d4: 4f:03:92:55:3c:05:60:83:bd:eb:c8:37:94:03:8e:6c:39:6c: e4:66:ae:26:8d:32:c1:f3:13:01:80:60:6c:e7:9e:7f:00:0e: bf:5e:5a:1b -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIOKPyhn83iKZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YjdiM2M0YjEtNzNhOS00M2EyLWJlMDgtYWQ5YWQ4ZDhjYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLfpfqtR5RWjDMR8w/CsNim05o82dWRDiVeq ZIXNjFKO1hxQZfgwmxTv0aaA0ihm5BQ7S6Ai+zMhhmPbJ2ihEWr427zIn26wOaCs IGoP4pfdg1IPtrKO30Af0z02oFUAmN4TYJwqdDiOW6lmto6QtLwNOEZzN21yVU+5 rVhEPA9/OKPADdR0mxF22TwDzzWnItQAydibT0Dk7CR0KHNwv7bbl/VlKpVoLp4R 4zqQFjoU20Jk6scdaIFYdh/utniTtYTF5o3DjWfnGn8jffmGJ9PThMOefgvQmLFf LMea53cxQCmEdMt43rANCCHOc81pMBfnSxdArbMTKm5D0j8jGQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKeCFJui+htAz26nFdVr67MYmKfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmY1YThkYjktMDQwMC0z YzYzLThkZTQtNmRkODQ4OWExMzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALRNTonn9kF4Xx+0PBz3o37ehkY8O5aijqHUtH23iW9FxVXDRyQweq axgIlpSfF/kdS5P0Ce9uYLmj6MIyXOUhfRhDx/18CnOurL2FUFG63OHECcqgUr2p m0STt+9EAjsyhCQUK3Bl9/OyqfiSvKdzwTMLl/6Q1c7GTHDxkba0mSOxnygEPCCp iNRvbyrm+7ArKjdKn7GUW3JFgx1C7sl6tNy2XRWGT4fb30IgC0fHcZ8h8G/uu+xs oyczGld44e6KK5mbbYqW7z/mA0jEZhpgmADdyh/3AtRPA5JVPAVgg73ryDeUA45s OWzkZq4mjTLB8xMBgGBs555/AA6/Xlob -----END CERTIFICATE-----Generated at Mon Oct 20 15:21:44 2025 by rpki-client