$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa File: ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa (raw, json) Hash identifier: KqJ73Hz910CLF28pu0y2OeK/1EWvmnncJ2ePxtNcFKo= Subject key identifier: 7C:B7:A8:99:79:4B:45:58:B8:46:DD:47:1E:E0:BB:77:5C:E2:3D:15 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B56D723C5203AD896B37156A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 36629 IP address blocks: 192.43.172.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:23:c5:20:3a:d8:96:b3:71:56:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=1e18bbdf-4c65-4fdd-902e-5cc49c064a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:b5:c3:5c:1f:78:02:9d:6a:f6:e4:68:2f: 02:b9:dd:8f:bd:eb:27:f8:7d:b0:11:b5:b9:83:1e: 9b:48:fa:ad:9e:e0:49:d1:8f:a5:76:c6:f6:36:f7: c6:26:83:2e:89:63:38:49:70:06:24:a3:3a:6d:24: 0a:32:38:e0:c0:d1:98:49:76:7d:86:9d:47:96:00: 9f:5f:99:02:92:51:f5:7a:4f:e3:45:5c:71:bc:74: 1b:da:bb:2d:2a:11:70:86:71:83:71:02:60:84:c5: 54:61:a4:d1:66:68:69:9e:f2:28:da:b5:ab:30:ba: 15:84:34:3a:2d:9e:62:3b:9a:1a:95:25:27:c0:5d: 6c:97:20:69:4c:9e:36:50:82:75:d9:21:b4:94:2c: 96:ec:58:bb:de:26:75:81:68:e3:dc:b7:73:c6:60: 9e:40:67:f4:4b:95:1b:07:0b:cb:53:ca:9a:14:57: 67:9f:84:49:95:9a:f8:ef:33:17:5d:76:ec:db:a3: 4d:8c:8c:62:9c:97:2b:a7:3f:dc:14:b8:bc:78:28: b2:2b:a9:1b:39:24:cd:c5:da:cf:9f:51:b2:ba:ea: ec:3e:9b:7d:ea:be:fc:1c:4b:90:34:e0:50:62:73: 84:ee:d1:6b:f9:35:e3:24:59:fd:a7:1a:a1:04:3e: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B7:A8:99:79:4B:45:58:B8:46:DD:47:1E:E0:BB:77:5C:E2:3D:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ffef411f-7d48-3d31-bbf7-74d9d8e5de7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.43.172.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:be:11:a6:40:c1:af:62:c0:b1:26:f2:04:c7:c5:1b:63:bf: 8c:7f:be:28:d2:69:50:06:7c:14:da:8d:66:d3:9e:64:8e:5b: 1b:b5:44:42:3c:72:bf:55:f3:35:89:0a:b9:52:26:9d:fc:00: f8:e6:da:f9:04:da:24:28:85:12:05:fd:36:d2:55:b1:73:4c: 61:f3:2f:47:ff:8b:9c:e4:01:b0:33:05:84:1c:99:aa:d9:23: ab:56:4c:c1:c2:e0:a5:43:71:90:60:49:d0:58:c4:f9:74:c2: 0e:58:69:c7:7b:7e:1a:54:b6:d0:a2:1d:f6:1a:51:df:d1:c5: 14:97:db:97:f1:27:4f:96:db:9f:f4:6f:81:4e:38:f8:b6:e9: ac:d4:43:76:8c:1b:2a:2c:86:a9:e0:90:9f:e2:ab:42:77:c6: 61:20:d8:36:a1:b9:90:51:91:c8:26:ab:c7:60:4e:6e:ef:fc: c7:25:2f:f6:57:12:e9:43:58:7e:42:f0:b3:16:ee:76:e7:44: 21:1f:b1:08:2c:00:be:14:3c:0b:97:48:4c:3a:f7:f0:08:03: d7:01:29:56:36:bd:7c:4c:04:d7:8a:78:1d:4f:58:6c:bc:98: ef:09:16:e3:4f:c1:69:54:99:df:af:91:f3:8e:cd:ed:62:c5: 6f:7a:cd:18 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtW1yPFIDrYlrNxVqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MWUxOGJiZGYtNGM2NS00ZmRkLTkwMmUtNWNjNDljMDY0YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL21w1wfeAKdavbkaC8Cud2Pvesn+H2wEbW5 gx6bSPqtnuBJ0Y+ldsb2NvfGJoMuiWM4SXAGJKM6bSQKMjjgwNGYSXZ9hp1HlgCf X5kCklH1ek/jRVxxvHQb2rstKhFwhnGDcQJghMVUYaTRZmhpnvIo2rWrMLoVhDQ6 LZ5iO5oalSUnwF1slyBpTJ42UIJ12SG0lCyW7Fi73iZ1gWjj3LdzxmCeQGf0S5Ub BwvLU8qaFFdnn4RJlZr47zMXXXbs26NNjIxinJcrpz/cFLi8eCiyK6kbOSTNxdrP n1GyuursPpt96r78HEuQNOBQYnOE7tFr+TXjJFn9pxqhBD5+1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHy3qJl5S0VYuEbdRx7gu3dc4j0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmZlZjQxMWYtN2Q0OC0z ZDMxLWJiZjctNzRkOWQ4ZTVkZTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCusHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC/vhGmQMGvYsCxJvIEx8UbY7+Mf74o0mlQBnwU2o1m055kjlsbtURC PHK/VfM1iQq5Uiad/AD45tr5BNokKIUSBf020lWxc0xh8y9H/4uc5AGwMwWEHJmq 2SOrVkzBwuClQ3GQYEnQWMT5dMIOWGnHe34aVLbQoh32GlHf0cUUl9uX8SdPltuf 9G+BTjj4tums1EN2jBsqLIap4JCf4qtCd8ZhINg2obmQUZHIJqvHYE5u7/zHJS/2 VxLpQ1h+QvCzFu5250QhH7EILAC+FDwLl0hMOvfwCAPXASlWNr18TATXingdT1hs vJjvCRbjT8FpVJnfr5Hzjs3tYsVves0Y -----END CERTIFICATE-----Generated at Mon Oct 20 07:04:06 2025 by rpki-client