$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a98ca3c-771f-3a8d-bf92-840f0d61e998.roa File: 1a98ca3c-771f-3a8d-bf92-840f0d61e998.roa (raw, json) Hash identifier: JN//Wtik5/6DkrC10or8yevrL6dXJ/ajmFceZm7t52U= Subject key identifier: 08:01:9B:7A:1A:B8:66:DA:D1:13:EB:4C:5F:1E:5C:47:4D:D3:9F:D5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C891BC004F37A130A4580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a98ca3c-771f-3a8d-bf92-840f0d61e998.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 40647 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:89:1b:c0:04:f3:7a:13:0a:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=49d8f818-b6e3-42aa-a7e2-6bcf1a587809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ee:70:33:b1:db:c3:79:df:7b:53:73:b8:95: d1:69:8f:06:1b:25:77:7b:68:ae:8d:17:2d:73:49: 87:2a:07:26:e9:73:b5:ed:fd:c0:87:04:86:75:c4: ec:0c:da:68:0d:18:d4:7e:71:f7:a3:25:4f:e5:28: a8:60:28:0d:2c:a9:15:1c:60:4f:6b:b3:10:56:b2: e4:df:1c:f3:3f:a4:6f:a7:e9:d3:7f:20:67:e3:5e: 1b:85:45:4c:38:4c:cc:a7:bb:89:27:fb:53:d5:1c: ea:20:8c:bd:19:68:4a:07:d8:25:88:1b:01:6d:29: 92:ba:e2:ad:72:a9:98:d0:b5:89:8d:b4:ed:80:8d: f7:1a:8d:69:1a:e2:45:99:d9:1b:89:85:71:58:0e: eb:78:8d:04:7a:df:f2:b8:06:6e:d2:ff:e6:f5:69: 6c:dc:01:03:55:77:d1:c4:06:b4:78:b1:81:b1:b6: 69:ea:c2:33:a0:19:fe:c3:ff:2d:fb:a8:81:a7:b2: 3b:a4:02:eb:ae:4e:e6:7d:35:13:09:4f:99:c3:d2: 27:50:79:45:ce:b2:9b:b4:f7:34:0a:a1:50:a5:42: 99:96:de:53:57:8c:e2:4b:b5:3f:5c:99:b2:f2:88: 1d:52:c6:15:e6:e4:c0:ed:8f:21:dc:3e:37:be:db: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:01:9B:7A:1A:B8:66:DA:D1:13:EB:4C:5F:1E:5C:47:4D:D3:9F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a98ca3c-771f-3a8d-bf92-840f0d61e998.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3c:06:91:bf:06:1f:f5:fc:94:d7:5f:1e:fb:ce:db:77:d6: 06:78:f9:f6:89:15:18:1c:a1:a3:1d:7b:b4:14:df:4b:a0:06: db:91:05:80:85:5a:6a:19:1d:36:ed:68:29:68:00:79:6b:61: 08:05:6b:49:ac:af:1b:24:b2:c1:ae:63:1d:e9:af:6a:5c:ca: 13:47:b5:e0:d1:aa:e7:28:d2:3c:a1:f7:9f:22:ce:32:e7:0d: 06:65:00:82:75:8f:9a:ab:2a:73:a3:15:6b:90:32:f6:0c:64: 87:da:50:d9:f5:4a:bf:9e:7d:37:ba:75:30:8e:55:52:0a:5c: 26:10:08:99:63:48:54:77:4f:7e:97:ef:a2:23:80:b9:f6:68: 2f:dd:44:60:15:2d:aa:79:1f:72:09:b3:0c:ef:65:89:84:87: d8:24:cc:d5:b3:54:08:0b:11:c7:fb:58:9c:41:06:df:d2:51: 3d:43:4b:8b:23:f5:95:cd:62:f4:9a:dc:53:2b:75:13:f8:8e: c1:99:89:46:8b:af:f2:52:67:3b:f9:8a:89:06:b5:35:7a:de: cb:9f:e1:e5:f1:2e:4b:36:33:e8:07:ce:4a:aa:bc:91:83:3d: 47:ca:18:86:b5:ec:81:ad:93:7b:f5:fb:76:88:b1:da:a4:29: 79:b3:fb:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIkbwATzehMKRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NDlkOGY4MTgtYjZlMy00MmFhLWE3ZTItNmJjZjFhNTg3ODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte5wM7Hbw3nfe1NzuJXRaY8GGyV3e2iujRct c0mHKgcm6XO17f3AhwSGdcTsDNpoDRjUfnH3oyVP5SioYCgNLKkVHGBPa7MQVrLk 3xzzP6Rvp+nTfyBn414bhUVMOEzMp7uJJ/tT1RzqIIy9GWhKB9gliBsBbSmSuuKt cqmY0LWJjbTtgI33Go1pGuJFmdkbiYVxWA7reI0Eet/yuAZu0v/m9Wls3AEDVXfR xAa0eLGBsbZp6sIzoBn+w/8t+6iBp7I7pALrrk7mfTUTCU+Zw9InUHlFzrKbtPc0 CqFQpUKZlt5TV4ziS7U/XJmy8ogdUsYV5uTA7Y8h3D43vtsY1QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAgBm3oauGba0RPrTF8eXEdN05/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE5OGNhM2MtNzcxZi0z YThkLWJmOTItODQwZjBkNjFlOTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAYPAaRvwYf9fyU118e+87bd9YGePn2iRUYHKGjHXu0FN9LoAbbkQWA hVpqGR027WgpaAB5a2EIBWtJrK8bJLLBrmMd6a9qXMoTR7Xg0arnKNI8ofefIs4y 5w0GZQCCdY+aqypzoxVrkDL2DGSH2lDZ9Uq/nn03unUwjlVSClwmEAiZY0hUd09+ l++iI4C59mgv3URgFS2qeR9yCbMM72WJhIfYJMzVs1QICxHH+1icQQbf0lE9Q0uL I/WVzWL0mtxTK3UT+I7BmYlGi6/yUmc7+YqJBrU1et7Ln+Hl8S5LNjPoB85KqryR gz1HyhiGteyBrZN79ft2iLHapCl5s/tT -----END CERTIFICATE-----Generated at Wed Oct 29 07:20:05 2025 by rpki-client