$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dca3ea2-d53f-3421-9987-9a4d730e5e3a.roa File: 2dca3ea2-d53f-3421-9987-9a4d730e5e3a.roa (raw, json) Hash identifier: JvBUx8IXZNaNG1WZZPOUHlpeuhNQ/bChFZYyZ9ip0IE= Subject key identifier: B1:65:5A:C2:7E:83:63:65:73:D1:9C:98:B1:72:1D:AC:0F:28:D4:AB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A61E347B33BA5525C03A980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dca3ea2-d53f-3421-9987-9a4d730e5e3a.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 36629 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:61:e3:47:b3:3b:a5:52:5c:03:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=ebf8c2ea-56ef-412c-9704-371b8d79eca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:92:e4:56:68:b6:aa:9b:44:da:c5:01:9b: c2:42:ea:8d:80:92:07:7b:90:7b:9d:83:40:3f:ec: 1e:77:aa:e5:cd:bd:ab:60:c6:95:a2:53:87:38:aa: 66:a6:27:7b:f4:a0:04:f0:d4:e1:bf:ec:16:5c:6b: 86:d8:8f:13:51:62:fd:00:5d:ce:79:aa:f7:1f:c7: d8:23:8b:13:72:19:78:31:89:d3:81:be:b1:b9:1a: 55:3b:d5:c4:a6:f0:73:8c:89:31:3d:04:17:e4:42: 80:9a:86:99:d6:7e:f3:20:68:fb:ac:d7:bb:a1:7a: 6e:08:bb:68:2a:3d:28:c6:50:c9:97:3c:da:e6:34: a8:45:80:74:d0:e7:9c:86:15:7f:45:b0:20:b3:c7: aa:f4:7f:9e:af:34:a3:3c:ec:bb:11:b1:a3:24:c4: cc:28:90:3f:78:54:90:9b:31:29:3e:99:d2:c3:3e: b2:73:2b:8b:f0:5a:0a:5b:e3:3e:14:e5:1e:93:3e: 05:9b:40:d6:dd:26:ca:87:a8:56:05:3d:03:86:5e: 93:a6:5d:80:c6:88:94:da:ef:97:5b:8d:7c:8b:6d: 74:9d:d2:2f:e0:87:bc:d3:31:90:b1:69:e2:72:ca: b2:34:9c:56:19:ba:5a:06:a9:16:9c:32:24:ee:9e: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:65:5A:C2:7E:83:63:65:73:D1:9C:98:B1:72:1D:AC:0F:28:D4:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2dca3ea2-d53f-3421-9987-9a4d730e5e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:1c:d5:94:2f:ed:6c:87:97:bb:a6:cf:f4:7b:f9:2a:60:f0: 8b:92:1e:80:59:85:a0:f8:28:ee:ff:00:02:ff:ee:37:d6:b0: 3d:20:b6:c4:a0:e0:45:54:11:bb:87:20:5a:2f:bb:44:7c:6a: 35:21:04:47:49:ec:a5:ff:b4:1a:42:2b:b5:89:f0:c2:b5:c7: be:d7:33:25:08:58:8d:cc:80:71:a1:0d:1d:26:11:f0:6a:75: 1e:e7:fc:16:f0:e6:cf:d0:1c:1c:b7:4b:13:01:99:8e:bc:da: 87:45:9e:0e:c9:ec:49:de:12:8c:94:6c:e2:30:96:39:8a:0a: 08:95:2c:8f:a8:5a:a6:ce:d0:83:56:6d:1a:1f:2c:82:7d:e7: 91:36:c1:ef:3a:f0:bc:50:e8:ac:b1:25:e8:be:20:ae:f7:cd: ce:c5:68:42:76:6a:4a:03:e5:91:6a:a1:f4:33:17:3d:00:7f: 84:07:7e:e0:8f:2f:07:a2:67:6e:f6:b7:77:a6:a3:13:ee:1c: 34:d6:f9:98:ce:65:b8:56:d7:97:08:84:ad:d7:f6:2f:91:ff: da:89:2e:34:2c:26:23:ea:60:e7:e5:cb:55:5e:39:56:db:4a: 3c:e6:39:0c:52:9e:6f:58:11:a9:89:ac:af:8b:b9:88:1b:86: e1:66:2e:a9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYeNHszulUlwDqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk ZWJmOGMyZWEtNTZlZi00MTJjLTk3MDQtMzcxYjhkNzllY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYGS5FZotqqbRNrFAZvCQuqNgJIHe5B7nYNA P+wed6rlzb2rYMaVolOHOKpmpid79KAE8NThv+wWXGuG2I8TUWL9AF3Oear3H8fY I4sTchl4MYnTgb6xuRpVO9XEpvBzjIkxPQQX5EKAmoaZ1n7zIGj7rNe7oXpuCLto Kj0oxlDJlzza5jSoRYB00OechhV/RbAgs8eq9H+erzSjPOy7EbGjJMTMKJA/eFSQ mzEpPpnSwz6ycyuL8FoKW+M+FOUekz4Fm0DW3SbKh6hWBT0Dhl6Tpl2AxoiU2u+X W418i210ndIv4Ie80zGQsWnicsqyNJxWGbpaBqkWnDIk7p4NhQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFLFlWsJ+g2Nlc9GcmLFyHawPKNSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmRjYTNlYTItZDUzZi0z NDIxLTk5ODctOWE0ZDczMGU1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZHNWUL+1sh5e7ps/0e/kqYPCLkh6AWYWg+Cju/wAC/+431rA9ILbE oOBFVBG7hyBaL7tEfGo1IQRHSeyl/7QaQiu1ifDCtce+1zMlCFiNzIBxoQ0dJhHw anUe5/wW8ObP0Bwct0sTAZmOvNqHRZ4OyexJ3hKMlGziMJY5igoIlSyPqFqmztCD Vm0aHyyCfeeRNsHvOvC8UOissSXoviCu983OxWhCdmpKA+WRaqH0Mxc9AH+EB37g jy8Homdu9rd3pqMT7hw01vmYzmW4VteXCISt1/Yvkf/aiS40LCYj6mDn5ctVXjlW 20o85jkMUp5vWBGpiayvi7mIG4bhZi6p -----END CERTIFICATE-----Generated at Wed Oct 29 07:16:04 2025 by rpki-client