$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3674c388-a88f-3785-a854-8f3efdc1a8ec.roa File: 3674c388-a88f-3785-a854-8f3efdc1a8ec.roa (raw, json) Hash identifier: U5J9ISvUPG+SQ4Gbbly3uSK/xpZw/Hz2bSXoIqNCGhc= Subject key identifier: D8:7D:46:07:F1:7A:9B:F0:56:B9:66:F8:F5:64:DA:33:32:E0:5F:D5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C910259587990D0DAA700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3674c388-a88f-3785-a854-8f3efdc1a8ec.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 21313 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:91:02:59:58:79:90:d0:da:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=b7be2ca7-a992-4121-ae6d-1a2c1f8eb008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:e9:45:dd:83:f0:0c:a7:a0:13:d2:1f:3e: e5:76:a9:25:05:da:bb:71:8d:d4:e9:0c:e2:7e:1f: 69:6a:06:ed:5e:af:83:8e:93:20:aa:e0:f6:d9:58: b4:d7:53:c5:d5:bf:41:57:d3:86:a5:37:37:5a:4b: 43:93:6a:56:c3:7c:74:d5:95:a8:0c:c9:07:65:03: a8:86:3a:22:84:06:6d:8e:3b:1d:4f:be:05:53:7d: a5:d9:b4:12:48:75:02:16:6b:00:25:ee:68:92:df: 43:72:7b:b6:f1:85:0c:e9:ee:c4:80:cf:a6:8e:1a: 6d:65:62:58:77:4b:e9:b0:d2:a1:c3:ab:6d:5d:6a: fb:e0:35:35:73:21:9b:af:3c:21:18:82:db:32:69: cf:59:7d:e8:33:05:3c:66:86:26:2b:b1:a9:fa:9d: 3b:a4:ea:da:4b:eb:93:39:d2:55:6e:0f:a4:99:aa: 6e:c3:36:ee:18:b7:94:60:27:be:75:7d:6b:39:82: c2:a3:b6:46:65:3b:91:7b:3a:40:1d:f9:9d:3d:1b: 72:7b:e9:59:1f:fc:90:28:0f:39:f5:33:72:97:48: 0b:07:ff:a6:40:7a:76:27:29:f4:3e:c5:bd:f1:b6: 1a:0a:31:c9:de:1c:ab:62:8d:be:b5:54:62:19:ba: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:7D:46:07:F1:7A:9B:F0:56:B9:66:F8:F5:64:DA:33:32:E0:5F:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3674c388-a88f-3785-a854-8f3efdc1a8ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:36:7c:ee:bb:18:56:97:17:3d:04:83:b6:1c:f7:d4:ac:d1: f7:f0:60:e1:c4:55:98:e8:ac:39:5e:b8:d3:e3:f0:5c:bc:15: e5:63:f1:f7:e0:e3:e3:d9:b7:ba:87:06:c2:60:f4:6b:9d:d6: 71:c4:18:38:58:e5:7f:da:b8:ae:27:73:1e:2e:16:bc:30:94: d5:ab:b2:92:59:ec:59:85:d1:51:f6:66:11:22:e7:c3:67:50: 82:74:87:39:53:e2:77:7e:b8:74:5d:a1:60:2f:45:d6:61:c2: 63:8d:be:51:02:d3:46:a4:fe:44:0d:43:23:04:26:5d:2a:62: 96:b4:89:50:cc:de:01:eb:99:d0:33:65:c6:86:da:9d:d3:5e: fb:d8:56:be:32:c5:73:85:f9:59:85:7b:44:56:f3:cf:01:05: 0a:d9:af:f9:f3:b1:64:c1:5d:2b:a8:ab:a6:73:48:c8:04:e1: 44:e3:3e:f4:4f:e4:e3:76:f9:2b:7b:34:21:d6:c1:4e:61:46: 90:f4:60:d1:a0:07:5d:b0:3d:a6:15:ce:b7:eb:eb:80:86:cb: 3c:b2:53:59:8c:1d:90:30:db:6c:42:1f:d9:0a:fb:69:2a:99: 05:a8:df:88:8c:44:14:bf:68:ac:1d:91:db:d6:f8:d8:25:7f: 49:d4:ae:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfJECWVh5kNDapwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YjdiZTJjYTctYTk5Mi00MTIxLWFlNmQtMWEyYzFmOGViMDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2npRd2D8AynoBPSHz7ldqklBdq7cY3U6Qzi fh9pagbtXq+DjpMgquD22Vi011PF1b9BV9OGpTc3WktDk2pWw3x01ZWoDMkHZQOo hjoihAZtjjsdT74FU32l2bQSSHUCFmsAJe5okt9Dcnu28YUM6e7EgM+mjhptZWJY d0vpsNKhw6ttXWr74DU1cyGbrzwhGILbMmnPWX3oMwU8ZoYmK7Gp+p07pOraS+uT OdJVbg+kmapuwzbuGLeUYCe+dX1rOYLCo7ZGZTuRezpAHfmdPRtye+lZH/yQKA85 9TNyl0gLB/+mQHp2Jyn0PsW98bYaCjHJ3hyrYo2+tVRiGboDvwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNh9RgfxepvwVrlm+PVk2jMy4F/VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzY3NGMzODgtYTg4Zi0z Nzg1LWE4NTQtOGYzZWZkYzFhOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAwNnzuuxhWlxc9BIO2HPfUrNH38GDhxFWY6Kw5XrjT4/BcvBXlY/H3 4OPj2be6hwbCYPRrndZxxBg4WOV/2riuJ3MeLha8MJTVq7KSWexZhdFR9mYRIufD Z1CCdIc5U+J3frh0XaFgL0XWYcJjjb5RAtNGpP5EDUMjBCZdKmKWtIlQzN4B65nQ M2XGhtqd01772Fa+MsVzhflZhXtEVvPPAQUK2a/587FkwV0rqKumc0jIBOFE4z70 T+TjdvkrezQh1sFOYUaQ9GDRoAddsD2mFc636+uAhss8slNZjB2QMNtsQh/ZCvtp KpkFqN+IjEQUv2isHZHb1vjYJX9J1K6q -----END CERTIFICATE-----Generated at Wed Oct 29 07:22:50 2025 by rpki-client