$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa File: 3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa (raw, json) Hash identifier: y20c7MxGwb0oNIFXvmkWyfTQMWHXjsoPf7HFSADMTZc= Subject key identifier: D3:1F:07:2C:68:B3:F1:8A:FB:9F:DD:0B:7C:6D:63:0D:58:71:B0:A9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A620138779CB96ACB015D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396585 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:01:38:77:9c:b9:6a:cb:01:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=2d246fdc-12ab-4636-b91c-8a0c7c4b23c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:8a:62:40:54:22:8c:4d:8d:dd:8e:e7:56: 9e:fa:c4:87:3d:5e:1a:9c:cf:59:40:b2:5a:43:9e: 51:47:be:9f:96:c0:0c:9c:aa:ac:97:97:af:ae:33: 15:97:a9:c2:30:cd:a8:2e:05:1c:da:56:a9:dd:7b: 41:8c:d6:b8:18:d4:27:ad:d5:2d:80:10:fd:58:0f: 27:01:0a:4b:9b:57:4f:df:ca:3f:98:2c:c2:cf:9c: b6:ab:05:80:c8:77:a8:16:a6:f3:78:85:86:ad:17: 60:e6:f6:79:c2:e2:4c:b6:8d:66:0f:94:09:08:24: 76:b7:c6:ff:2b:c6:d0:7f:96:12:b3:ae:5b:a1:3a: a5:d4:d4:b9:9d:36:ab:31:dc:fb:a5:3d:d3:ff:b9: 37:1a:8f:bb:5d:5d:ab:ec:b5:5f:cd:58:ca:42:92: d5:27:7a:a2:b8:16:4c:e3:ee:f4:01:7e:4a:f9:d5: ef:c6:74:7c:61:d0:2a:3a:85:f8:75:71:12:e8:63: 3f:56:9c:80:a0:03:ea:fb:d2:45:fc:76:97:7e:2e: 2c:e6:e2:67:77:3c:a3:50:e4:42:82:33:c0:44:13: 74:0e:85:88:06:48:b7:1f:6a:f1:45:c1:59:d3:c3: 90:63:86:e5:ae:5e:7b:52:8a:26:08:79:86:52:bc: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:1F:07:2C:68:B3:F1:8A:FB:9F:DD:0B:7C:6D:63:0D:58:71:B0:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bafe09b-782b-32ab-adf9-bb1ff65a90d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:8e:58:38:94:2b:44:cc:3e:82:b9:76:f4:56:da:30:6e:c9: b8:a4:3e:71:95:92:5a:55:38:5a:5e:0d:94:d1:fe:15:b6:d5: 52:5c:db:ad:77:5b:d7:ab:b3:d4:bf:58:5d:0f:1d:05:25:bd: 59:36:18:13:d3:87:94:ef:f1:1e:7a:ce:d9:6e:27:09:c0:d6: f9:7d:28:77:9d:5c:4c:f2:76:b9:27:36:12:88:84:c1:36:ef: 2f:56:91:b8:e1:26:55:62:2e:88:b9:16:0c:f2:53:49:5d:a6: 21:c1:f7:3e:54:5c:3d:61:03:12:74:71:70:30:db:16:fe:c5: b4:83:a8:0c:f8:ab:e8:bf:e1:35:14:5b:ca:8c:37:10:39:a1: 15:12:2d:9b:c7:03:c6:f9:7a:7e:67:17:b7:92:cb:ba:9b:5b: 50:23:c3:73:0e:9d:21:9f:a3:cc:99:a6:e3:9a:0e:0a:e8:5a: 8a:46:db:83:67:2f:bc:0a:e8:9e:2c:62:79:20:a5:9b:25:31: bc:9c:9c:0b:57:0a:a1:b9:d4:a3:d0:bf:bd:b0:c1:83:c3:56: ce:cf:ca:66:48:30:2e:76:63:fa:22:9a:b0:23:5c:c2:a6:fe: ca:df:1f:3c:9f:cd:9c:3f:ea:d7:8c:7f:12:86:8f:bb:51:b5: fe:98:31:80 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYgE4d5y5assBXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MmQyNDZmZGMtMTJhYi00NjM2LWI5MWMtOGEwYzdjNGIyM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlaKYkBUIoxNjd2O51ae+sSHPV4anM9ZQLJa Q55RR76flsAMnKqsl5evrjMVl6nCMM2oLgUc2lap3XtBjNa4GNQnrdUtgBD9WA8n AQpLm1dP38o/mCzCz5y2qwWAyHeoFqbzeIWGrRdg5vZ5wuJMto1mD5QJCCR2t8b/ K8bQf5YSs65boTql1NS5nTarMdz7pT3T/7k3Go+7XV2r7LVfzVjKQpLVJ3qiuBZM 4+70AX5K+dXvxnR8YdAqOoX4dXES6GM/VpyAoAPq+9JF/HaXfi4s5uJndzyjUORC gjPARBN0DoWIBki3H2rxRcFZ08OQY4blrl57UoomCHmGUrzK8QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNMfByxos/GK+5/dC3xtYw1YcbCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2JhZmUwOWItNzgyYi0z MmFiLWFkZjktYmIxZmY2NWE5MGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANjlg4lCtEzD6CuXb0Vtowbsm4pD5xlZJaVThaXg2U0f4VttVSXNut d1vXq7PUv1hdDx0FJb1ZNhgT04eU7/Eees7ZbicJwNb5fSh3nVxM8na5JzYSiITB Nu8vVpG44SZVYi6IuRYM8lNJXaYhwfc+VFw9YQMSdHFwMNsW/sW0g6gM+Kvov+E1 FFvKjDcQOaEVEi2bxwPG+Xp+Zxe3ksu6m1tQI8NzDp0hn6PMmabjmg4K6FqKRtuD Zy+8CuieLGJ5IKWbJTG8nJwLVwqhudSj0L+9sMGDw1bOz8pmSDAudmP6IpqwI1zC pv7K3x88n82cP+rXjH8Sho+7UbX+mDGA -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:48 2025 by rpki-client