$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef0d798-ec26-3454-a114-40544d8e44fc.roa File: 3ef0d798-ec26-3454-a114-40544d8e44fc.roa (raw, json) Hash identifier: DLZeLHBfmXXLMa7Nn1f7dXOGcPDh2LCNpWWRV/QuBNg= Subject key identifier: E5:51:90:2A:60:69:79:68:46:47:07:D2:61:85:E4:AA:47:9C:54:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B540C846B3B7260B6597C3900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef0d798-ec26-3454-a114-40544d8e44fc.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 396596 IP address blocks: 192.68.130.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:84:6b:3b:72:60:b6:59:7c:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=df734f12-6587-4511-aa46-c15edd57a5fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7b:8c:31:3d:08:9c:85:e6:90:30:01:8c:79: f9:51:44:14:1c:c2:5a:64:ff:f1:5b:00:a2:5e:73: 22:f6:35:6d:d8:c1:84:d5:3a:a5:e9:2b:ef:02:f9: 16:1a:12:61:82:75:85:0f:35:c0:29:55:4d:5a:96: 73:15:42:a1:54:06:a1:43:8d:1a:f0:ba:0b:60:3d: 33:f8:0d:06:99:81:f2:a8:ae:0f:d3:ba:89:7e:3a: 6f:44:2a:27:83:2c:18:c4:ce:77:4a:ce:f0:f3:5f: 77:2f:22:d2:a9:95:80:ea:10:a3:d9:51:d3:78:ee: 0b:b0:1c:31:49:cb:ad:3e:82:36:e7:6f:23:4a:a5: 60:6c:b2:4f:7c:74:67:0f:08:86:d2:a1:ca:74:c6: 08:66:2b:0b:ad:5d:27:e6:06:35:08:19:fc:7c:f8: 3f:fc:f5:6a:74:63:0a:51:68:99:9e:97:05:a2:fd: a3:47:90:51:3d:6a:78:1c:5e:0b:a2:e6:c8:e9:88: 3f:03:39:a6:60:bb:b0:f9:d6:6a:c7:d4:91:36:ed: 57:66:5b:79:dc:24:b6:70:78:60:63:2b:64:7e:4a: b6:a6:17:cc:1c:e7:a8:2a:48:08:b7:11:7f:e8:9a: 27:b8:24:01:f9:02:4d:2b:fd:d9:19:87:dd:02:97: 02:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:51:90:2A:60:69:79:68:46:47:07:D2:61:85:E4:AA:47:9C:54:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ef0d798-ec26-3454-a114-40544d8e44fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.130.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:6d:20:6f:bb:08:b5:aa:21:b1:62:61:a9:ba:64:1e:74:76: af:64:9e:df:8b:de:99:56:dc:a3:96:89:5d:bd:cb:37:19:ff: 4d:15:03:33:90:fb:80:99:7e:be:44:0d:3f:86:1b:58:fd:a6: d7:ff:87:7b:26:d8:eb:4e:00:78:62:9e:95:3a:ba:11:03:be: ed:09:71:c3:ae:6b:e4:2f:8f:74:31:38:17:24:c9:12:f2:de: b5:4d:c6:f7:b5:64:4f:4b:25:94:23:ac:a0:33:6e:0d:66:34: 7a:cc:40:86:76:a5:bf:9d:4d:15:14:ec:a3:ca:91:26:8e:e6: 6a:cb:f9:e0:f6:cd:c9:a3:c1:21:d4:6f:92:2b:e0:60:34:6d: c4:f4:75:3a:4d:f8:0f:f1:d5:79:92:ed:de:b9:2f:92:89:c5: cb:98:2d:5e:46:c6:ea:75:56:7f:c9:72:7f:90:29:ad:1b:5d: bf:51:6a:e4:7d:91:42:e5:55:6d:dd:ca:3a:98:83:a7:7d:ad: e8:0e:1c:c7:91:6f:5b:2d:57:0f:54:8e:da:68:8e:66:58:54: 7b:19:2b:f8:fe:77:e6:3f:40:fd:49:6c:e3:c7:4d:da:ed:a0: a8:31:5c:58:f6:39:3a:58:4a:59:58:60:23:db:19:f0:eb:b9: 31:a6:ac:8f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtUDIRrO3Jgtll8OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk ZGY3MzRmMTItNjU4Ny00NTExLWFhNDYtYzE1ZWRkNTdhNWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonuMMT0InIXmkDABjHn5UUQUHMJaZP/xWwCi XnMi9jVt2MGE1Tql6SvvAvkWGhJhgnWFDzXAKVVNWpZzFUKhVAahQ40a8LoLYD0z +A0GmYHyqK4P07qJfjpvRCongywYxM53Ss7w8193LyLSqZWA6hCj2VHTeO4LsBwx ScutPoI2528jSqVgbLJPfHRnDwiG0qHKdMYIZisLrV0n5gY1CBn8fPg//PVqdGMK UWiZnpcFov2jR5BRPWp4HF4LoubI6Yg/AzmmYLuw+dZqx9SRNu1XZlt53CS2cHhg Yytkfkq2phfMHOeoKkgItxF/6JonuCQB+QJNK/3ZGYfdApcC7QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOVRkCpgaXloRkcH0mGF5KpHnFThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2VmMGQ3OTgtZWMyNi0z NDU0LWExMTQtNDA1NDRkOGU0NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC3bSBvuwi1qiGxYmGpumQedHavZJ7fi96ZVtyjloldvcs3Gf9NFQMz kPuAmX6+RA0/hhtY/abX/4d7JtjrTgB4Yp6VOroRA77tCXHDrmvkL490MTgXJMkS 8t61Tcb3tWRPSyWUI6ygM24NZjR6zECGdqW/nU0VFOyjypEmjuZqy/ng9s3Jo8Eh 1G+SK+BgNG3E9HU6TfgP8dV5ku3euS+SicXLmC1eRsbqdVZ/yXJ/kCmtG12/UWrk fZFC5VVt3co6mIOnfa3oDhzHkW9bLVcPVI7aaI5mWFR7GSv4/nfmP0D9SWzjx03a 7aCoMVxY9jk6WEpZWGAj2xnw67kxpqyP -----END CERTIFICATE-----Generated at Wed Oct 29 07:19:27 2025 by rpki-client