$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/945438c6-18fa-35fe-93e8-ff8ec227da98.roa File: 945438c6-18fa-35fe-93e8-ff8ec227da98.roa (raw, json) Hash identifier: jVOVe9Ol6OABei2HuZOKnBJC+bXopieb19xhQaHQE18= Subject key identifier: FB:F3:C1:D9:1B:1A:F2:B7:04:E9:B5:CE:83:05:5E:62:B1:48:13:39 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF74954D4D526D4F7118AC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/945438c6-18fa-35fe-93e8-ff8ec227da98.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396589 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:49:54:d4:d5:26:d4:f7:11:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=a5af3a3e-473a-4f9a-8ce3-66c5201a46ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:58:60:d5:35:eb:68:b5:8b:ae:3a:48:6a: 16:6b:23:26:87:db:7f:d8:f9:81:75:47:b9:8f:69: b0:d7:d5:e2:0d:fa:0e:0d:01:15:eb:bf:f6:a7:bf: b1:9b:1a:fd:e5:99:f3:53:ff:d7:02:25:d9:f8:3c: eb:a1:9f:39:8a:f6:fa:9b:b4:19:8f:ad:9e:a8:ac: 3b:95:71:69:bb:7d:92:a8:77:1d:bc:bc:be:72:18: 59:76:4b:40:de:7e:f1:b9:1d:12:9a:34:16:ca:fa: 43:59:69:98:b5:74:15:3a:a4:92:0e:45:7f:30:bb: 57:53:d5:8d:a4:49:f5:fa:08:91:5e:4d:31:57:01: fe:c9:e0:cb:69:17:be:25:5f:d6:b8:4a:f6:22:1b: 5b:3a:2a:80:82:e0:14:1a:7e:e3:ed:7a:d8:c4:43: 73:6a:c5:28:87:65:9c:ea:dc:8c:f2:96:bd:d0:be: ab:e6:cf:6b:22:06:79:b0:0d:53:80:dd:91:77:42: 9d:98:18:59:76:63:a9:c6:d2:d1:83:97:68:c5:68: 71:dc:40:73:75:52:ca:06:c3:c3:9a:22:2a:43:c5: b7:94:d4:bb:54:c8:e0:64:e8:fc:34:cf:94:4f:69: df:73:fe:d8:cf:20:72:73:84:1d:9a:78:49:a0:dc: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F3:C1:D9:1B:1A:F2:B7:04:E9:B5:CE:83:05:5E:62:B1:48:13:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/945438c6-18fa-35fe-93e8-ff8ec227da98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:9a:91:3f:d2:6b:f4:cb:c2:21:ee:d1:26:8d:b5:51:47:8f: 40:1a:62:d2:4b:28:d2:ab:1a:b6:ec:7a:63:48:bc:0e:5d:19: 26:87:76:f1:53:f9:02:67:20:36:96:3a:39:eb:24:ef:14:9e: 3a:3f:0d:30:96:fe:a3:69:1d:63:cf:0c:78:9b:af:b9:f9:b6: 20:32:a4:f2:18:ec:c0:ba:a0:5b:42:c4:df:69:5c:be:4b:e8: bb:f3:4a:83:98:ca:2d:d8:65:fc:be:85:97:6c:7a:f7:25:8c: 92:0a:c3:36:89:37:09:48:a5:cf:61:6f:e0:85:c2:ca:13:59: ba:d6:73:3e:a0:5a:ef:fe:17:4c:4a:3a:15:b6:28:c9:ef:e4: 34:be:90:97:0b:4b:a7:42:0d:16:81:d9:17:75:3f:e8:25:35: cc:ff:62:b7:1e:0c:88:f2:2e:46:60:10:e3:58:58:b0:06:db: 1f:03:e1:e4:83:5a:c6:bb:e2:17:4f:9c:f2:e2:50:1a:b7:89: bc:9d:1c:1b:8c:71:ff:9c:18:06:78:78:47:25:7d:82:d0:5f: 9b:ec:05:cb:be:f1:f7:83:bd:26:ba:81:81:76:a9:ec:c3:cd: 26:79:26:fd:bf:fe:cc:b2:82:4f:1e:fa:e2:5c:e0:64:59:71: 29:94:ef:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv90lU1NUm1PcRisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk YTVhZjNhM2UtNDczYS00ZjlhLThjZTMtNjZjNTIwMWE0NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKBYYNU162i1i646SGoWayMmh9t/2PmBdUe5 j2mw19XiDfoODQEV67/2p7+xmxr95ZnzU//XAiXZ+DzroZ85ivb6m7QZj62eqKw7 lXFpu32SqHcdvLy+chhZdktA3n7xuR0SmjQWyvpDWWmYtXQVOqSSDkV/MLtXU9WN pEn1+giRXk0xVwH+yeDLaRe+JV/WuEr2IhtbOiqAguAUGn7j7XrYxENzasUoh2Wc 6tyM8pa90L6r5s9rIgZ5sA1TgN2Rd0KdmBhZdmOpxtLRg5doxWhx3EBzdVLKBsPD miIqQ8W3lNS7VMjgZOj8NM+UT2nfc/7YzyByc4QdmnhJoNyqgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvzwdkbGvK3BOm1zoMFXmKxSBM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTQ1NDM4YzYtMThmYS0z NWZlLTkzZTgtZmY4ZWMyMjdkYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmakT/Sa/TLwiHu0SaNtVFHj0AaYtJLKNKrGrbsemNIvA5dGSaHdvFT +QJnIDaWOjnrJO8Unjo/DTCW/qNpHWPPDHibr7n5tiAypPIY7MC6oFtCxN9pXL5L 6LvzSoOYyi3YZfy+hZdsevcljJIKwzaJNwlIpc9hb+CFwsoTWbrWcz6gWu/+F0xK OhW2KMnv5DS+kJcLS6dCDRaB2Rd1P+glNcz/YrceDIjyLkZgEONYWLAG2x8D4eSD Wsa74hdPnPLiUBq3ibydHBuMcf+cGAZ4eEclfYLQX5vsBcu+8feDvSa6gYF2qezD zSZ5Jv2//syygk8e+uJc4GRZcSmU7+M= -----END CERTIFICATE-----Generated at Wed Oct 29 09:12:41 2025 by rpki-client