$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2ab224-25a3-366f-8164-87a4c5564e32.roa File: be2ab224-25a3-366f-8164-87a4c5564e32.roa (raw, json) Hash identifier: nQ4L4uxGVXznUQUzNJ72PdJOw4LUueueMxOk9zLSkuM= Subject key identifier: 52:5C:0E:9E:73:CC:46:E7:44:F3:D6:5F:21:86:F3:9C:63:0E:42:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8EE0F6E2796B7F0AD288 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2ab224-25a3-366f-8164-87a4c5564e32.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 36631 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8e:e0:f6:e2:79:6b:7f:0a:d2:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=b575f150-4997-448f-b31a-191901222527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:49:6e:98:33:f1:0b:eb:22:c6:29:c4:f9: 46:16:58:b4:b4:d3:f2:66:cf:45:ba:05:39:40:a9: bb:4d:c4:c9:84:b2:f9:b4:05:78:61:28:6e:c2:bf: bd:fa:ce:f2:16:83:13:3d:8c:08:c1:10:64:59:2d: 6f:00:64:d1:37:4f:93:2a:dc:d3:87:2e:99:42:97: a8:73:c3:11:e7:2d:75:63:df:6f:d3:b7:67:5a:cf: 56:e1:18:d9:88:c6:04:b3:de:ff:a6:de:74:24:b4: d2:31:03:58:76:ca:87:b4:30:43:5d:e7:78:38:50: ae:a0:dc:40:f6:1e:4d:23:97:41:84:a8:11:b0:7f: 6c:71:83:ea:ff:94:62:08:f4:01:48:3d:a7:2c:1a: 32:0a:af:a9:3d:5f:40:e6:6e:f9:04:cc:ae:f4:a0: f1:65:51:78:3f:8a:ee:d6:70:7e:f3:7d:b0:30:44: f2:79:64:f7:7e:95:fe:1a:54:12:e3:c9:d5:95:19: 62:74:d0:85:a0:cc:6c:e4:ea:ad:bd:de:ca:dc:64: 7f:c5:7a:3d:0a:3b:57:69:c1:aa:a1:92:80:0a:88: 12:34:d5:55:a7:ca:dd:d7:eb:6b:2e:2d:ef:09:f9: 48:fd:8c:e0:7b:04:40:11:9b:2b:eb:78:31:e0:6b: 82:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5C:0E:9E:73:CC:46:E7:44:F3:D6:5F:21:86:F3:9C:63:0E:42:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be2ab224-25a3-366f-8164-87a4c5564e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:93:59:8c:7c:0b:be:a9:ab:65:8f:e9:26:b3:2c:ef:a1:4c: 7d:b9:d7:d6:c0:98:7b:42:16:51:7d:17:2b:39:35:b4:53:e7: 69:1e:cc:78:91:33:de:7a:c2:c2:09:4b:f1:81:eb:4d:fb:18: 6a:e4:41:ac:29:60:0b:0b:de:18:5e:cf:11:18:3e:4a:ac:c6: 11:dd:fc:8d:01:79:05:0e:2f:e0:e6:b0:c4:84:6c:72:b0:2d: 58:32:f6:df:dc:41:4a:cd:3f:ac:24:ed:68:e9:74:ec:2c:db: dc:55:cb:ed:ad:6e:3e:69:af:74:02:f5:90:90:12:27:b9:c6: 8f:31:89:07:bc:28:84:9b:49:f6:b8:51:8a:7c:50:b0:4b:02: 7b:57:49:18:d1:15:26:87:95:06:a8:23:e1:11:34:65:7b:32: 02:dc:29:6a:2b:79:82:8d:1e:65:97:86:95:7d:56:8b:5b:ce: 74:ca:c4:48:17:d7:57:a0:dd:17:3a:a8:a6:91:5b:05:86:b4: 4b:b1:f9:1f:6e:d1:d0:6f:47:19:1a:7c:5a:da:0a:36:88:d9: 3b:79:ad:88:8d:2d:59:69:a7:9d:46:aa:77:a2:87:0b:a0:c1: 81:9e:74:06:fc:1f:a7:03:45:3f:de:09:df:8f:33:ac:37:a4: cf:18:d2:78 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI7g9uJ5a38K0ogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YjU3NWYxNTAtNDk5Ny00NDhmLWIzMWEtMTkxOTAxMjIyNTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshJJbpgz8QvrIsYpxPlGFli0tNPyZs9FugU5 QKm7TcTJhLL5tAV4YShuwr+9+s7yFoMTPYwIwRBkWS1vAGTRN0+TKtzThy6ZQpeo c8MR5y11Y99v07dnWs9W4RjZiMYEs97/pt50JLTSMQNYdsqHtDBDXed4OFCuoNxA 9h5NI5dBhKgRsH9scYPq/5RiCPQBSD2nLBoyCq+pPV9A5m75BMyu9KDxZVF4P4ru 1nB+832wMETyeWT3fpX+GlQS48nVlRlidNCFoMxs5Oqtvd7K3GR/xXo9CjtXacGq oZKACogSNNVVp8rd1+trLi3vCflI/YzgewRAEZsr63gx4GuC3wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFJcDp5zzEbnRPPWXyGG85xjDkJ6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmUyYWIyMjQtMjVhMy0z NjZmLTgxNjQtODdhNGM1NTY0ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0k1mMfAu+qatlj+kmsyzvoUx9udfWwJh7QhZRfRcrOTW0U+dpHsx4 kTPeesLCCUvxgetN+xhq5EGsKWALC94YXs8RGD5KrMYR3fyNAXkFDi/g5rDEhGxy sC1YMvbf3EFKzT+sJO1o6XTsLNvcVcvtrW4+aa90AvWQkBInucaPMYkHvCiEm0n2 uFGKfFCwSwJ7V0kY0RUmh5UGqCPhETRlezIC3ClqK3mCjR5ll4aVfVaLW850ysRI F9dXoN0XOqimkVsFhrRLsfkfbtHQb0cZGnxa2go2iNk7ea2IjS1ZaaedRqp3oocL oMGBnnQG/B+nA0U/3gnfjzOsN6TPGNJ4 -----END CERTIFICATE-----Generated at Wed Oct 29 07:07:47 2025 by rpki-client