$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa File: c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa (raw, json) Hash identifier: D5npxcyEsCip03hcPJw51ytAvaT0qMMm56iM+6Q4Y/0= Subject key identifier: 00:99:63:D6:A7:1F:6F:5F:04:5D:BE:F2:79:75:79:4A:95:7A:CC:57 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B39870E7574EEE72F295DA740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 396571 IP address blocks: 192.42.173.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:0e:75:74:ee:e7:2f:29:5d:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=a51032eb-3286-4099-a9b4-82f2b9aa0ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:76:e6:b4:aa:34:5c:c4:13:b7:f7:82:47:84: 52:af:97:b5:52:e0:31:21:44:4f:98:48:b6:a8:9d: b4:b8:32:02:2f:97:ca:ae:30:19:b3:39:b7:fb:d6: f0:24:c8:48:e1:5e:8e:e0:63:75:70:15:ec:33:96: 85:5d:32:33:32:db:78:b7:4f:e4:78:f0:0f:cf:4b: be:91:57:33:c1:bd:ab:26:31:89:8f:11:9f:46:09: 0b:23:18:7f:d7:fb:20:8e:37:4a:03:95:4d:0f:37: d8:83:9c:52:ea:79:0b:cc:53:6c:31:1f:66:4f:fa: e6:e5:f8:33:1e:09:35:94:70:2f:8f:8b:35:cf:48: f0:b7:9d:22:f6:64:2f:60:6d:dd:ad:22:21:0f:d1: 78:bf:20:cc:d7:d2:f2:c4:6b:1b:4f:e8:0f:e4:3b: 7c:a2:4e:93:90:95:a4:3e:ab:cd:53:d8:b6:71:db: 38:d4:5e:c7:f7:a0:1a:ad:40:96:b9:89:36:f0:62: eb:b5:3e:f0:e9:80:d7:81:67:e0:00:d8:23:da:38: a3:93:e9:b6:e0:7f:91:29:44:5a:ba:d9:94:48:ce: 51:63:7b:d6:2e:be:3a:d7:1b:fd:ae:af:73:f5:87: 7c:3c:22:53:1b:a7:d6:2a:41:35:a4:6b:a0:c3:01: 92:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:99:63:D6:A7:1F:6F:5F:04:5D:BE:F2:79:75:79:4A:95:7A:CC:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c297f7c8-15c0-3bdf-b237-79f87dd063d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.173.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:ec:1b:79:22:9d:2a:12:34:e2:36:89:16:de:7a:34:3b:70: cd:38:b7:69:60:d7:b3:b1:61:28:b8:c0:15:b8:ca:c4:ec:6b: 63:75:0d:b1:7e:82:f9:5c:21:ab:da:b6:db:68:23:c1:81:85: 86:ac:9f:09:dd:94:b5:ce:bb:d6:eb:cf:35:6a:ed:52:06:2f: 4e:4c:eb:24:65:41:cf:26:d4:7b:14:02:50:26:31:d9:1b:63: 42:41:9c:b8:86:7c:9c:4b:c6:fd:46:b2:e4:0d:10:65:13:6c: 1b:03:3d:35:47:df:80:2a:ec:19:66:c2:21:e7:c5:55:84:0c: 3d:8a:11:16:25:2c:e1:5f:9c:67:a8:04:94:47:91:e7:71:16: d6:ac:a5:b2:81:8f:cb:1b:61:4e:e7:46:a0:93:72:91:f6:1e: 4e:9a:cc:78:3b:3c:e5:8a:09:41:fc:8e:a5:b9:d9:ac:82:d7: 74:68:49:67:c0:89:4f:97:57:17:12:27:e4:3b:b9:14:cc:15: 14:67:43:4d:f5:78:f6:ef:06:a2:be:b6:2d:38:27:e2:1b:91: 8d:2a:a1:6f:31:8e:36:63:6e:0d:c3:d0:32:95:b5:2a:56:46: fd:dd:af:34:e3:80:8f:2a:65:66:77:9c:19:9f:c2:ce:9c:a2: fd:22:f2:ba -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEs5hw51dO7nLyldp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk YTUxMDMyZWItMzI4Ni00MDk5LWE5YjQtODJmMmI5YWEwZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXbmtKo0XMQTt/eCR4RSr5e1UuAxIURPmEi2 qJ20uDICL5fKrjAZszm3+9bwJMhI4V6O4GN1cBXsM5aFXTIzMtt4t0/kePAPz0u+ kVczwb2rJjGJjxGfRgkLIxh/1/sgjjdKA5VNDzfYg5xS6nkLzFNsMR9mT/rm5fgz Hgk1lHAvj4s1z0jwt50i9mQvYG3drSIhD9F4vyDM19LyxGsbT+gP5Dt8ok6TkJWk PqvNU9i2cds41F7H96AarUCWuYk28GLrtT7w6YDXgWfgANgj2jijk+m24H+RKURa utmUSM5RY3vWLr461xv9rq9z9Yd8PCJTG6fWKkE1pGugwwGSAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFACZY9anH29fBF2+8nl1eUqVesxXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzI5N2Y3YzgtMTVjMC0z YmRmLWIyMzctNzlmODdkZDA2M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqtHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAz7Bt5Ip0qEjTiNokW3no0O3DNOLdpYNezsWEouMAVuMrE7GtjdQ2x foL5XCGr2rbbaCPBgYWGrJ8J3ZS1zrvW6881au1SBi9OTOskZUHPJtR7FAJQJjHZ G2NCQZy4hnycS8b9RrLkDRBlE2wbAz01R9+AKuwZZsIh58VVhAw9ihEWJSzhX5xn qASUR5HncRbWrKWygY/LG2FO50agk3KR9h5Omsx4OzzliglB/I6ludmsgtd0aEln wIlPl1cXEifkO7kUzBUUZ0NN9Xj27waivrYtOCfiG5GNKqFvMY42Y24Nw9AylbUq Vkb93a8044CPKmVmd5wZn8LOnKL9IvK6 -----END CERTIFICATE-----Generated at Wed Oct 29 09:20:56 2025 by rpki-client