$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa File: cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa (raw, json) Hash identifier: IbLNFstc3II0l8fMbMSo8WKvu6Odg6mSpQYYXwt4pv8= Subject key identifier: 76:10:1C:B3:B7:B4:64:82:18:41:70:2D:24:FE:D0:21:1F:B9:AB:0E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8D57F42A0DF3F1AC4940 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396555 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:8d:57:f4:2a:0d:f3:f1:ac:49:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=af4f706d-77fb-4452-9ca5-8605c97e74ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3b:3a:7e:c7:8f:87:fd:7e:b9:1f:15:a3:e5: 70:04:a1:b7:17:ed:38:da:49:c4:e0:c4:69:9b:25: 8a:ec:fc:c5:3f:15:e2:10:99:46:84:0e:7a:54:d8: cd:7c:e1:c0:52:68:24:50:a6:41:85:7f:b4:8b:ab: 57:1e:a2:94:a9:e8:4e:83:74:2c:2b:5f:5e:38:03: bb:f8:ce:ab:63:b5:1a:7b:33:ee:eb:10:99:6b:01: 1f:b4:47:26:1b:6a:5a:82:9f:ae:e2:d4:51:ca:22: 03:ba:af:1b:0a:1c:22:00:6f:b8:74:40:45:67:ae: 4c:ca:bd:1b:21:27:d9:c8:b7:d5:e0:12:a6:85:68: 3e:6c:fd:e5:80:b0:f3:ad:13:48:72:f0:97:22:12: 2f:a3:cd:ea:82:a8:d2:e7:1c:01:7a:bc:4c:fc:fb: 5d:53:34:1b:d8:97:fc:9e:ed:c1:fb:b2:20:46:77: 42:9c:89:ad:ba:dc:09:8a:44:7c:24:f0:aa:b2:4a: 6d:3d:18:fb:70:8e:44:09:ef:68:94:43:24:b2:5c: a4:f3:07:c0:7e:05:59:55:6d:8b:84:50:f7:9f:34: 89:96:68:b1:a6:1f:06:67:2c:19:36:88:3a:d9:a9: 0f:80:78:93:9a:fc:e2:23:e9:5f:4b:4d:60:f5:0a: 42:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:10:1C:B3:B7:B4:64:82:18:41:70:2D:24:FE:D0:21:1F:B9:AB:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb2aade8-1d06-36da-afb9-6cd0d51a68ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:25:d2:c0:5e:36:3e:20:38:ad:9a:55:4d:3c:07:fa:96:15: 2f:96:f9:10:2b:4d:7d:a8:56:ce:de:9f:80:34:1b:2e:64:d8: a0:38:70:0c:88:18:29:d3:86:89:bd:a4:10:60:d6:b1:dd:d9: 82:35:5c:4f:d2:3f:c5:21:7e:1e:5e:72:43:c4:4e:7b:f7:d4: 5c:39:44:27:f3:8b:91:95:6e:e4:7b:9e:68:1e:e0:a0:65:22: 84:de:ff:46:99:ca:d5:89:a1:12:21:c3:fa:a3:ca:13:31:fd: e2:e8:af:73:34:91:43:7a:7c:45:b8:0e:5b:59:8f:19:47:6b: e5:0b:c6:bc:ce:4f:b4:02:39:90:c1:bf:19:71:f5:e0:30:78: 0e:2b:93:df:bb:5d:65:6f:17:be:2d:17:3e:78:e4:6b:f9:d0: 28:84:de:e5:c2:95:50:58:13:48:47:21:dc:97:0f:5e:3b:91: 64:c5:eb:bd:48:9b:d0:c3:32:64:cf:9a:b7:69:fa:8c:c1:fd: 8a:a8:2f:12:5f:71:f5:3e:82:98:7b:88:72:e6:c4:c9:c6:05: 1d:d4:04:6f:db:f0:58:98:4d:30:3b:34:0c:96:16:4f:09:e7: af:f9:5b:8d:0d:ad:b8:28:20:f5:8d:46:62:35:6c:0f:52:87: cb:55:2b:15 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfI1X9CoN8/GsSUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk YWY0ZjcwNmQtNzdmYi00NDUyLTljYTUtODYwNWM5N2U3NGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljs6fsePh/1+uR8Vo+VwBKG3F+042knE4MRp myWK7PzFPxXiEJlGhA56VNjNfOHAUmgkUKZBhX+0i6tXHqKUqehOg3QsK19eOAO7 +M6rY7UaezPu6xCZawEftEcmG2pagp+u4tRRyiIDuq8bChwiAG+4dEBFZ65Myr0b ISfZyLfV4BKmhWg+bP3lgLDzrRNIcvCXIhIvo83qgqjS5xwBerxM/PtdUzQb2Jf8 nu3B+7IgRndCnImtutwJikR8JPCqskptPRj7cI5ECe9olEMkslyk8wfAfgVZVW2L hFD3nzSJlmixph8GZywZNog62akPgHiTmvziI+lfS01g9QpCtwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHYQHLO3tGSCGEFwLST+0CEfuasOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IyYWFkZTgtMWQwNi0z NmRhLWFmYjktNmNkMGQ1MWE2OGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUJdLAXjY+IDitmlVNPAf6lhUvlvkQK019qFbO3p+ANBsuZNigOHAM iBgp04aJvaQQYNax3dmCNVxP0j/FIX4eXnJDxE5799RcOUQn84uRlW7ke55oHuCg ZSKE3v9GmcrViaESIcP6o8oTMf3i6K9zNJFDenxFuA5bWY8ZR2vlC8a8zk+0AjmQ wb8ZcfXgMHgOK5Pfu11lbxe+LRc+eORr+dAohN7lwpVQWBNIRyHclw9eO5Fkxeu9 SJvQwzJkz5q3afqMwf2KqC8SX3H1PoKYe4hy5sTJxgUd1ARv2/BYmE0wOzQMlhZP Ceev+VuNDa24KCD1jUZiNWwPUofLVSsV -----END CERTIFICATE-----Generated at Wed Oct 29 09:10:54 2025 by rpki-client