$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa File: e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa (raw, json) Hash identifier: YtpfvGxzbcbdV+VcByGpRwm38Z7IITRTW5NqVDoUpf4= Subject key identifier: A2:34:68:ED:E8:79:CA:41:F3:7D:12:AC:02:C8:9B:59:2B:48:92:40 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A6201F51C34F42A79CB2580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396599 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:01:f5:1c:34:f4:2a:79:cb:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=0f1c363d-e747-42a6-a990-2df9c810c7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:69:70:55:71:ce:b8:65:46:1a:bc:13:47:ed: c7:ac:ef:00:0e:1e:ab:89:99:71:5b:c8:7c:52:b2: 73:fc:bc:f7:2a:9b:23:e9:6f:29:67:4c:e2:ac:ec: 50:16:6b:0b:91:5f:eb:e6:5c:8f:36:a3:c0:97:22: 5e:50:8a:d5:54:ca:71:a3:6a:f7:f4:10:4e:da:b8: f8:05:de:74:4d:3a:a5:e2:ed:db:7d:d2:27:0e:07: 49:bb:47:a1:f7:ac:fd:78:f8:66:6a:e5:a9:05:ed: aa:d0:a8:53:9b:42:27:25:ab:27:0e:85:6e:7b:21: df:98:16:b2:fb:c1:8e:7b:4c:ca:2d:08:44:96:4d: b5:9f:07:02:15:16:65:93:a9:96:a7:ef:2d:bb:c9: 7b:f4:02:34:b0:2a:27:e1:10:ee:ed:a2:7d:c2:62: 7e:9b:90:a3:e0:8e:71:c7:86:63:7c:2b:5d:a8:30: 09:48:94:4a:29:81:88:2c:86:41:ab:e7:71:4b:62: dd:3e:00:ee:ee:7e:e3:da:3d:62:f3:09:ae:13:02: 35:15:d8:e0:af:e6:4d:18:41:72:d9:4e:f3:f9:81: d3:27:01:7a:72:cc:1c:7e:35:e5:25:9c:5b:55:a9: 74:61:cb:72:86:9c:db:98:9d:ba:b8:a5:60:54:ae: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:34:68:ED:E8:79:CA:41:F3:7D:12:AC:02:C8:9B:59:2B:48:92:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e60397b2-54b9-3d1a-bafe-4e67b2cd9786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:ec:21:a5:7e:fa:54:eb:48:b8:cc:bf:9b:5a:f0:dd:04:f2: 04:55:05:55:52:53:e7:53:16:ad:29:86:94:54:9c:cd:6f:7e: 19:99:7c:e6:ed:73:9d:36:63:25:3c:d1:6e:af:7d:f0:8d:5d: e7:0e:c1:d6:4c:e9:21:2c:5c:5b:fc:d2:09:22:f1:36:1b:53: 32:b2:75:99:da:75:cf:0a:4c:14:b9:48:63:6b:fe:4c:2c:76: 2f:46:ef:6c:ef:b9:23:c5:bc:ad:33:90:b0:8c:5a:8e:07:44: 47:36:ee:6f:48:45:d7:80:fc:45:81:92:05:3c:67:f9:41:83: 2d:c5:43:34:82:84:e7:e9:6e:cc:07:7c:6f:c9:2a:71:fa:0b: d5:09:bc:13:ca:23:53:be:f6:df:7c:c5:3a:bf:49:38:ad:ef: ea:8b:90:85:bb:b8:e4:ac:1b:da:fd:e5:69:05:60:ad:95:86: 47:36:77:7b:1d:ce:d7:6b:bb:40:8c:56:77:29:e2:15:a4:75: 2b:bb:3a:ce:67:e6:2d:f8:e3:a4:bc:06:b6:07:58:db:01:5f: 4a:e4:30:73:5b:ea:b5:fc:2d:bb:78:aa:84:1f:99:21:c7:30: bf:6c:53:01:83:76:b7:fc:46:66:23:70:b9:44:c4:0f:f1:79: 4d:07:40:ec -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYgH1HDT0KnnLJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk MGYxYzM2M2QtZTc0Ny00MmE2LWE5OTAtMmRmOWM4MTBjN2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWlwVXHOuGVGGrwTR+3HrO8ADh6riZlxW8h8 UrJz/Lz3Kpsj6W8pZ0zirOxQFmsLkV/r5lyPNqPAlyJeUIrVVMpxo2r39BBO2rj4 Bd50TTql4u3bfdInDgdJu0eh96z9ePhmauWpBe2q0KhTm0InJasnDoVueyHfmBay +8GOe0zKLQhElk21nwcCFRZlk6mWp+8tu8l79AI0sCon4RDu7aJ9wmJ+m5Cj4I5x x4ZjfCtdqDAJSJRKKYGILIZBq+dxS2LdPgDu7n7j2j1i8wmuEwI1Fdjgr+ZNGEFy 2U7z+YHTJwF6cswcfjXlJZxbVal0YctyhpzbmJ26uKVgVK5+qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKI0aO3oecpB830SrALIm1krSJJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTYwMzk3YjItNTRiOS0z ZDFhLWJhZmUtNGU2N2IyY2Q5Nzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCc7CGlfvpU60i4zL+bWvDdBPIEVQVVUlPnUxatKYaUVJzNb34ZmXzm 7XOdNmMlPNFur33wjV3nDsHWTOkhLFxb/NIJIvE2G1MysnWZ2nXPCkwUuUhja/5M LHYvRu9s77kjxbytM5CwjFqOB0RHNu5vSEXXgPxFgZIFPGf5QYMtxUM0goTn6W7M B3xvySpx+gvVCbwTyiNTvvbffMU6v0k4re/qi5CFu7jkrBva/eVpBWCtlYZHNnd7 Hc7Xa7tAjFZ3KeIVpHUruzrOZ+Yt+OOkvAa2B1jbAV9K5DBzW+q1/C27eKqEH5kh xzC/bFMBg3a3/EZmI3C5RMQP8XlNB0Ds -----END CERTIFICATE-----Generated at Wed Oct 29 09:20:29 2025 by rpki-client