$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa File: f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa (raw, json) Hash identifier: YEC1uR7DjazOkGHzB2gQR/LQBQABmhXssPZEftVGQf4= Subject key identifier: 17:CF:4A:36:60:69:BA:3C:01:06:75:C2:8B:E8:5E:08:E6:5A:6D:2E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B477C8380CC9C488C80B56020 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 396597 IP address blocks: 192.68.126.31/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:83:80:cc:9c:48:8c:80:b5:60:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=614c1350-4566-4411-810f-389de6990a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8d:5e:ee:d1:20:e9:c4:52:4b:84:1a:65:ed: e4:2b:69:72:cc:f6:6d:ba:35:12:43:dd:1a:04:88: 45:2a:ba:8f:7c:26:39:61:d4:18:38:08:33:9b:ca: 19:6c:a6:7d:20:f3:cd:c2:41:6c:c9:87:21:7f:1c: f7:ee:7c:db:17:54:50:ce:9b:56:33:a8:05:bb:57: a0:bc:ce:03:82:2c:aa:30:e8:cd:3d:8f:7d:3f:22: d3:dd:a6:49:f3:96:42:a7:76:37:88:be:b3:b4:22: 16:b9:3c:55:03:46:be:6a:12:42:9c:9d:bc:5e:e0: 20:2a:1b:d2:7e:dd:92:48:b0:c0:fd:4b:59:ea:76: df:b9:21:28:36:7e:97:16:fc:ab:b5:23:ca:6d:f7: 80:71:21:14:2c:c7:57:5e:f5:fc:a2:74:f3:e0:6a: 0e:63:6e:f1:50:23:4a:84:4d:5d:c2:43:47:13:a6: 4e:d0:fa:db:31:a1:80:41:b4:06:18:13:4a:c2:cb: 75:15:9e:03:cd:b8:26:c9:9c:0e:e1:ee:8c:50:23: b1:59:55:9a:10:ee:31:5a:e6:ac:a9:83:01:52:f4: e0:bd:fb:05:83:45:6a:f1:f8:94:1c:ec:85:24:cd: 52:6d:91:5c:3b:9f:63:c9:4a:14:a7:f9:59:1d:d5: d3:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CF:4A:36:60:69:BA:3C:01:06:75:C2:8B:E8:5E:08:E6:5A:6D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1d0bd0a-bad8-3631-8b87-1e33560a66c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.31/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:2e:09:24:f8:87:0a:71:3b:ac:31:26:46:b7:fe:97:68:fb: a0:d9:5b:3e:5b:a4:a6:ac:af:8a:ad:82:f8:d3:24:03:be:fa: df:8e:bf:4f:b5:3c:09:c9:0e:20:09:22:74:cd:dc:62:3b:c3: 89:f1:f4:0e:91:d9:12:01:dd:71:e3:4f:ad:a7:c5:ac:84:2b: c2:7f:3a:9b:2b:b1:3e:dc:27:d5:d4:3c:7b:e2:ae:a5:89:cd: 98:46:24:96:86:0e:bf:03:2f:ca:62:8e:be:1e:cd:03:17:be: c3:2c:3c:29:27:1d:8d:b7:71:b1:a5:9b:64:83:95:ec:2e:ab: b9:2a:73:32:f1:fa:d9:63:02:c8:5e:a5:36:11:3c:fa:31:f4: 10:aa:04:05:4f:8c:99:d8:00:6f:68:04:70:a1:df:84:cc:e1: ce:91:87:15:28:b1:28:91:e2:ef:00:ba:a2:74:ec:5d:2b:6a: 56:72:e4:43:84:06:e4:d4:cc:10:fd:47:82:07:0b:fb:40:d2: 70:63:5c:e6:18:51:fe:41:b6:15:e9:78:fe:d8:db:bc:60:c9: b4:cc:46:b9:3c:9e:2a:e7:b4:6e:10:85:b4:4e:9b:d5:65:c2: 00:6e:5a:c0:45:f1:0d:ff:36:a8:82:53:ef:bd:c7:ce:65:67: 2f:b1:44:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtHfIOAzJxIjIC1YCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NjE0YzEzNTAtNDU2Ni00NDExLTgxMGYtMzg5ZGU2OTkwYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo1e7tEg6cRSS4QaZe3kK2lyzPZtujUSQ90a BIhFKrqPfCY5YdQYOAgzm8oZbKZ9IPPNwkFsyYchfxz37nzbF1RQzptWM6gFu1eg vM4DgiyqMOjNPY99PyLT3aZJ85ZCp3Y3iL6ztCIWuTxVA0a+ahJCnJ28XuAgKhvS ft2SSLDA/UtZ6nbfuSEoNn6XFvyrtSPKbfeAcSEULMdXXvX8onTz4GoOY27xUCNK hE1dwkNHE6ZO0PrbMaGAQbQGGBNKwst1FZ4DzbgmyZwO4e6MUCOxWVWaEO4xWuas qYMBUvTgvfsFg0Vq8fiUHOyFJM1SbZFcO59jyUoUp/lZHdXTQwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBfPSjZgabo8AQZ1wovoXgjmWm0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjFkMGJkMGEtYmFkOC0z NjMxLThiODctMWUzMzU2MGE2NmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA9Lgkk+IcKcTusMSZGt/6XaPug2Vs+W6SmrK+KrYL40yQDvvrfjr9P tTwJyQ4gCSJ0zdxiO8OJ8fQOkdkSAd1x40+tp8WshCvCfzqbK7E+3CfV1Dx74q6l ic2YRiSWhg6/Ay/KYo6+Hs0DF77DLDwpJx2Nt3GxpZtkg5XsLqu5KnMy8frZYwLI XqU2ETz6MfQQqgQFT4yZ2ABvaARwod+EzOHOkYcVKLEokeLvALqidOxdK2pWcuRD hAbk1MwQ/UeCBwv7QNJwY1zmGFH+QbYV6Xj+2Nu8YMm0zEa5PJ4q57RuEIW0TpvV ZcIAblrARfEN/zaoglPvvcfOZWcvsUQX -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:21 2025 by rpki-client