$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f521a8db-0599-30fa-9c38-509bcd40a6da.roa File: f521a8db-0599-30fa-9c38-509bcd40a6da.roa (raw, json) Hash identifier: NoZnk6oAGOnN4aRWjPLqevaR4gP4iocwQZUuzxR8e1k= Subject key identifier: 87:74:B0:A4:87:72:FD:36:31:FE:33:B2:0C:61:B5:6B:88:74:35:2C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6FF734A6A7E3ADC9EDFFD5C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f521a8db-0599-30fa-9c38-509bcd40a6da.roa Signing time: Tue 07 Oct 2025 01:00:29 +0000 ROA not before: Tue 07 Oct 2025 01:00:29 +0000 ROA not after: Mon 05 Jan 2026 02:00:29 +0000 asID: 396576 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:f7:34:a6:a7:e3:ad:c9:ed:ff:d5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 7 01:00:29 2025 GMT Not After : Jan 5 02:00:29 2026 GMT Subject: CN=0d7d4b65-0f02-4d56-a2e5-427ec77796ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8d:55:19:dc:e9:1b:28:14:97:32:eb:c0:5d: b3:2c:2d:51:58:32:24:aa:d1:e0:3d:f6:f5:c1:ac: 32:39:1f:88:f3:dd:89:49:bb:77:4b:78:35:d7:12: f8:16:60:29:e0:1a:ac:1b:60:13:19:11:b2:98:ea: 1c:9e:91:39:27:e2:b7:6e:86:81:36:e0:cc:c8:51: 0c:a4:98:49:83:fb:b9:5e:0e:c0:2f:5a:4c:06:a3: 05:b6:e5:e3:a8:da:59:53:b4:ab:9d:7b:13:2e:3f: 6d:a9:a2:1b:9a:c9:da:a8:f9:89:c9:08:fd:19:0a: 6c:a1:28:5d:72:70:da:66:31:6c:f1:37:f6:b2:d0: b4:54:14:67:15:d4:51:3d:1b:fe:76:bb:73:8c:40: da:2a:59:62:82:ca:96:77:29:d1:75:c7:2f:00:ac: 38:f4:82:fd:98:7b:02:ab:c9:2a:e5:e9:3f:66:53: 93:c9:29:84:38:a3:35:d0:29:a5:27:c6:6a:e3:7c: 7a:49:af:08:d5:9d:89:7d:c8:2e:66:78:16:39:97: eb:c7:0f:be:e3:2d:92:ca:2d:ea:f0:e9:db:5a:4a: 47:bc:9b:cd:77:30:9c:a3:a5:81:36:5c:8d:bf:94: f9:2e:de:a7:40:4b:ff:9e:be:8a:59:1f:c3:86:4a: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:74:B0:A4:87:72:FD:36:31:FE:33:B2:0C:61:B5:6B:88:74:35:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f521a8db-0599-30fa-9c38-509bcd40a6da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e8:74:8e:47:d4:f8:b4:b6:28:a2:34:bd:e5:5e:8d:4e:43: 37:de:3b:c9:d9:bf:a0:37:c1:4c:d2:fb:d7:ee:be:ee:4a:14: ab:f2:96:a4:e1:84:5c:62:31:b5:a6:cb:45:62:ce:d8:44:7a: 5e:94:c4:ef:7e:27:7e:7b:c9:37:0e:17:9e:e9:ff:f8:d8:d3: 96:1c:78:79:eb:be:ed:d6:c4:6c:dd:01:65:0e:99:94:e0:58: da:17:15:e7:4f:20:e3:5d:68:aa:aa:cd:80:9b:c5:40:c8:c7: ba:ef:ef:83:b2:fd:81:84:ea:5c:0b:9e:f6:19:b1:8f:b9:e5: eb:0e:4c:e5:0a:d8:05:a8:1c:6d:c8:90:2c:24:5b:3a:52:72: 77:4c:ae:32:5a:28:11:da:3c:5a:03:fb:89:70:52:08:9e:b2: f0:ef:c0:8b:20:56:c5:2e:f8:d1:a5:9b:a3:cd:e0:bf:42:48: fb:bf:e5:62:52:9e:d6:cd:3f:d2:02:5a:0a:53:a7:ba:65:9b: 3b:1d:d5:51:ec:6f:79:24:ef:6f:ff:0f:84:98:8b:5a:0d:71: 40:e4:e3:47:5e:76:1e:ac:65:4f:ed:f8:af:16:ef:d9:c5:6c: 46:d8:2c:43:71:51:16:8e:bd:ed:21:e4:de:33:ea:d1:0f:7a: 0d:56:23:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtv9zSmp+Otye3/1cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNzAxMDAyOVoXDTI2MDEwNTAyMDAyOVowLzEtMCsGA1UEAxMk MGQ3ZDRiNjUtMGYwMi00ZDU2LWEyZTUtNDI3ZWM3Nzc5NmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY1VGdzpGygUlzLrwF2zLC1RWDIkqtHgPfb1 wawyOR+I892JSbt3S3g11xL4FmAp4BqsG2ATGRGymOocnpE5J+K3boaBNuDMyFEM pJhJg/u5Xg7AL1pMBqMFtuXjqNpZU7SrnXsTLj9tqaIbmsnaqPmJyQj9GQpsoShd cnDaZjFs8Tf2stC0VBRnFdRRPRv+drtzjEDaKlligsqWdynRdccvAKw49IL9mHsC q8kq5ek/ZlOTySmEOKM10CmlJ8Zq43x6Sa8I1Z2JfcguZngWOZfrxw++4y2Syi3q 8OnbWkpHvJvNdzCco6WBNlyNv5T5Lt6nQEv/nr6KWR/DhkpteQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFId0sKSHcv02Mf4zsgxhtWuIdDUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjUyMWE4ZGItMDU5OS0z MGZhLTljMzgtNTA5YmNkNDBhNmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrodI5H1Pi0tiiiNL3lXo1OQzfeO8nZv6A3wUzS+9fuvu5KFKvylqTh hFxiMbWmy0VizthEel6UxO9+J357yTcOF57p//jY05YceHnrvu3WxGzdAWUOmZTg WNoXFedPIONdaKqqzYCbxUDIx7rv74Oy/YGE6lwLnvYZsY+55esOTOUK2AWoHG3I kCwkWzpScndMrjJaKBHaPFoD+4lwUgiesvDvwIsgVsUu+NGlm6PN4L9CSPu/5WJS ntbNP9ICWgpTp7plmzsd1VHsb3kk72//D4SYi1oNcUDk40dedh6sZU/t+K8W79nF bEbYLENxURaOve0h5N4z6tEPeg1WI8g= -----END CERTIFICATE-----Generated at Wed Oct 29 09:10:57 2025 by rpki-client