$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa File: 0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa (raw, json) Hash identifier: XTkV0Q72t2XreEIZSmLHVMgLrDnrfPAMrJKKyph+22c= Subject key identifier: 42:61:83:9D:DB:4D:A2:AA:07:81:16:EE:86:4B:0B:F8:15:61:B1:7C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC10B5FDFF581AED995B3B480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 25485 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:5f:df:f5:81:ae:d9:95:b3:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=e8f2585b-98da-47cd-b783-f4a083afd843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:29:fe:37:83:0d:e5:b3:f7:a1:49:01:23:aa: 3b:7a:38:9a:cb:f7:04:ea:94:6b:8c:57:a5:31:cc: 17:09:63:86:5c:1c:1d:40:a8:8d:9f:32:4a:40:0f: 89:08:2d:91:b4:40:66:42:4f:3d:2c:01:fe:02:db: fb:83:11:fd:b6:6f:04:57:b6:21:1a:58:e8:9b:3b: e7:30:e5:09:2f:3e:4c:d2:cf:c7:bf:9a:65:13:71: 15:2b:66:57:d2:6e:13:f5:4b:fd:ea:82:5a:0f:6a: 38:c0:b8:37:cd:44:e3:07:5b:b4:e4:20:39:93:3c: d5:b0:19:b1:0e:1f:18:d1:9a:ca:83:aa:0b:af:09: b8:45:cf:30:be:a8:1b:2c:63:8c:bd:de:42:2e:18: 5c:ba:61:0c:f0:a0:36:d6:d0:98:bd:c7:9f:33:08: 91:da:76:32:f9:5b:a2:a5:c5:31:66:dc:63:0a:b4: 89:e9:b7:ef:83:15:4a:5f:62:1f:9e:6a:15:13:38: 74:02:93:84:26:46:ad:91:c3:91:cf:4f:cd:89:b2: 39:59:8c:2f:05:58:97:0d:d2:10:6d:ce:04:91:87: 02:64:54:6e:70:76:64:27:f1:0f:91:68:f9:34:a0: 54:af:e7:f0:61:ae:f0:03:ca:3a:eb:c6:6e:62:14: 97:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:61:83:9D:DB:4D:A2:AA:07:81:16:EE:86:4B:0B:F8:15:61:B1:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9ebbd9-5d8d-3455-bbf3-d5d30a630248.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:19:5f:a7:63:b3:49:ef:57:07:b5:35:31:82:95:ec:0b:cf: 6b:48:7f:f8:14:af:d0:ae:c1:23:0c:52:3b:33:40:18:7c:fa: 49:49:c0:aa:8a:02:a0:16:4c:7c:b2:18:a2:b5:12:4d:a6:a0: b6:20:fd:1f:61:04:cd:2a:dd:76:cb:d0:f1:a2:a4:02:e1:2e: 57:1e:68:f5:5e:10:f5:43:68:c6:6c:1b:ea:4d:c0:9f:d3:1e: 38:98:31:05:74:27:3a:25:99:8b:f3:bb:57:74:f6:3b:75:af: fc:01:63:29:0c:7b:47:73:96:fb:9b:52:34:ad:c1:db:8c:7a: bc:58:47:73:19:ee:c2:a4:97:ac:66:06:30:61:bc:38:bf:8f: 61:7e:c8:92:4a:36:4f:e9:5e:e6:f8:0b:cd:51:23:fc:2a:a1: 76:7a:36:8a:7e:fe:6a:50:bd:17:b9:93:9c:96:29:58:77:1e: 6c:b5:19:af:5c:78:23:df:f6:50:a3:00:50:66:23:cd:af:4a: 49:98:34:95:4f:2e:7c:61:7a:fe:2f:af:44:da:0e:fc:53:c6: 23:02:53:2e:e1:c4:7f:bd:0c:b8:a3:fa:47:33:12:5d:4e:88: 6c:e0:c5:08:a5:9c:b9:4f:1b:f8:82:59:11:f2:45:a0:a2:85: c8:e5:94:d9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC1/f9YGu2ZWztIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZThmMjU4NWItOThkYS00N2NkLWI3ODMtZjRhMDgzYWZkODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSn+N4MN5bP3oUkBI6o7ejiay/cE6pRrjFel McwXCWOGXBwdQKiNnzJKQA+JCC2RtEBmQk89LAH+Atv7gxH9tm8EV7YhGljomzvn MOUJLz5M0s/Hv5plE3EVK2ZX0m4T9Uv96oJaD2o4wLg3zUTjB1u05CA5kzzVsBmx Dh8Y0ZrKg6oLrwm4Rc8wvqgbLGOMvd5CLhhcumEM8KA21tCYvcefMwiR2nYy+Vui pcUxZtxjCrSJ6bfvgxVKX2IfnmoVEzh0ApOEJkatkcORz0/NibI5WYwvBViXDdIQ bc4EkYcCZFRucHZkJ/EPkWj5NKBUr+fwYa7wA8o668ZuYhSXAQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEJhg53bTaKqB4EW7oZLC/gVYbF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI5ZWJiZDktNWQ4ZC0z NDU1LWJiZjMtZDVkMzBhNjMwMjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQArGV+nY7NJ71cHtTUxgpXsC89rSH/4FK/QrsEjDFI7M0AYfPpJScCq igKgFkx8shiitRJNpqC2IP0fYQTNKt12y9DxoqQC4S5XHmj1XhD1Q2jGbBvqTcCf 0x44mDEFdCc6JZmL87tXdPY7da/8AWMpDHtHc5b7m1I0rcHbjHq8WEdzGe7CpJes ZgYwYbw4v49hfsiSSjZP6V7m+AvNUSP8KqF2ejaKfv5qUL0XuZOclilYdx5stRmv XHgj3/ZQowBQZiPNr0pJmDSVTy58YXr+L69E2g78U8YjAlMu4cR/vQy4o/pHMxJd Tohs4MUIpZy5Txv4glkR8kWgooXI5ZTZ -----END CERTIFICATE-----Generated at Wed Nov 5 16:09:46 2025 by rpki-client