$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa File: 29b2130f-629d-3aed-8986-dcb239ea0420.roa (raw, json) Hash identifier: n58coqrdrrrAQ3gjYVnUcDO3OVqLQdYPRXUopmUI9j0= Subject key identifier: 7A:99:5B:01:86:5D:A6:8C:92:B7:1F:9B:87:1C:3F:42:CB:27:3D:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC10B634831D3FD48D2AEA900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 396592 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:63:48:31:d3:fd:48:d2:ae:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=8a9a93a5-ce87-4881-821e-671007061548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:0c:d1:76:33:9f:6a:db:47:17:06:42:38:a1: 0e:7b:21:8a:44:c4:b5:92:56:87:0d:a5:49:6e:dc: b8:e4:e7:60:04:32:38:87:76:36:de:fb:14:92:82: af:88:e3:6a:65:b8:44:11:42:f1:ea:cd:ab:4e:ed: fe:01:2d:58:2f:f3:be:2e:07:ad:cb:3c:bb:8b:c1: 87:3f:6e:37:62:9d:f7:35:10:c3:10:38:7b:44:c1: 59:08:4f:77:8b:74:dd:e2:52:7b:67:f4:46:b5:67: 9c:4e:61:a0:2c:db:4a:4d:a9:81:98:08:3e:9a:ae: e4:de:aa:b6:55:30:18:81:50:34:eb:81:19:8e:bb: 10:5f:72:dd:8b:35:07:f1:87:c2:af:7d:56:30:e7: b2:df:c0:9f:5f:a9:5a:12:67:a0:0c:80:a4:92:3b: ff:28:d8:2d:bf:8c:81:bf:d6:40:e6:91:29:29:0e: b3:ee:08:56:00:9c:e7:47:ab:4c:c1:e9:d0:fd:cd: 20:d9:ab:5b:67:d9:5b:74:29:c4:3b:40:ad:25:74: 77:5d:2d:36:c9:e1:ed:20:88:1d:cf:7a:cd:81:1b: cf:13:fa:37:2e:b7:19:48:e9:17:c5:84:4d:64:36: 4f:58:87:35:4d:fa:b2:29:f0:43:9b:bf:fb:2a:c1: b5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:99:5B:01:86:5D:A6:8C:92:B7:1F:9B:87:1C:3F:42:CB:27:3D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/29b2130f-629d-3aed-8986-dcb239ea0420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:e9:33:2c:04:f6:0e:f2:d9:5d:28:41:fe:25:40:5b:dc:f4: 76:44:6b:df:80:a7:08:5c:36:28:37:09:b7:59:a7:50:d8:cc: ce:dd:19:51:86:dc:d6:e3:c0:6a:39:42:6d:b7:9f:8c:2e:01: d3:f2:5f:d1:77:39:18:82:0c:f7:5d:e2:e0:49:15:aa:3b:8a: cb:79:f9:d5:60:a8:91:de:8b:b3:f5:59:63:4a:f8:61:44:c9: 91:8b:db:28:e2:cc:84:8e:aa:54:a8:be:3e:d5:e1:01:6e:75: 72:92:cb:55:b3:45:8c:f7:ae:7e:ea:85:a3:93:ae:3b:e7:b2: 73:4b:b5:f2:08:45:79:dc:7a:78:e0:5f:1c:81:49:40:da:49: b5:93:a9:ac:11:67:a2:35:1e:ac:59:3b:b3:f0:ec:c2:d5:ff: 8c:1e:8c:f1:a5:42:f6:36:18:b0:b6:d1:26:8a:ea:cd:29:f4: c2:e0:f2:e0:1f:b4:31:4d:da:e5:62:6e:0e:c2:e8:57:fe:4c: 80:bf:5b:4c:41:4e:39:70:01:d8:95:75:45:36:a8:9c:8f:01: 70:02:e5:2b:3d:43:a8:72:d8:1e:7f:58:39:8c:f6:8a:6d:ef: 89:9f:05:c5:86:1d:6f:88:e0:30:1b:cf:ae:47:81:b3:7a:11: 97:53:90:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC2NIMdP9SNKuqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk OGE5YTkzYTUtY2U4Ny00ODgxLTgyMWUtNjcxMDA3MDYxNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgzRdjOfattHFwZCOKEOeyGKRMS1klaHDaVJ bty45OdgBDI4h3Y23vsUkoKviONqZbhEEULx6s2rTu3+AS1YL/O+Lgetyzy7i8GH P243Yp33NRDDEDh7RMFZCE93i3Td4lJ7Z/RGtWecTmGgLNtKTamBmAg+mq7k3qq2 VTAYgVA064EZjrsQX3LdizUH8YfCr31WMOey38CfX6laEmegDICkkjv/KNgtv4yB v9ZA5pEpKQ6z7ghWAJznR6tMwenQ/c0g2atbZ9lbdCnEO0CtJXR3XS02yeHtIIgd z3rNgRvPE/o3LrcZSOkXxYRNZDZPWIc1TfqyKfBDm7/7KsG1/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHqZWwGGXaaMkrcfm4ccP0LLJz0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjliMjEzMGYtNjI5ZC0z YWVkLTg5ODYtZGNiMjM5ZWEwNDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCd6TMsBPYO8tldKEH+JUBb3PR2RGvfgKcIXDYoNwm3WadQ2MzO3RlR htzW48BqOUJtt5+MLgHT8l/RdzkYggz3XeLgSRWqO4rLefnVYKiR3ouz9VljSvhh RMmRi9so4syEjqpUqL4+1eEBbnVykstVs0WM965+6oWjk64757JzS7XyCEV53Hp4 4F8cgUlA2km1k6msEWeiNR6sWTuz8OzC1f+MHozxpUL2NhiwttEmiurNKfTC4PLg H7QxTdrlYm4OwuhX/kyAv1tMQU45cAHYlXVFNqicjwFwAuUrPUOoctgef1g5jPaK be+JnwXFhh1viOAwG8+uR4GzehGXU5CN -----END CERTIFICATE-----Generated at Wed Nov 5 11:49:41 2025 by rpki-client