$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4242443c-8e14-3811-b42e-004b359d8833.roa File: 4242443c-8e14-3811-b42e-004b359d8833.roa (raw, json) Hash identifier: YFZLBZ9L0FG9tw0O9zo9QQrN3ukXT7JLqmTb7C3Xh8U= Subject key identifier: 73:30:5D:82:32:15:2E:F2:5B:52:5D:54:89:1B:76:6D:FC:89:D2:23 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270CE27A0340ADE221BDC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4242443c-8e14-3811-b42e-004b359d8833.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 36622 IP address blocks: 192.82.134.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:ce:27:a0:34:0a:de:22:1b:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=d7a3cebe-92b4-45cf-a132-4bd807a4ff5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:30:64:76:99:da:77:62:94:16:40:b5:58:42: c8:b8:6f:a6:52:1e:2d:92:59:98:cc:b6:78:41:48: 89:12:63:c0:80:6a:c5:c9:c8:b6:ef:84:e7:9e:c7: 62:66:f2:2f:ff:88:a0:07:31:3d:7a:07:55:a1:10: 33:90:c4:ce:dd:32:c1:60:cd:fb:e8:7e:60:5b:bb: 0a:07:6d:96:54:b1:1a:ee:87:55:b5:21:a1:16:b2: 1a:5e:ae:a7:66:97:8b:d1:b2:16:8e:05:33:7d:c8: 00:68:98:8b:9c:6c:f6:25:44:bb:c9:ea:b1:17:03: 8a:8e:bf:23:4f:8f:61:96:e0:d0:2f:a6:17:65:5a: 5b:c3:45:10:ef:fc:02:57:1d:9e:de:17:54:73:85: 99:b7:90:3f:47:52:7f:ad:b5:35:4b:1f:d8:c6:35: 31:8f:7a:78:64:a4:d2:93:e9:b6:01:ba:e7:bb:83: ae:ae:91:fe:db:b4:bd:36:6c:a1:a9:aa:1e:fa:bd: d2:9a:11:28:1f:f3:23:6e:3f:bc:f5:3a:bc:cf:b4: 36:9f:b9:c5:77:78:e9:b6:71:82:29:27:06:3e:56: cf:1f:01:be:38:dd:51:ef:1b:2f:b4:a3:c2:fe:cb: a1:fc:11:da:c8:4b:09:65:f6:c7:76:1d:ae:8b:39: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:30:5D:82:32:15:2E:F2:5B:52:5D:54:89:1B:76:6D:FC:89:D2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4242443c-8e14-3811-b42e-004b359d8833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.134.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:93:ec:03:4f:7c:a8:38:2c:27:32:81:30:d4:d0:e9:5c:e0: a7:37:a6:2f:bf:86:19:32:b0:14:5c:db:a2:e8:d0:90:a4:7b: b2:c2:e5:55:cc:a8:19:fe:9d:a2:30:4a:b1:7a:8b:ef:59:61: 7f:0a:34:1f:84:23:e4:1b:af:4d:90:51:c5:1a:e2:e1:24:76: 83:69:74:de:f9:d1:4b:46:df:0c:53:dc:b3:64:94:a2:37:33: a2:8f:84:c9:a2:e6:ec:5d:f2:06:4b:10:22:72:4b:11:69:70: 1a:75:69:c0:bc:4a:8d:28:39:c8:c7:a0:cd:ec:9a:fa:f8:7f: c6:c7:f7:80:2a:1a:57:2a:f8:9e:75:da:ab:af:ef:56:c3:47: a3:cb:06:95:e1:6e:4a:50:5b:6d:05:6f:df:da:d5:8a:f4:75: 1f:1c:ee:0b:a7:2a:6d:70:0d:a3:73:cc:65:ac:82:aa:d6:2b: c5:53:4a:b4:2f:1d:c3:4b:c1:c0:82:73:03:82:26:13:9c:4d: 2a:83:55:7d:30:ac:b0:e4:59:c9:4d:b5:90:09:ad:fd:dd:70: ba:05:37:17:30:90:a0:4d:ae:73:ea:84:e3:c5:0b:85:90:48: 5d:6f:65:77:3f:67:6d:72:cb:73:a5:33:ae:91:83:6c:68:d0: e9:b2:60:98 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvCcM4noDQK3iIb3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk ZDdhM2NlYmUtOTJiNC00NWNmLWExMzItNGJkODA3YTRmZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jBkdpnad2KUFkC1WELIuG+mUh4tklmYzLZ4 QUiJEmPAgGrFyci274TnnsdiZvIv/4igBzE9egdVoRAzkMTO3TLBYM376H5gW7sK B22WVLEa7odVtSGhFrIaXq6nZpeL0bIWjgUzfcgAaJiLnGz2JUS7yeqxFwOKjr8j T49hluDQL6YXZVpbw0UQ7/wCVx2e3hdUc4WZt5A/R1J/rbU1Sx/YxjUxj3p4ZKTS k+m2Abrnu4OurpH+27S9Nmyhqaoe+r3SmhEoH/Mjbj+89Tq8z7Q2n7nFd3jptnGC KScGPlbPHwG+ON1R7xsvtKPC/suh/BHayEsJZfbHdh2uizkvdwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHMwXYIyFS7yW1JdVIkbdm38idIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDI0MjQ0M2MtOGUxNC0z ODExLWI0MmUtMDA0YjM1OWQ4ODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBck+wDT3yoOCwnMoEw1NDpXOCnN6Yvv4YZMrAUXNui6NCQpHuywuVV zKgZ/p2iMEqxeovvWWF/CjQfhCPkG69NkFHFGuLhJHaDaXTe+dFLRt8MU9yzZJSi NzOij4TJoubsXfIGSxAicksRaXAadWnAvEqNKDnIx6DN7Jr6+H/Gx/eAKhpXKvie ddqrr+9Ww0ejywaV4W5KUFttBW/f2tWK9HUfHO4LpyptcA2jc8xlrIKq1ivFU0q0 Lx3DS8HAgnMDgiYTnE0qg1V9MKyw5FnJTbWQCa393XC6BTcXMJCgTa5z6oTjxQuF kEhdb2V3P2dtcstzpTOukYNsaNDpsmCY -----END CERTIFICATE-----Generated at Wed Nov 5 16:23:12 2025 by rpki-client