$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e6f30fc-be71-3995-bd8a-2f6e1da429f6.roa File: 4e6f30fc-be71-3995-bd8a-2f6e1da429f6.roa (raw, json) Hash identifier: 7qLYCW1EoQxXTvxOtGAFyPLRAAJHKLAfY79XNqt01sA= Subject key identifier: 84:A5:D6:DB:0B:1A:01:9B:A7:62:B0:20:80:CC:56:35:2B:0D:DC:00 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A8F3B86AFE7D889CF2C045D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e6f30fc-be71-3995-bd8a-2f6e1da429f6.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 396612 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:86:af:e7:d8:89:cf:2c:04:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=691bb507-4d79-4784-9ba3-91047381fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8f:ad:9f:4e:c6:d4:cd:d4:0e:71:80:3e:7b: c6:0e:4d:ec:7e:b6:8b:99:23:3b:6a:fc:fa:7c:21: 7d:45:a4:e4:41:71:a6:3f:d5:c7:4a:23:68:78:a4: 95:ea:a8:00:4a:3a:f6:c6:8b:43:93:97:a4:91:73: ac:e5:cb:a0:68:f2:b3:67:b7:83:46:15:3b:0c:fd: c5:b0:e7:f2:b7:38:21:8f:f2:ed:92:fc:80:2a:e1: 32:31:c1:8d:11:c9:a7:09:2e:8b:c7:06:61:84:45: 35:02:f9:01:25:c7:b3:ca:84:a0:c3:e3:d9:65:18: 0a:ce:e2:09:88:a7:4a:32:b8:9c:7d:fb:69:d3:e7: db:b7:48:a3:bf:6b:23:52:b5:c7:63:ae:3f:f0:bd: 88:f5:f2:7b:59:b2:44:9d:a4:d8:08:67:37:0b:5a: dc:67:d5:31:89:27:8a:91:82:0e:f4:55:5f:a8:62: 41:00:05:8b:e0:c0:cd:ea:75:0b:62:6a:cb:20:80: cb:80:99:61:ff:38:5f:5d:b4:50:fd:a4:49:a9:2f: 4e:2d:9f:df:8b:da:1b:9d:7a:21:20:59:c0:a2:41: de:89:fe:46:0d:d3:27:36:6d:68:ae:38:e8:4f:34: f8:cd:f4:b7:d9:ab:e0:47:c7:41:fd:ae:d0:7b:27: d2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A5:D6:DB:0B:1A:01:9B:A7:62:B0:20:80:CC:56:35:2B:0D:DC:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4e6f30fc-be71-3995-bd8a-2f6e1da429f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:a4:ef:32:fe:98:6c:af:86:da:72:32:02:3f:0c:1b:26:98: e3:c6:d2:54:0e:2d:f6:f8:66:42:99:4e:ef:3e:1e:3b:a7:c0: 62:93:03:9d:e5:21:d4:1e:81:d5:e2:f3:51:6a:4e:9e:6c:93: d0:97:12:8e:84:0c:ff:4f:58:22:d3:aa:84:d4:ea:80:ca:1a: 89:a1:41:04:9f:3b:8e:95:86:cc:8d:8e:2a:04:41:cf:a2:f3: ee:97:b4:7e:72:bb:1a:3a:16:21:fb:d5:9e:e7:0a:8a:e8:94: 93:95:c7:9a:93:c9:b7:ff:ee:75:05:2a:76:8b:42:2f:1d:92: 62:f2:d5:04:50:72:49:0a:67:d2:97:61:2c:f1:fd:be:4d:eb: e0:45:f1:06:33:2d:4a:7a:b0:bb:e2:de:f7:c7:d5:05:38:0f: 29:53:7a:6a:7f:87:60:5d:97:da:bc:b2:06:35:14:74:95:10: 6a:24:b0:fa:e1:83:40:d0:71:7b:a6:6a:c6:fc:c1:99:e1:f7: 86:b3:12:23:6f:ff:44:6a:7f:5f:d1:05:08:e7:fa:0b:7c:c3: db:02:73:0c:39:ca:2c:fa:67:d1:41:a6:9b:7a:60:ed:c9:4d: 76:f2:72:dc:06:0b:f3:9a:10:92:f0:6e:a1:03:0a:f4:03:8d: 89:5f:b3:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO4av59iJzywEXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk NjkxYmI1MDctNGQ3OS00Nzg0LTliYTMtOTEwNDczODFmZDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlo+tn07G1M3UDnGAPnvGDk3sfraLmSM7avz6 fCF9RaTkQXGmP9XHSiNoeKSV6qgASjr2xotDk5ekkXOs5cugaPKzZ7eDRhU7DP3F sOfytzghj/LtkvyAKuEyMcGNEcmnCS6LxwZhhEU1AvkBJcezyoSgw+PZZRgKzuIJ iKdKMricfftp0+fbt0ijv2sjUrXHY64/8L2I9fJ7WbJEnaTYCGc3C1rcZ9UxiSeK kYIO9FVfqGJBAAWL4MDN6nULYmrLIIDLgJlh/zhfXbRQ/aRJqS9OLZ/fi9obnXoh IFnAokHeif5GDdMnNm1orjjoTzT4zfS32avgR8dB/a7QeyfSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISl1tsLGgGbp2KwIIDMVjUrDdwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGU2ZjMwZmMtYmU3MS0z OTk1LWJkOGEtMmY2ZTFkYTQyOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJik7zL+mGyvhtpyMgI/DBsmmOPG0lQOLfb4ZkKZTu8+HjunwGKTA53l IdQegdXi81FqTp5sk9CXEo6EDP9PWCLTqoTU6oDKGomhQQSfO46VhsyNjioEQc+i 8+6XtH5yuxo6FiH71Z7nCorolJOVx5qTybf/7nUFKnaLQi8dkmLy1QRQckkKZ9KX YSzx/b5N6+BF8QYzLUp6sLvi3vfH1QU4DylTemp/h2Bdl9q8sgY1FHSVEGoksPrh g0DQcXumasb8wZnh94azEiNv/0Rqf1/RBQjn+gt8w9sCcww5yiz6Z9FBppt6YO3J TXbyctwGC/OaEJLwbqEDCvQDjYlfs08= -----END CERTIFICATE-----Generated at Wed Aug 6 10:59:05 2025 by rpki-client