$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e4e17f-7001-35f9-a5dc-bdc93e0668a8.roa File: 58e4e17f-7001-35f9-a5dc-bdc93e0668a8.roa (raw, json) Hash identifier: 7CPur4Oy75zUAb6ByygV65vQCNoV81bAO9b2m1/mytc= Subject key identifier: 65:5A:AD:B1:65:EA:09:63:AA:2C:CC:6B:35:46:3E:B4:27:2D:D5:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC10B63A796214D197181EFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e4e17f-7001-35f9-a5dc-bdc93e0668a8.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 10515 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:63:a7:96:21:4d:19:71:81:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=afc6bf8b-c83b-4252-b3cc-47bcc9c8901c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:94:c2:95:ac:66:66:d5:49:2f:d9:ac:e7: 60:b9:ff:e3:5c:43:39:6f:1d:55:48:a4:39:ca:e7: 49:9a:03:e9:42:cd:a1:dd:bb:ac:f6:68:11:ea:a1: 26:80:dc:10:e6:e1:e1:69:94:a1:06:37:e8:98:2b: ff:88:b3:e0:e8:99:be:d3:78:f5:a4:54:de:92:ea: 6f:6a:a3:da:47:9c:3e:db:ca:4b:01:12:78:e7:be: 14:01:00:03:5f:0b:a5:a2:79:e6:a6:15:04:51:c1: e1:a6:60:a8:b2:c6:75:50:ce:c3:f7:bf:08:13:1b: 35:41:1e:95:4d:b3:e1:1b:3a:76:23:a8:25:25:0a: aa:65:02:0e:f7:78:14:9e:98:39:4b:ee:1d:d1:40: 11:95:f1:03:fb:9a:0b:2b:f0:3b:06:53:a2:e1:f6: 79:e3:7e:4d:7b:9b:e3:70:83:26:13:ac:34:d3:1f: 6c:f8:cf:1f:dd:65:ba:cd:28:dc:d2:df:25:25:47: 18:7e:ff:96:8d:44:a8:e8:3e:6d:c7:87:f9:be:2c: fc:72:80:50:18:0c:52:21:ae:24:d8:f3:04:88:d9: b8:71:51:50:8e:1b:09:d6:97:70:02:6b:90:ae:c3: bb:b0:cc:fd:4b:b0:17:23:77:48:ac:d8:79:2e:b0: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5A:AD:B1:65:EA:09:63:AA:2C:CC:6B:35:46:3E:B4:27:2D:D5:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58e4e17f-7001-35f9-a5dc-bdc93e0668a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4b:04:2f:c8:e1:11:f6:cd:48:ca:74:84:19:a1:07:df:3e: 35:09:b3:d4:e8:be:5e:2a:1e:c0:26:bf:97:3f:0f:44:0d:82: 45:d9:3f:48:50:d4:6a:e4:26:5e:39:12:34:df:4a:f3:77:73: 88:ec:24:8b:65:94:25:94:45:a1:a4:3b:ef:56:26:56:91:9f: 82:a8:33:de:5a:95:43:71:9a:09:8f:fe:e7:8b:82:65:d3:fc: ad:31:2b:70:08:94:01:0b:12:4c:85:92:c3:a8:d2:12:32:14: 3f:8c:88:00:b0:19:27:3d:ac:d3:87:d0:b8:ba:d7:26:4c:9a: b9:53:aa:25:94:5f:4b:35:c2:85:57:7f:1e:3b:ec:e8:0e:12: 1f:f3:b8:bc:ba:d0:dc:62:63:d1:16:53:98:ea:2b:6b:aa:a5: e8:8c:ba:af:c0:cc:27:dc:ab:1e:f1:f5:f9:06:7f:ed:b6:1f: 08:1e:19:f7:dc:d9:fb:b3:67:01:b5:3f:a9:80:77:22:eb:55: 6b:8f:5a:13:6a:1e:e3:65:51:30:a0:ed:63:cc:4d:bf:b1:c9: ef:3c:b0:63:91:aa:7c:22:c8:60:38:01:2b:fd:09:2e:60:9c: 05:fd:a8:85:2c:dc:6f:5d:a6:54:76:09:0e:2a:6d:b0:df:62: be:0a:fd:65 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC2OnliFNGXGB78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YWZjNmJmOGItYzgzYi00MjUyLWIzY2MtNDdiY2M5Yzg5MDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd2UwpWsZmbVSS/ZrOdguf/jXEM5bx1VSKQ5 yudJmgPpQs2h3bus9mgR6qEmgNwQ5uHhaZShBjfomCv/iLPg6Jm+03j1pFTekupv aqPaR5w+28pLARJ4574UAQADXwulonnmphUEUcHhpmCossZ1UM7D978IExs1QR6V TbPhGzp2I6glJQqqZQIO93gUnpg5S+4d0UARlfED+5oLK/A7BlOi4fZ5435Ne5vj cIMmE6w00x9s+M8f3WW6zSjc0t8lJUcYfv+WjUSo6D5tx4f5viz8coBQGAxSIa4k 2PMEiNm4cVFQjhsJ1pdwAmuQrsO7sMz9S7AXI3dIrNh5LrBrLQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGVarbFl6gljqizMazVGPrQnLdV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNThlNGUxN2YtNzAwMS0z NWY5LWE1ZGMtYmRjOTNlMDY2OGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB4SwQvyOER9s1IynSEGaEH3z41CbPU6L5eKh7AJr+XPw9EDYJF2T9I UNRq5CZeORI030rzd3OI7CSLZZQllEWhpDvvViZWkZ+CqDPeWpVDcZoJj/7ni4Jl 0/ytMStwCJQBCxJMhZLDqNISMhQ/jIgAsBknPazTh9C4utcmTJq5U6ollF9LNcKF V38eO+zoDhIf87i8utDcYmPRFlOY6itrqqXojLqvwMwn3Kse8fX5Bn/tth8IHhn3 3Nn7s2cBtT+pgHci61Vrj1oTah7jZVEwoO1jzE2/scnvPLBjkap8IshgOAEr/Qku YJwF/aiFLNxvXaZUdgkOKm2w32K+Cv1l -----END CERTIFICATE-----Generated at Wed Nov 5 09:10:29 2025 by rpki-client