$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa File: 86663264-d0be-3b18-8387-15c4db542f5d.roa (raw, json) Hash identifier: CEa9WdNMs2BhFX8eTeeIxCUZFC6mTFEjzBm1nWdJBDg= Subject key identifier: 71:03:69:89:67:48:71:47:53:2F:D2:7C:49:02:AC:7B:B8:14:5D:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC10B6107F10359D207F29F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 396589 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:61:07:f1:03:59:d2:07:f2:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=2e192a4f-a7fe-4743-a692-eb60729c8d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:31:d2:ef:0b:d1:bf:ed:94:87:79:88:ff:73: 2a:4e:dd:d5:93:11:2d:7a:0c:18:a7:cc:35:7a:c5: 36:44:4b:bc:5f:1b:c7:65:66:ff:8a:b8:22:cd:eb: d2:15:61:a1:f6:64:e1:cb:ff:56:8c:80:24:76:a1: 7c:3c:8f:dd:d9:2a:fe:79:7a:a8:f6:3d:d1:b0:c0: d7:30:4f:84:8f:4c:41:f1:aa:a6:f0:ce:6d:78:e4: bf:f3:48:84:d1:a4:39:dc:57:c4:cb:13:71:c8:39: c6:be:64:c4:bc:bc:ed:91:61:9f:94:0d:cb:63:43: 88:6a:5e:5c:f4:c4:5e:1a:5f:a8:d0:d6:29:08:d1: dd:b5:31:c4:fc:2d:56:33:59:75:b5:54:72:61:b9: f9:28:6b:e5:42:3f:f3:0f:7d:1d:91:d8:41:f1:58: 66:07:08:11:1f:ef:9a:c7:4e:c4:94:4d:54:5c:b0: 2c:32:30:75:95:be:83:58:e0:28:eb:47:50:cf:40: a4:93:36:bb:02:36:5d:a8:d2:72:73:1c:f7:07:3d: 30:51:cd:75:23:38:36:3a:5a:dc:9a:dd:45:5b:ff: 22:e0:9f:5c:0c:63:b8:73:0e:9f:68:e8:65:17:6a: 51:c7:9c:ed:25:ff:f6:d9:7b:a6:36:9a:dd:ce:86: 31:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:03:69:89:67:48:71:47:53:2F:D2:7C:49:02:AC:7B:B8:14:5D:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86663264-d0be-3b18-8387-15c4db542f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:13:8c:4f:a9:13:5d:91:7d:32:81:be:f0:66:aa:58:63:63: 2c:da:d6:89:9a:ed:29:0e:ca:1f:d3:1d:dc:ce:9b:d0:d8:c6: 94:6b:7c:ac:c0:de:a8:24:01:b4:83:ce:d8:4c:40:e4:9e:db: 80:25:ec:b6:30:5f:4f:76:c1:4c:35:82:98:01:7c:3c:65:e6: b6:b1:3e:35:7c:b2:68:d2:1f:f6:78:ab:8c:2a:f0:6b:68:d4: 82:6a:42:3f:96:e8:ef:61:bb:8f:b3:e8:da:59:20:d5:6d:64: aa:d1:91:06:4f:59:49:0d:d5:23:12:05:4a:d5:dd:18:20:62: cf:7b:75:ce:69:7d:05:ae:61:1b:d9:63:58:2f:71:ab:29:b6: 00:ff:a4:54:d7:24:79:70:76:5a:8f:55:33:d8:c8:1b:7f:2b: ea:13:16:cb:c8:82:04:1b:fb:48:e5:cc:e0:ba:e1:aa:3d:d0: 40:b6:de:0a:86:ec:c8:9a:6e:d0:6a:88:5b:1f:2b:b2:c0:76: 61:53:4d:4a:43:b9:7f:29:87:81:d4:38:40:cc:5b:f6:10:92: 0b:9c:17:d8:b7:a3:02:74:bc:cb:33:59:1b:6a:02:16:e2:9e: 45:c9:55:13:17:38:52:e7:7b:9a:b9:2f:6a:9a:32:60:79:eb: 23:84:6d:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC2EH8QNZ0gfyn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MmUxOTJhNGYtYTdmZS00NzQzLWE2OTItZWI2MDcyOWM4ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzHS7wvRv+2Uh3mI/3MqTt3VkxEtegwYp8w1 esU2REu8XxvHZWb/irgizevSFWGh9mThy/9WjIAkdqF8PI/d2Sr+eXqo9j3RsMDX ME+Ej0xB8aqm8M5teOS/80iE0aQ53FfEyxNxyDnGvmTEvLztkWGflA3LY0OIal5c 9MReGl+o0NYpCNHdtTHE/C1WM1l1tVRyYbn5KGvlQj/zD30dkdhB8VhmBwgRH++a x07ElE1UXLAsMjB1lb6DWOAo60dQz0Ckkza7AjZdqNJycxz3Bz0wUc11Izg2Olrc mt1FW/8i4J9cDGO4cw6faOhlF2pRx5ztJf/22XumNprdzoYx/wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHEDaYlnSHFHUy/SfEkCrHu4FF34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY2NjMyNjQtZDBiZS0z YjE4LTgzODctMTVjNGRiNTQyZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBoE4xPqRNdkX0ygb7wZqpYY2Ms2taJmu0pDsof0x3czpvQ2MaUa3ys wN6oJAG0g87YTEDkntuAJey2MF9PdsFMNYKYAXw8Zea2sT41fLJo0h/2eKuMKvBr aNSCakI/lujvYbuPs+jaWSDVbWSq0ZEGT1lJDdUjEgVK1d0YIGLPe3XOaX0FrmEb 2WNYL3GrKbYA/6RU1yR5cHZaj1Uz2MgbfyvqExbLyIIEG/tI5czguuGqPdBAtt4K huzImm7QaohbHyuywHZhU01KQ7l/KYeB1DhAzFv2EJILnBfYt6MCdLzLM1kbagIW 4p5FyVUTFzhS53uauS9qmjJgeesjhG1R -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:38 2025 by rpki-client