$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa File: b8fd1043-04ca-38de-928c-018b86fed03f.roa (raw, json) Hash identifier: VDQG0tOz8zKj0fSdpH7pr/r0IZHxO+9iqyQjm+hwUWs= Subject key identifier: 8F:F5:8C:43:89:78:9E:AA:BD:6D:7D:9B:20:AE:F7:2D:56:5B:51:0F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270DD696E8258C48E69C960 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 397208 IP address blocks: 192.82.133.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:dd:69:6e:82:58:c4:8e:69:c9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=1a076d04-1e82-4ec2-9d6d-793a767031a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:79:30:6e:96:2a:ce:62:59:d3:db:1a:6f:db: df:c0:e8:5f:a8:c0:25:55:34:63:41:81:7b:4c:e0: 97:c7:c2:c5:32:f4:12:30:1c:5d:de:e0:85:c7:27: db:d3:fc:91:2b:19:a4:5c:be:03:0e:a8:79:a9:75: 2c:22:c1:fd:c5:67:b3:68:85:13:b6:1c:10:97:62: e7:88:9d:e6:57:aa:45:63:46:a7:42:17:e3:cb:e5: 16:70:61:39:02:ce:29:0d:45:9d:7d:9f:8f:64:fb: ee:80:78:0e:f0:19:10:51:94:b0:dc:c9:2f:aa:af: 8c:c5:90:d5:87:72:f2:89:ec:60:46:0e:56:b1:e9: b2:4b:32:31:5b:24:2e:2b:57:48:a1:78:90:62:4c: 95:0d:8f:29:bf:4d:19:32:77:7f:cf:aa:a4:01:03: 5b:f7:26:b4:f5:88:39:40:12:77:cb:0a:14:5d:7a: 47:4e:d0:d8:b8:81:b3:5c:ec:9a:ea:0f:be:1a:8b: 5e:57:14:75:90:3a:92:e2:8e:e8:f7:4d:89:b3:9d: 4b:db:f1:32:84:97:57:c1:bf:d4:f0:53:f4:1b:38: 6a:71:87:9a:f1:5e:02:f9:de:01:c8:c3:b2:9e:b3: 99:bd:b4:6d:4d:41:f2:b9:4d:38:ca:d0:1e:76:53: 06:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F5:8C:43:89:78:9E:AA:BD:6D:7D:9B:20:AE:F7:2D:56:5B:51:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8fd1043-04ca-38de-928c-018b86fed03f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:90:3b:f9:8a:17:8a:b1:fa:7d:b5:09:d1:fa:88:6d:51:77: 7a:d8:8e:aa:ef:14:54:6d:c1:96:2a:e2:77:7c:de:a1:76:ab: b5:9e:90:cc:1d:0c:c2:fb:96:70:ad:3d:ab:2a:ab:2f:4c:3a: 79:6b:6f:ae:cb:16:46:d7:75:5d:86:17:4c:82:d8:10:ed:21: ae:4e:96:89:df:cb:de:27:68:94:8d:d8:52:33:5b:8d:0a:db: 65:06:39:ee:14:a9:f0:f4:09:ae:ef:a3:f4:45:e5:79:f1:58: 98:1d:f8:e0:12:77:7f:8a:6e:75:d1:b2:22:b8:e1:2b:a9:e3: 2a:05:d6:4e:83:25:99:7a:86:c3:a0:02:0c:23:3e:d7:f0:10: 22:3d:6b:21:50:76:27:96:c1:a7:e4:01:52:82:18:2b:67:9c: a8:aa:b5:5d:e7:c8:88:a7:5c:27:7f:c0:9b:ad:53:f1:ed:47: 35:a9:3b:d8:e7:c5:76:36:c5:cd:6d:ac:b2:6b:c0:ed:64:71: d3:cd:02:c8:6a:ff:a5:4d:1c:c2:48:d7:66:5d:91:05:e3:14: 04:f4:24:86:5b:40:d6:8c:d4:ef:bd:a5:6e:c1:3c:10:d8:4c: 4a:22:25:df:99:ba:52:31:88:84:53:98:04:2b:af:32:07:b8: de:8c:69:2c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvCcN1pboJYxI5pyWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk MWEwNzZkMDQtMWU4Mi00ZWMyLTlkNmQtNzkzYTc2NzAzMWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknkwbpYqzmJZ09sab9vfwOhfqMAlVTRjQYF7 TOCXx8LFMvQSMBxd3uCFxyfb0/yRKxmkXL4DDqh5qXUsIsH9xWezaIUTthwQl2Ln iJ3mV6pFY0anQhfjy+UWcGE5As4pDUWdfZ+PZPvugHgO8BkQUZSw3Mkvqq+MxZDV h3LyiexgRg5WsemySzIxWyQuK1dIoXiQYkyVDY8pv00ZMnd/z6qkAQNb9ya09Yg5 QBJ3ywoUXXpHTtDYuIGzXOya6g++GoteVxR1kDqS4o7o902Js51L2/EyhJdXwb/U 8FP0GzhqcYea8V4C+d4ByMOynrOZvbRtTUHyuU04ytAedlMGaQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFI/1jEOJeJ6qvW19myCu9y1WW1EPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjhmZDEwNDMtMDRjYS0z OGRlLTkyOGMtMDE4Yjg2ZmVkMDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKFHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCzkDv5iheKsfp9tQnR+ohtUXd62I6q7xRUbcGWKuJ3fN6hdqu1npDM HQzC+5ZwrT2rKqsvTDp5a2+uyxZG13VdhhdMgtgQ7SGuTpaJ38veJ2iUjdhSM1uN CttlBjnuFKnw9Amu76P0ReV58ViYHfjgEnd/im510bIiuOErqeMqBdZOgyWZeobD oAIMIz7X8BAiPWshUHYnlsGn5AFSghgrZ5yoqrVd58iIp1wnf8CbrVPx7Uc1qTvY 58V2NsXNbayya8DtZHHTzQLIav+lTRzCSNdmXZEF4xQE9CSGW0DWjNTvvaVuwTwQ 2ExKIiXfmbpSMYiEU5gEK68yB7jejGks -----END CERTIFICATE-----Generated at Wed Nov 5 17:50:58 2025 by rpki-client