$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa File: bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa (raw, json) Hash identifier: 0zLCYOUwYr/Z4QvjWPmFlvTx8q7asXBbvnTzMNKDMZc= Subject key identifier: AD:C3:5C:62:19:64:71:5F:7A:5D:E9:69:8E:B6:24:4A:CD:A5:40:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC270DEEB708694B159B50B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa Signing time: Wed 05 Nov 2025 14:00:38 +0000 ROA not before: Wed 05 Nov 2025 14:00:38 +0000 ROA not after: Tue 03 Feb 2026 14:00:38 +0000 asID: 396612 IP address blocks: 192.82.134.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c2:70:de:eb:70:86:94:b1:59:b5:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 14:00:38 2025 GMT Not After : Feb 3 14:00:38 2026 GMT Subject: CN=6b8990aa-bc10-49a0-a9e7-514c5d9a6eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:61:a9:2d:0a:d1:3c:9e:92:6c:d7:63:9f: 29:ce:48:f7:74:1c:43:6b:1c:ba:aa:83:75:f9:2a: 95:92:c9:75:c4:33:50:a4:e1:da:9e:f1:95:19:97: b8:d4:d8:28:2c:33:ce:64:00:43:cc:fb:27:63:01: 21:b2:a3:85:c6:9c:64:a5:23:59:1d:ac:64:d2:79: b8:a3:9e:27:f3:25:6f:75:cc:7e:83:b9:70:f4:55: a8:ad:00:7d:48:39:57:2a:b6:e3:69:07:c8:1b:81: 21:32:8e:1b:f5:ec:cf:3f:8b:98:24:4b:a0:7e:69: a8:87:7c:c7:0b:85:af:63:97:98:bf:a1:bb:79:af: 1d:82:6f:d9:9b:c4:2e:ce:5c:f5:b9:a7:69:33:28: 0b:5e:0f:87:8c:af:b8:ac:55:e1:63:64:fa:3f:ee: 1f:cb:44:eb:83:dd:2c:fa:47:80:1d:6c:b8:a1:37: 65:86:57:87:78:19:19:8d:b6:93:01:f3:13:57:01: f7:38:45:cf:09:2d:31:f4:c7:47:a4:f2:1b:2a:e6: 41:4f:db:e2:b8:49:40:26:2d:9c:dd:6a:4c:a3:18: ef:98:74:13:b6:47:e0:fe:50:5a:9e:0a:d4:54:01: 65:30:61:91:d6:58:c7:70:c9:89:f8:ff:a1:19:72: ce:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C3:5C:62:19:64:71:5F:7A:5D:E9:69:8E:B6:24:4A:CD:A5:40:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bfab9cd3-845a-3e23-a979-c0fd509dacdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.134.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:07:1e:6a:95:26:e0:eb:ec:aa:4f:ad:c0:91:7e:e3:b1:38: 6b:46:5e:51:53:05:2a:b8:ea:2e:c4:c6:16:73:6f:4d:cb:91: 90:4d:56:a5:34:65:c9:b2:f5:e9:10:6d:53:22:12:6a:19:94: 0e:35:7c:e4:2b:85:ac:e4:f4:9d:f8:3a:c2:f8:37:86:b3:aa: ab:d3:a3:8f:37:4a:c2:a7:21:93:ef:88:b2:26:08:99:3d:9f: 51:dd:cf:ff:aa:49:2b:64:1c:be:99:71:34:58:4e:ce:cb:04: 06:42:f5:b5:e5:45:0c:7e:2d:20:3b:97:21:dc:a4:88:4e:a6: 94:52:82:de:78:a1:2d:6e:77:b5:a6:30:0a:10:9d:d1:a3:61: 13:b7:63:3c:4f:2a:c7:67:f5:8c:c8:92:2a:cb:12:a4:0f:1e: a8:88:b6:20:72:20:c2:66:cc:93:89:ac:12:0f:48:12:6a:79: 03:26:4c:5c:c0:5e:8e:4a:9e:54:a6:dc:d1:04:87:43:76:0b: e7:06:b8:20:5a:67:3b:d4:ec:34:fe:3e:75:f0:8f:ba:0d:2d: 6d:1e:da:61:46:1a:e7:a3:2a:b7:4b:48:32:15:73:f3:83:a0: 43:40:80:31:ec:3e:6b:8e:40:41:c4:56:74:46:b1:be:c2:f0: e2:19:0a:aa -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvCcN7rcIaUsVm1C4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTE0MDAzOFoXDTI2MDIwMzE0MDAzOFowLzEtMCsGA1UEAxMk NmI4OTkwYWEtYmMxMC00OWEwLWE5ZTctNTE0YzVkOWE2ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+9hqS0K0TyekmzXY58pzkj3dBxDaxy6qoN1 +SqVksl1xDNQpOHanvGVGZe41NgoLDPOZABDzPsnYwEhsqOFxpxkpSNZHaxk0nm4 o54n8yVvdcx+g7lw9FWorQB9SDlXKrbjaQfIG4EhMo4b9ezPP4uYJEugfmmoh3zH C4WvY5eYv6G7ea8dgm/Zm8Quzlz1uadpMygLXg+HjK+4rFXhY2T6P+4fy0Trg90s +keAHWy4oTdlhleHeBkZjbaTAfMTVwH3OEXPCS0x9MdHpPIbKuZBT9viuElAJi2c 3WpMoxjvmHQTtkfg/lBangrUVAFlMGGR1ljHcMmJ+P+hGXLOZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFK3DXGIZZHFfel3paY62JErNpUD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZhYjljZDMtODQ1YS0z ZTIzLWE5NzktYzBmZDUwOWRhY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNBx5qlSbg6+yqT63AkX7jsThrRl5RUwUquOouxMYWc29Ny5GQTVal NGXJsvXpEG1TIhJqGZQONXzkK4Ws5PSd+DrC+DeGs6qr06OPN0rCpyGT74iyJgiZ PZ9R3c//qkkrZBy+mXE0WE7OywQGQvW15UUMfi0gO5ch3KSITqaUUoLeeKEtbne1 pjAKEJ3Ro2ETt2M8TyrHZ/WMyJIqyxKkDx6oiLYgciDCZsyTiawSD0gSankDJkxc wF6OSp5UptzRBIdDdgvnBrggWmc71Ow0/j518I+6DS1tHtphRhrnoyq3S0gyFXPz g6BDQIAx7D5rjkBBxFZ0RrG+wvDiGQqq -----END CERTIFICATE-----Generated at Wed Nov 5 17:14:57 2025 by rpki-client