$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1da1bde-2f03-3868-9259-0a596a9d9308.roa File: c1da1bde-2f03-3868-9259-0a596a9d9308.roa (raw, json) Hash identifier: Z8Y8PHRgiYKkdvZSM8bLqG6pYL9Ef/4AvXOIbm/hDdU= Subject key identifier: 11:74:E4:30:99:F1:0D:07:16:90:DA:91:D3:9B:52:04:1D:10:71:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC10B629B3B1ABCE993EBD060 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1da1bde-2f03-3868-9259-0a596a9d9308.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 396616 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:62:9b:3b:1a:bc:e9:93:eb:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=f020c7dc-f19e-4cf1-bac1-924939a97812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b4:74:c2:49:c3:0f:45:b7:46:8a:38:2d:72: e5:2c:3d:df:e5:d3:be:ee:14:35:33:ac:e8:4d:48: ba:38:5d:71:08:30:63:a4:50:24:74:40:46:64:c6: 7b:41:ba:57:ab:82:52:69:80:26:59:16:46:14:bb: a2:72:16:df:10:26:e4:e1:91:65:c7:1b:e6:de:ab: 63:07:d2:0d:df:2f:de:7c:00:1b:bb:ab:1e:90:30: 6a:e8:9f:9d:90:4d:e7:ff:d4:24:e6:95:27:08:17: 66:f9:de:06:5f:4b:5e:b5:89:6a:b0:36:9b:34:3e: 00:37:07:ca:83:2b:52:e1:58:dc:d6:e4:d9:33:69: 32:da:a8:ee:71:03:4a:09:04:9f:3c:20:f6:9a:96: 12:97:21:cd:e0:c6:aa:d1:37:7e:d4:45:a3:be:b8: b0:58:5e:32:33:e6:f5:b3:5d:fc:55:bf:10:d9:6d: 3b:6b:ac:c9:95:ee:d5:5e:e1:02:30:5b:9f:11:5e: e6:ba:cd:ab:b5:1a:4e:a4:30:36:35:df:15:d7:0d: 6c:21:f2:1b:c9:9f:76:be:cb:df:97:fd:3a:bb:17: b5:b0:07:be:8a:df:32:10:01:c6:ee:1a:bc:f1:52: bf:e5:f5:a5:31:b4:41:31:60:44:96:ff:ee:bf:88: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:74:E4:30:99:F1:0D:07:16:90:DA:91:D3:9B:52:04:1D:10:71:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1da1bde-2f03-3868-9259-0a596a9d9308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:92:96:35:b4:13:0e:23:74:0e:16:a6:7e:40:76:c2:91:31: a1:57:63:8b:66:ca:d5:55:a4:6d:0c:d1:49:e3:7d:00:16:55: 37:86:62:bf:41:85:03:7a:03:9c:b9:fb:71:cd:c9:75:45:9e: c5:70:78:b4:2b:93:2d:59:66:2d:f4:53:6c:e0:10:af:98:3e: 1c:3e:6a:06:e6:57:54:b5:b0:3a:ed:65:cf:3c:3b:1c:01:61: a8:f2:09:99:2c:1a:13:6e:49:f4:bf:aa:e6:cb:02:1b:4e:1b: 3b:6e:7d:a3:31:3e:db:6f:b3:ef:7a:4a:5d:f9:56:84:03:b4: 72:bb:81:26:32:a2:05:a0:34:22:1e:53:3b:ba:eb:20:48:36: 69:70:fd:27:23:54:b0:68:ac:92:60:9e:35:37:88:b4:6e:35: 3f:dd:ae:e0:f0:56:09:06:73:fc:4e:0c:c0:d4:28:8b:e5:6a: 68:c7:e1:48:40:b7:39:1b:b5:3e:80:2c:74:70:c3:6f:a9:6c: c7:07:28:4c:5b:6f:7a:4c:4e:9b:99:7d:6d:d4:38:9a:c0:7c: 6d:0f:f2:9a:69:79:9d:9f:ed:c2:eb:4a:64:b5:5b:45:3d:36: fa:ff:68:32:60:e6:5c:59:10:c9:e6:eb:05:59:2b:2d:2f:b6: 9f:e4:8c:58 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC2KbOxq86ZPr0GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk ZjAyMGM3ZGMtZjE5ZS00Y2YxLWJhYzEtOTI0OTM5YTk3ODEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17R0wknDD0W3Roo4LXLlLD3f5dO+7hQ1M6zo TUi6OF1xCDBjpFAkdEBGZMZ7QbpXq4JSaYAmWRZGFLuichbfECbk4ZFlxxvm3qtj B9IN3y/efAAbu6sekDBq6J+dkE3n/9Qk5pUnCBdm+d4GX0tetYlqsDabND4ANwfK gytS4Vjc1uTZM2ky2qjucQNKCQSfPCD2mpYSlyHN4Maq0Td+1EWjvriwWF4yM+b1 s138Vb8Q2W07a6zJle7VXuECMFufEV7mus2rtRpOpDA2Nd8V1w1sIfIbyZ92vsvf l/06uxe1sAe+it8yEAHG7hq88VK/5fWlMbRBMWBElv/uv4gXJwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBF05DCZ8Q0HFpDakdObUgQdEHEgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFkYTFiZGUtMmYwMy0z ODY4LTkyNTktMGE1OTZhOWQ5MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTkpY1tBMOI3QOFqZ+QHbCkTGhV2OLZsrVVaRtDNFJ430AFlU3hmK/ QYUDegOcuftxzcl1RZ7FcHi0K5MtWWYt9FNs4BCvmD4cPmoG5ldUtbA67WXPPDsc AWGo8gmZLBoTbkn0v6rmywIbThs7bn2jMT7bb7Pvekpd+VaEA7Ryu4EmMqIFoDQi HlM7uusgSDZpcP0nI1SwaKySYJ41N4i0bjU/3a7g8FYJBnP8TgzA1CiL5Wpox+FI QLc5G7U+gCx0cMNvqWzHByhMW296TE6bmX1t1DiawHxtD/KaaXmdn+3C60pktVtF PTb6/2gyYOZcWRDJ5usFWSstL7af5IxY -----END CERTIFICATE-----Generated at Wed Nov 5 09:31:58 2025 by rpki-client