$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf0bdf42-0934-3a55-8f66-6b47c2a1a144.roa File: cf0bdf42-0934-3a55-8f66-6b47c2a1a144.roa (raw, json) Hash identifier: ZRuMVFXe4rybW3ji3b7oygC9wtnjfi4A96SX+EPCfBc= Subject key identifier: 76:CD:D3:3A:D4:FF:D3:A4:C1:B1:E4:8D:8A:46:CC:88:9B:27:B3:9E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC10B618E5722E22C17025E88 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf0bdf42-0934-3a55-8f66-6b47c2a1a144.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 36622 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:61:8e:57:22:e2:2c:17:02:5e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=23da3ca0-ccaf-4e2b-a02b-4a33bd224c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:da:8e:8e:53:d0:6c:af:b5:8d:50:6d:e5:26: 4b:50:e3:30:1b:da:12:fb:e0:47:d5:f4:09:7d:bd: a4:67:91:b0:d3:ed:9d:9c:b0:c6:dc:dd:f1:37:da: d9:f1:a2:be:7f:82:3d:5b:c9:41:7a:df:fd:58:eb: 7a:d1:66:1b:2e:e3:da:bc:0e:bf:86:25:fe:42:2e: b3:06:87:36:6e:35:1f:f8:6f:24:c9:b0:c5:34:d9: 56:d9:0b:8b:8b:81:cd:42:e1:5e:67:28:04:33:15: 10:d7:09:bc:ce:8a:f4:69:57:27:90:c9:ca:1e:5a: d7:de:58:e8:ee:db:30:1d:78:c5:c2:43:f1:f3:45: fc:6b:25:50:d9:88:5a:10:74:85:90:d0:16:e3:7d: 9b:13:0d:73:1f:74:29:82:af:af:a8:0e:3c:d2:ce: 84:dc:dd:ee:49:6b:17:c6:8d:a1:79:20:7a:9a:0a: 04:d0:e7:cc:94:d0:ab:5d:25:57:68:bd:26:34:cb: 64:2f:02:0b:06:87:61:76:12:11:66:58:3e:b6:a8: e8:ae:fe:0d:2a:22:08:44:13:6d:83:96:0b:04:7d: 43:f3:ac:25:43:23:86:8c:ce:ac:84:13:d5:12:58: 19:b6:0e:4f:36:99:cb:ae:c0:f3:79:d2:f0:9a:7e: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CD:D3:3A:D4:FF:D3:A4:C1:B1:E4:8D:8A:46:CC:88:9B:27:B3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf0bdf42-0934-3a55-8f66-6b47c2a1a144.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:92:77:40:a2:8f:1c:e0:d1:5f:3e:be:e2:19:cf:16:78:6a: 36:87:78:4a:36:09:98:ee:ac:23:c9:2a:ee:be:20:62:bf:f0: 32:f0:37:a6:19:2b:a6:27:f7:71:9d:dc:db:70:f5:39:c9:ae: 57:f6:9f:cc:3b:03:99:8a:29:8f:8c:d9:6b:3f:5c:31:ee:44: 8b:60:fe:58:5a:db:dd:ad:bb:dc:08:a0:a1:17:0c:76:16:b9: 95:1f:e2:24:3c:28:c1:7b:64:75:d2:43:57:66:d0:b1:c3:e1: d5:b6:fb:85:67:d7:66:17:32:d1:8c:19:c3:2b:41:40:5e:84: 23:6f:d8:d0:ee:51:65:bd:60:16:9f:14:92:fb:83:1e:f1:d5: dc:f2:39:ce:9e:f5:15:24:e6:eb:10:b1:a6:66:9b:32:fd:0e: 46:be:41:8b:7c:d6:ff:30:81:e4:8f:d3:27:e7:fd:85:d7:42: 24:07:d6:6c:fc:fe:de:d7:40:f2:13:dc:cc:9e:89:6b:9e:5c: f4:9b:95:eb:68:38:77:58:79:ea:71:3a:53:15:2e:da:dd:10: 44:26:f1:cd:eb:35:01:02:47:ab:45:90:e3:18:23:2a:5e:3e: 38:57:f5:e6:06:cb:57:1d:09:ff:32:5b:ca:4e:9c:a6:c1:cf: 92:b8:d8:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC2GOVyLiLBcCXogwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk MjNkYTNjYTAtY2NhZi00ZTJiLWEwMmItNGEzM2JkMjI0YzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtqOjlPQbK+1jVBt5SZLUOMwG9oS++BH1fQJ fb2kZ5Gw0+2dnLDG3N3xN9rZ8aK+f4I9W8lBet/9WOt60WYbLuPavA6/hiX+Qi6z Boc2bjUf+G8kybDFNNlW2QuLi4HNQuFeZygEMxUQ1wm8zor0aVcnkMnKHlrX3ljo 7tswHXjFwkPx80X8ayVQ2YhaEHSFkNAW432bEw1zH3Qpgq+vqA480s6E3N3uSWsX xo2heSB6mgoE0OfMlNCrXSVXaL0mNMtkLwILBodhdhIRZlg+tqjorv4NKiIIRBNt g5YLBH1D86wlQyOGjM6shBPVElgZtg5PNpnLrsDzedLwmn75TwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHbN0zrU/9OkwbHkjYpGzIibJ7OeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2YwYmRmNDItMDkzNC0z YTU1LThmNjYtNmI0N2MyYTFhMTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBQkndAoo8c4NFfPr7iGc8WeGo2h3hKNgmY7qwjySruviBiv/Ay8Dem GSumJ/dxndzbcPU5ya5X9p/MOwOZiimPjNlrP1wx7kSLYP5YWtvdrbvcCKChFwx2 FrmVH+IkPCjBe2R10kNXZtCxw+HVtvuFZ9dmFzLRjBnDK0FAXoQjb9jQ7lFlvWAW nxSS+4Me8dXc8jnOnvUVJObrELGmZpsy/Q5GvkGLfNb/MIHkj9Mn5/2F10IkB9Zs /P7e10DyE9zMnolrnlz0m5XraDh3WHnqcTpTFS7a3RBEJvHN6zUBAkerRZDjGCMq Xj44V/XmBstXHQn/MlvKTpymwc+SuNin -----END CERTIFICATE-----Generated at Wed Nov 5 11:23:13 2025 by rpki-client