$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa File: d76520a6-0821-3591-a391-f0e2ca02a540.roa (raw, json) Hash identifier: naBf3mJaJG63Nzv6JieBmt/t8qvqHYiXBneq+0JsrEQ= Subject key identifier: 91:BF:40:72:89:39:D1:8F:59:05:C5:02:AD:2C:5C:55:12:B0:B1:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584BC10B639756BCDBD305E3D400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa Signing time: Wed 05 Nov 2025 02:00:31 +0000 ROA not before: Wed 05 Nov 2025 02:00:31 +0000 ROA not after: Tue 03 Feb 2026 02:00:31 +0000 asID: 397194 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:c1:0b:63:97:56:bc:db:d3:05:e3:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Nov 5 02:00:31 2025 GMT Not After : Feb 3 02:00:31 2026 GMT Subject: CN=c68cc6ee-cc35-472d-8536-fe8f615dee74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:cf:d9:10:37:8e:0a:af:13:31:0d:8b:12: 34:74:09:4a:78:7e:db:5e:62:70:64:82:b8:be:6f: ac:c0:78:0e:dc:03:1e:4d:8a:35:a0:b4:18:ab:73: e8:b1:f4:a2:a7:b2:01:fc:f3:42:77:d3:58:76:f3: 80:ba:b5:4d:16:c6:e1:31:c6:42:14:c6:ee:7b:06: f1:24:5a:d7:34:66:3e:8e:8f:4e:e0:1c:65:2f:57: 1c:0a:b4:ec:fc:d7:a0:ac:3e:f9:71:c3:5d:b6:86: c3:53:43:ee:e4:69:83:d2:d1:9f:56:a0:16:7a:1f: dc:a3:60:53:66:a7:ae:5d:8a:9e:65:5a:d1:7e:8b: 39:a3:72:04:fc:04:13:ae:e2:7a:91:e8:87:95:47: 81:24:66:f1:8f:05:b6:17:3c:56:41:57:73:c0:51: a0:dd:59:d6:d1:06:55:6f:9a:a6:54:d2:d2:3e:47: 0c:bc:56:19:7f:25:80:c4:63:ea:3d:de:35:10:ad: 24:39:f9:90:c3:f8:72:94:cf:22:19:32:37:f8:b9: 89:fa:bb:c2:fc:ed:01:1e:83:3b:58:c6:13:39:bb: 14:3c:70:bc:22:d1:00:e9:63:60:30:b3:11:aa:fd: de:91:e1:3c:f2:a8:f5:a3:41:eb:1a:91:e8:52:b3: 47:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BF:40:72:89:39:D1:8F:59:05:C5:02:AD:2C:5C:55:12:B0:B1:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d76520a6-0821-3591-a391-f0e2ca02a540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:37:90:39:b5:92:60:ed:5a:27:23:dd:6d:40:31:5a:bb:30: 5f:af:58:21:be:73:78:83:e7:51:ea:fa:c5:f4:d9:d1:ff:7c: c3:df:a4:aa:c8:fc:8c:41:15:ce:dc:b8:b8:f5:8c:ec:7c:8a: 17:ec:f2:72:c2:0a:95:dd:eb:fa:4b:16:e4:07:34:3b:73:79: f2:71:34:b9:56:c5:8e:a5:87:c9:a2:09:40:b4:f3:ff:f9:07: 8c:1e:fc:71:47:5c:a1:b5:f7:4a:fa:d8:c6:12:42:7b:76:3a: cd:f9:99:c0:b1:52:e2:79:d8:35:7a:6e:6a:20:fd:c0:b6:21: 2e:c5:10:ce:4a:16:a3:ed:0d:da:c2:b8:50:b9:f3:d5:b0:e6: 39:51:c5:29:1f:01:5e:82:70:32:e8:db:e0:a7:71:3a:a5:9a: 93:02:cf:34:f0:f4:7e:86:95:b5:10:ec:c8:23:0a:f4:f3:ad: 41:a8:69:2a:d4:f3:82:f0:de:bf:4c:e8:42:e8:7b:6a:54:54: c7:08:84:ca:ec:f6:0a:3d:81:61:7e:54:5b:ea:5c:e1:70:8d: de:e7:03:e7:69:c2:ae:e1:2f:73:a1:a1:d1:d0:6c:86:c3:09: 25:c6:df:45:d3:78:01:31:ba:00:c0:e0:e9:49:1d:ed:7d:53: 5e:0d:5a:73 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEvBC2OXVrzb0wXj1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTEwNTAyMDAzMVoXDTI2MDIwMzAyMDAzMVowLzEtMCsGA1UEAxMk YzY4Y2M2ZWUtY2MzNS00NzJkLTg1MzYtZmU4ZjYxNWRlZTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/fP2RA3jgqvEzENixI0dAlKeH7bXmJwZIK4 vm+swHgO3AMeTYo1oLQYq3PosfSip7IB/PNCd9NYdvOAurVNFsbhMcZCFMbuewbx JFrXNGY+jo9O4BxlL1ccCrTs/NegrD75ccNdtobDU0Pu5GmD0tGfVqAWeh/co2BT ZqeuXYqeZVrRfos5o3IE/AQTruJ6keiHlUeBJGbxjwW2FzxWQVdzwFGg3VnW0QZV b5qmVNLSPkcMvFYZfyWAxGPqPd41EK0kOfmQw/hylM8iGTI3+LmJ+rvC/O0BHoM7 WMYTObsUPHC8ItEA6WNgMLMRqv3ekeE88qj1o0HrGpHoUrNHVwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJG/QHKJOdGPWQXFAq0sXFUSsLF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDc2NTIwYTYtMDgyMS0z NTkxLWEzOTEtZjBlMmNhMDJhNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhN5A5tZJg7VonI91tQDFauzBfr1ghvnN4g+dR6vrF9NnR/3zD36Sq yPyMQRXO3Li49YzsfIoX7PJywgqV3ev6SxbkBzQ7c3nycTS5VsWOpYfJoglAtPP/ +QeMHvxxR1yhtfdK+tjGEkJ7djrN+ZnAsVLiedg1em5qIP3AtiEuxRDOShaj7Q3a wrhQufPVsOY5UcUpHwFegnAy6Nvgp3E6pZqTAs808PR+hpW1EOzIIwr0861BqGkq 1POC8N6/TOhC6HtqVFTHCITK7PYKPYFhflRb6lzhcI3e5wPnacKu4S9zoaHR0GyG wwklxt9F03gBMboAwODpSR3tfVNeDVpz -----END CERTIFICATE-----Generated at Wed Nov 5 14:33:11 2025 by rpki-client