$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa File: d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa (raw, json) Hash identifier: a/Y1PTo+CsIEbqfLYvTaSx1FEIM8X+HhIDCRXoAMa78= Subject key identifier: AA:45:16:88:69:C9:2E:AB:48:4C:4E:DB:57:91:79:C2:B0:64:7C:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584A8F3B820CB77A94320B32EA00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa Signing time: Fri 18 Jul 2025 13:01:05 +0000 ROA not before: Fri 18 Jul 2025 13:01:05 +0000 ROA not after: Thu 16 Oct 2025 13:01:05 +0000 asID: 211369 IP address blocks: 192.68.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8f:3b:82:0c:b7:7a:94:32:0b:32:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 18 13:01:05 2025 GMT Not After : Oct 16 13:01:05 2025 GMT Subject: CN=3ae509c1-dd7d-45a3-879c-9255c4cb2255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:40:65:21:58:b4:21:2b:39:bd:78:f8:8e:2a: 9f:86:8e:f3:e1:58:67:95:49:3f:6b:6f:9b:9b:52: d3:d6:74:e5:bf:3a:ab:04:41:60:c3:6d:81:7b:bc: 85:a9:3a:34:69:f0:14:37:03:75:de:19:6e:46:66: af:79:7f:42:b2:f3:18:db:49:7c:90:42:08:a6:c4: ba:63:63:49:e0:dd:86:6c:4f:83:d3:33:0c:c0:b2: 1f:7a:1b:d2:0a:e3:25:de:58:39:d7:0e:e5:3c:ca: 10:bc:2c:5c:d5:ca:fd:48:4f:aa:11:6a:77:06:84: ad:c6:47:ee:10:66:38:ec:96:33:9e:f3:e4:e9:22: c9:c1:cb:f1:cd:92:3e:ea:7a:b1:6d:31:f2:75:cd: 93:9a:eb:91:d9:5d:6f:d0:74:49:74:9e:93:f0:fa: fc:d0:43:57:d8:ad:21:3d:77:73:bb:1e:9d:f3:49: dc:0a:ba:5d:ac:c8:bb:e4:b9:0e:7b:0d:00:52:f2: 60:31:69:61:93:03:56:b8:03:9e:c0:a9:7e:3a:33: c5:2f:45:f2:39:73:1d:39:4d:19:72:c5:00:1b:bd: 84:fd:5c:ff:49:7e:d0:b9:13:5e:f9:62:22:7a:58: 47:84:53:43:3c:70:5f:43:bc:09:71:84:d4:ea:ee: 34:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:45:16:88:69:C9:2E:AB:48:4C:4E:DB:57:91:79:C2:B0:64:7C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d9fc1d8b-304d-3457-a05a-3e36f6a74a4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.68.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:26:9c:fa:42:50:47:76:3e:d5:c1:c8:cb:d1:0d:e4:19:c6: 46:4c:47:f8:76:52:28:23:57:40:b4:75:cc:30:b9:eb:18:70: e7:a4:9a:01:b2:b9:05:71:1e:aa:ad:ba:33:9c:84:d8:2d:77: 89:34:f5:63:16:bf:41:3e:dc:e8:e1:3b:fc:d3:85:b5:fb:c8: c6:6b:4c:c2:99:0d:de:69:2e:c4:39:43:66:a3:70:4b:b0:1a: 5a:50:eb:b1:07:45:77:73:40:6c:4f:32:bf:89:ff:16:a6:20: d4:b5:62:11:ba:b5:5e:c1:30:cb:e8:a9:23:3f:e5:23:3c:08: 8e:b0:54:ff:a3:84:9e:29:ef:55:90:ed:53:3c:76:33:b4:cf: 44:de:1c:e4:fe:32:3b:c4:49:97:76:24:00:97:26:86:02:31: d7:dd:ad:f2:4b:99:f3:ec:86:bd:62:40:3d:01:da:72:46:1e: fb:59:d6:e3:e3:94:f1:ae:88:b2:1e:48:40:60:4f:de:9f:33: 5e:d6:e2:4d:87:2e:49:32:75:09:e3:4f:13:89:f5:dc:08:36: d6:34:04:3e:39:63:f4:19:d0:73:b6:18:5f:9a:c5:3d:a0:49: 83:d1:e6:60:15:52:04:2f:e7:e7:19:fa:f7:b9:71:a1:0c:95: 8c:ee:93:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqPO4IMt3qUMgsy6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDcxODEzMDEwNVoXDTI1MTAxNjEzMDEwNVowLzEtMCsGA1UEAxMk M2FlNTA5YzEtZGQ3ZC00NWEzLTg3OWMtOTI1NWM0Y2IyMjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkBlIVi0ISs5vXj4jiqfho7z4VhnlUk/a2+b m1LT1nTlvzqrBEFgw22Be7yFqTo0afAUNwN13hluRmaveX9CsvMY20l8kEIIpsS6 Y2NJ4N2GbE+D0zMMwLIfehvSCuMl3lg51w7lPMoQvCxc1cr9SE+qEWp3BoStxkfu EGY47JYznvPk6SLJwcvxzZI+6nqxbTHydc2TmuuR2V1v0HRJdJ6T8Pr80ENX2K0h PXdzux6d80ncCrpdrMi75LkOew0AUvJgMWlhkwNWuAOewKl+OjPFL0XyOXMdOU0Z csUAG72E/Vz/SX7QuRNe+WIielhHhFNDPHBfQ7wJcYTU6u40BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpFFohpyS6rSExO21eRecKwZHyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDlmYzFkOGItMzA0ZC0z NDU3LWEwNWEtM2UzNmY2YTc0YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwER+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYmnPpCUEd2PtXByMvRDeQZxkZMR/h2UigjV0C0dcwwuesYcOekmgGy uQVxHqqtujOchNgtd4k09WMWv0E+3OjhO/zThbX7yMZrTMKZDd5pLsQ5Q2ajcEuw GlpQ67EHRXdzQGxPMr+J/xamINS1YhG6tV7BMMvoqSM/5SM8CI6wVP+jhJ4p71WQ 7VM8djO0z0TeHOT+MjvESZd2JACXJoYCMdfdrfJLmfPshr1iQD0B2nJGHvtZ1uPj lPGuiLIeSEBgT96fM17W4k2HLkkydQnjTxOJ9dwINtY0BD45Y/QZ0HO2GF+axT2g SYPR5mAVUgQv5+cZ+ve5caEMlYzukwA= -----END CERTIFICATE-----Generated at Tue Aug 5 16:40:26 2025 by rpki-client