$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa File: 23885c03-aace-3b48-a92a-a3768e582bdd.roa (raw, json) Hash identifier: hMhy6/CNOEvfJexXA9MSWgB+eOuVtG12O7LtUKt6eus= Subject key identifier: A8:4E:5A:84:8A:2A:52:61:9D:6C:D5:DD:99:F2:27:5D:47:66:A5:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B0746D1D5D062A23BF11161E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa Signing time: Sat 30 Aug 2025 13:00:42 +0000 ROA not before: Sat 30 Aug 2025 13:00:42 +0000 ROA not after: Fri 28 Nov 2025 14:00:42 +0000 asID: 36620 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:07:46:d1:d5:d0:62:a2:3b:f1:11:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 30 13:00:42 2025 GMT Not After : Nov 28 14:00:42 2025 GMT Subject: CN=d04c6ef7-41ad-40d0-a99f-858e1488c171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:aa:ee:5f:88:5e:42:fd:24:33:db:01:dc:c7: e5:db:55:0f:d3:42:51:40:c8:d6:71:db:8f:19:5a: af:a4:c3:94:b8:3a:3a:98:7f:52:3e:55:8d:d0:31: 35:02:1b:67:9a:e5:c1:c4:ad:c7:a8:4e:21:e1:ef: af:85:d8:76:04:27:a8:6e:64:91:6d:aa:85:7d:b8: 02:23:36:aa:ab:e5:7d:2e:cf:49:cb:88:00:6b:cc: f3:10:3a:d2:47:73:33:fe:5b:3b:dc:5d:32:ff:31: 4c:29:e5:fd:be:6d:76:3e:e4:e4:3e:a2:13:0a:41: b0:12:b7:9a:e0:0f:5d:1f:ac:f0:82:b5:23:ef:2e: 44:ce:61:a6:fe:6c:fb:24:6e:3c:a0:5c:08:ab:11: 0c:bc:f8:dc:a6:1f:37:0e:53:d1:36:d1:0b:e2:9a: b7:59:52:19:db:32:f8:2c:15:eb:f1:27:83:32:5b: 49:57:03:be:d6:39:c0:06:f5:b1:29:23:86:69:95: 31:81:88:d1:4c:56:5e:07:c8:04:42:67:0d:7e:62: 22:be:39:81:61:1a:73:9e:28:8c:30:27:40:37:33: 67:f9:8c:f8:89:a7:ef:01:f1:0b:88:fa:5c:7e:b0: 6d:87:a2:0b:14:91:59:81:34:96:ca:5b:43:d3:f5: e1:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4E:5A:84:8A:2A:52:61:9D:6C:D5:DD:99:F2:27:5D:47:66:A5:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23885c03-aace-3b48-a92a-a3768e582bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:37:2e:e1:8b:3b:f8:df:66:88:71:62:b3:f6:48:ae:5f:70: 56:ba:7e:ae:79:43:9d:50:e7:21:1c:6d:83:e4:c0:6d:04:9b: 15:f3:b6:db:07:35:9d:ac:f7:40:46:61:6f:fe:66:66:3c:06: 3b:5d:a7:ec:47:7f:83:0a:7d:d4:ac:06:1d:42:d9:3d:0b:4a: 8b:f2:c5:0e:20:94:59:36:a8:e0:55:49:91:61:17:af:c7:a9: a6:4b:c9:72:ef:f1:9a:cf:73:10:b8:b8:d9:45:5f:e2:aa:94: 15:75:cb:91:cc:01:ca:e1:1d:fe:69:1c:af:57:76:1e:cb:c2: 7d:fd:46:3d:4f:c6:81:a0:38:2c:29:64:01:93:4a:f1:d8:65: e0:24:9a:39:8a:c1:5f:55:18:65:bf:76:85:3f:e1:42:1c:82: 77:c3:e5:6d:0a:86:0c:a5:25:81:3b:3d:3d:2b:44:6c:60:ef: f8:0d:03:b7:6e:85:c0:c3:98:42:ae:c7:f5:b9:a1:81:50:15: ce:9a:1e:ad:35:e5:8c:4b:b9:57:ea:99:55:00:4a:55:84:fc: 3e:fe:7e:50:5f:ed:a6:23:29:d5:3c:b4:72:d2:e1:dc:8e:18: 2f:c5:ab:76:f0:8b:b5:7c:ac:d2:70:1d:4d:46:14:a8:41:b6: 7d:07:8c:36 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsHRtHV0GKiO/ERYeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgzMDEzMDA0MloXDTI1MTEyODE0MDA0MlowLzEtMCsGA1UEAxMk ZDA0YzZlZjctNDFhZC00MGQwLWE5OWYtODU4ZTE0ODhjMTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKruX4heQv0kM9sB3Mfl21UP00JRQMjWcduP GVqvpMOUuDo6mH9SPlWN0DE1AhtnmuXBxK3HqE4h4e+vhdh2BCeobmSRbaqFfbgC Izaqq+V9Ls9Jy4gAa8zzEDrSR3Mz/ls73F0y/zFMKeX9vm12PuTkPqITCkGwErea 4A9dH6zwgrUj7y5EzmGm/mz7JG48oFwIqxEMvPjcph83DlPRNtEL4pq3WVIZ2zL4 LBXr8SeDMltJVwO+1jnABvWxKSOGaZUxgYjRTFZeB8gEQmcNfmIivjmBYRpzniiM MCdANzNn+Yz4iafvAfELiPpcfrBth6ILFJFZgTSWyltD0/XhSQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKhOWoSKKlJhnWzV3ZnyJ11HZqXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjM4ODVjMDMtYWFjZS0z YjQ4LWE5MmEtYTM3NjhlNTgyYmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBUNy7hizv432aIcWKz9kiuX3BWun6ueUOdUOchHG2D5MBtBJsV87bb BzWdrPdARmFv/mZmPAY7XafsR3+DCn3UrAYdQtk9C0qL8sUOIJRZNqjgVUmRYRev x6mmS8ly7/Gaz3MQuLjZRV/iqpQVdcuRzAHK4R3+aRyvV3Yey8J9/UY9T8aBoDgs KWQBk0rx2GXgJJo5isFfVRhlv3aFP+FCHIJ3w+VtCoYMpSWBOz09K0RsYO/4DQO3 boXAw5hCrsf1uaGBUBXOmh6tNeWMS7lX6plVAEpVhPw+/n5QX+2mIynVPLRy0uHc jhgvxat28Iu1fKzScB1NRhSoQbZ9B4w2 -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:02 2025 by rpki-client