$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40e8131f-8b77-3c98-aad9-1e97b5f7c90a.roa File: 40e8131f-8b77-3c98-aad9-1e97b5f7c90a.roa (raw, json) Hash identifier: 0f4a+DVRUTQtXs3rtfYLsFhXOFySJtYjYo6MaoXK6zQ= Subject key identifier: DA:BC:14:88:CB:C2:0A:99:53:B3:DD:E7:02:F3:CD:E6:70:0E:84:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B13D6D197B0C0FB8CF4A1E190 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40e8131f-8b77-3c98-aad9-1e97b5f7c90a.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 396611 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d1:97:b0:c0:fb:8c:f4:a1:e1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=071ab763-480a-4d4f-82b3-0c0bdd05c0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0a:82:51:0a:de:5d:85:6a:34:9f:ff:3c:fc: 0e:e5:d2:c1:1b:83:b8:05:d3:3b:24:58:fc:ed:5a: fc:e9:47:1d:7a:02:1c:98:96:bd:39:19:58:7f:d4: 1c:1a:97:3a:44:ae:c8:9c:38:8f:71:ac:e8:33:84: 64:16:76:41:4d:dc:cd:68:f8:0f:45:cd:45:2a:25: d5:68:e4:8e:d7:06:e2:d3:35:0d:32:c2:4e:36:cf: 3d:b2:0b:c7:df:85:33:d8:ce:94:ce:b8:cd:b7:5b: eb:ca:3e:e4:7b:ef:90:ef:fd:2e:6f:0c:18:da:23: 13:80:6f:29:ba:27:f3:47:b8:a1:e8:d7:9d:55:34: 57:70:05:90:52:db:f0:3b:36:ae:a5:ca:6b:62:e6: 15:b7:52:64:31:3d:d8:e3:e9:b1:d0:a5:f5:9d:93: 22:dc:76:9a:6b:c9:5d:68:7c:01:aa:42:e4:62:89: 5d:87:90:61:df:8f:0f:29:33:20:1c:46:75:ec:99: 7f:6b:dc:32:9f:88:45:c9:f8:d3:b2:be:a5:a5:27: c4:6d:d1:d2:04:79:49:24:f4:e5:84:ba:e5:a8:e9: 42:2d:19:d2:b9:cd:d2:5d:5a:6c:2f:38:aa:a4:7f: 5d:13:e8:13:6b:18:94:69:31:95:c3:31:63:7b:1e: e3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BC:14:88:CB:C2:0A:99:53:B3:DD:E7:02:F3:CD:E6:70:0E:84:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40e8131f-8b77-3c98-aad9-1e97b5f7c90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:91:9d:9d:df:ff:92:2f:6f:0e:6f:a7:92:86:96:23:98:1b: 89:b2:d7:d7:28:e2:25:02:ba:55:d0:3d:86:72:33:7c:06:e7: 5e:8b:ab:ca:d4:e4:89:7e:90:89:09:b9:b7:28:88:5f:16:7a: 43:ce:65:b1:7f:ea:d8:dd:72:c0:25:10:94:a1:0a:8b:55:7e: 2e:23:16:7a:a3:e0:3a:12:82:45:d7:66:45:3a:3f:a9:8f:43: ea:b1:b2:0c:3a:22:b6:be:88:01:70:9a:eb:84:c3:f7:84:8e: 85:89:c3:24:2b:5c:dd:56:1a:6c:da:31:89:4c:e4:e9:75:39: da:a9:0b:83:a0:ed:c3:96:06:ca:5c:93:79:3e:ae:2b:5e:29: 08:43:d8:82:ab:47:ee:74:e7:02:c7:cd:3f:74:0b:e6:93:92: 7f:bf:b5:60:d2:79:de:f8:24:86:af:c8:84:da:b8:e4:de:0b: b6:87:d5:5f:94:16:74:b4:48:7a:85:56:96:1b:65:69:46:db: 37:8e:75:f6:5c:e3:1f:7e:b0:b6:50:2c:98:79:c8:ad:c8:d8: 95:be:5c:ed:80:4d:b9:54:cf:3c:66:ea:b1:92:6a:e3:b0:43: ca:fc:aa:8a:ce:4e:56:c5:59:65:d3:e2:97:50:db:c7:06:f9: 90:65:47:fe -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1tGXsMD7jPSh4ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MDcxYWI3NjMtNDgwYS00ZDRmLTgyYjMtMGMwYmRkMDVjMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAqCUQreXYVqNJ//PPwO5dLBG4O4BdM7JFj8 7Vr86UcdegIcmJa9ORlYf9QcGpc6RK7InDiPcazoM4RkFnZBTdzNaPgPRc1FKiXV aOSO1wbi0zUNMsJONs89sgvH34Uz2M6UzrjNt1vryj7ke++Q7/0ubwwY2iMTgG8p uifzR7ih6NedVTRXcAWQUtvwOzaupcprYuYVt1JkMT3Y4+mx0KX1nZMi3Haaa8ld aHwBqkLkYoldh5Bh348PKTMgHEZ17Jl/a9wyn4hFyfjTsr6lpSfEbdHSBHlJJPTl hLrlqOlCLRnSuc3SXVpsLziqpH9dE+gTaxiUaTGVwzFjex7jBwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNq8FIjLwgqZU7Pd5wLzzeZwDoToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBlODEzMWYtOGI3Ny0z Yzk4LWFhZDktMWU5N2I1ZjdjOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBgkZ2d3/+SL28Ob6eShpYjmBuJstfXKOIlArpV0D2GcjN8Budei6vK 1OSJfpCJCbm3KIhfFnpDzmWxf+rY3XLAJRCUoQqLVX4uIxZ6o+A6EoJF12ZFOj+p j0PqsbIMOiK2vogBcJrrhMP3hI6FicMkK1zdVhps2jGJTOTpdTnaqQuDoO3DlgbK XJN5Pq4rXikIQ9iCq0fudOcCx80/dAvmk5J/v7Vg0nne+CSGr8iE2rjk3gu2h9Vf lBZ0tEh6hVaWG2VpRts3jnX2XOMffrC2UCyYecityNiVvlztgE25VM88Zuqxkmrj sEPK/KqKzk5WxVll0+KXUNvHBvmQZUf+ -----END CERTIFICATE-----Generated at Wed Sep 10 20:26:34 2025 by rpki-client