$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643a4af7-8193-3d49-8def-edc6e4fef032.roa File: 643a4af7-8193-3d49-8def-edc6e4fef032.roa (raw, json) Hash identifier: eSrKXMINxlDa32h7xu9Zi6dCDnk/zCR2FWfL23wb7dI= Subject key identifier: 41:70:C4:51:B8:43:02:1C:3E:F1:72:4A:41:0F:61:E2:C2:A0:C8:B1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B13D6D3BF08C1C323D85E29C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643a4af7-8193-3d49-8def-edc6e4fef032.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 36621 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d3:bf:08:c1:c3:23:d8:5e:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=22bda783-e786-4caf-8eb9-ce7daadd9089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:07:eb:4e:b0:94:9f:25:07:40:ae:02:46: 5b:0a:f2:8f:ef:cc:4e:96:38:b4:42:ec:71:3e:1e: e3:f5:92:d9:64:c2:45:11:90:a2:9d:a2:e5:71:32: 22:ea:19:bb:88:09:55:86:df:ab:4d:4f:6f:cd:17: 6d:ba:da:3c:bf:60:16:fd:b5:af:7b:09:67:12:a7: 0c:ea:1a:2e:f2:9c:1a:fc:9b:99:f0:e6:2d:72:8e: 78:76:d0:ee:65:50:ae:57:95:14:ac:c3:0d:73:4e: 86:9e:80:b8:a9:54:ed:e7:39:d3:85:01:08:f1:7f: 87:e4:6a:5f:71:b6:00:77:9c:12:d9:35:a7:35:04: e6:24:34:4f:36:b0:9a:93:86:1a:e0:6f:57:c5:aa: 78:58:a6:d7:0c:ea:00:ac:5b:32:7b:49:4d:dc:9f: a6:fa:56:13:61:9d:3d:73:8e:94:e4:0a:8c:74:ba: 25:65:8f:4f:10:17:24:27:5c:ec:69:36:11:5f:bd: 5d:69:17:de:0d:6f:39:26:7a:bb:6e:70:2d:9c:5d: df:52:20:53:6e:98:89:96:aa:bc:0a:e7:97:17:6a: 1d:e6:ed:5a:7f:33:ce:11:3c:cb:de:89:2b:c6:b4: 79:4c:a4:a0:b5:85:de:cd:74:15:cf:ad:16:4b:78: 1a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:70:C4:51:B8:43:02:1C:3E:F1:72:4A:41:0F:61:E2:C2:A0:C8:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/643a4af7-8193-3d49-8def-edc6e4fef032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d4:15:e1:3a:3d:c3:fd:50:58:1d:41:71:28:cb:bf:01:91: 52:1a:df:75:c4:63:c1:ee:c7:65:9f:4c:06:9c:f4:44:97:07: 0d:71:e3:fb:3d:ea:0f:26:b2:43:66:9c:ee:09:8f:93:e7:31: 42:61:d8:45:ea:da:71:d2:8e:0e:78:9b:b1:30:08:27:52:1b: 30:71:fa:ac:59:81:66:63:ff:3c:de:e2:95:f1:21:bc:d9:37: a3:dd:b7:1a:71:70:ba:80:d0:83:53:20:fd:63:40:2f:3d:1f: 65:c9:d2:12:df:9e:eb:62:e2:ba:54:a7:9e:d1:03:e9:af:17: 10:d4:c2:61:cf:25:21:8b:57:be:a9:a9:06:38:71:7c:9b:d4: a7:7f:bc:ca:36:0f:67:cc:e0:71:26:19:23:66:0d:16:b2:4a: e9:a2:89:c5:09:9c:8e:dd:9b:d1:ab:93:ff:71:c0:b8:af:68: 21:b6:8b:02:d3:ac:98:f8:24:a4:b8:8d:9b:97:9f:ab:56:8b: 9b:6a:5b:65:c0:fa:fc:60:f5:13:1a:99:2d:93:fc:b7:97:b8: 96:1e:0d:3d:8f:f4:46:4f:50:c7:8e:42:80:1e:c4:34:ba:e2: be:11:1a:db:6e:a6:3a:b0:dd:9a:ab:10:24:40:5e:b2:f5:e7: 10:2b:29:03 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1tO/CMHDI9heKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MjJiZGE3ODMtZTc4Ni00Y2FmLThlYjktY2U3ZGFhZGQ5MDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn4H606wlJ8lB0CuAkZbCvKP78xOlji0Quxx Ph7j9ZLZZMJFEZCinaLlcTIi6hm7iAlVht+rTU9vzRdtuto8v2AW/bWvewlnEqcM 6hou8pwa/JuZ8OYtco54dtDuZVCuV5UUrMMNc06GnoC4qVTt5znThQEI8X+H5Gpf cbYAd5wS2TWnNQTmJDRPNrCak4Ya4G9Xxap4WKbXDOoArFsye0lN3J+m+lYTYZ09 c46U5AqMdLolZY9PEBckJ1zsaTYRX71daRfeDW85Jnq7bnAtnF3fUiBTbpiJlqq8 CueXF2od5u1afzPOETzL3okrxrR5TKSgtYXezXQVz60WS3gaswIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEFwxFG4QwIcPvFySkEPYeLCoMixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQzYTRhZjctODE5My0z ZDQ5LThkZWYtZWRjNmU0ZmVmMDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAH1BXhOj3D/VBYHUFxKMu/AZFSGt91xGPB7sdln0wGnPRElwcNceP7 PeoPJrJDZpzuCY+T5zFCYdhF6tpx0o4OeJuxMAgnUhswcfqsWYFmY/883uKV8SG8 2Tej3bcacXC6gNCDUyD9Y0AvPR9lydIS357rYuK6VKee0QPprxcQ1MJhzyUhi1e+ qakGOHF8m9Snf7zKNg9nzOBxJhkjZg0WskrpoonFCZyO3ZvRq5P/ccC4r2ghtosC 06yY+CSkuI2bl5+rVoubaltlwPr8YPUTGpktk/y3l7iWHg09j/RGT1DHjkKAHsQ0 uuK+ERrbbqY6sN2aqxAkQF6y9ecQKykD -----END CERTIFICATE-----Generated at Wed Sep 10 20:49:10 2025 by rpki-client