$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa File: 8644eaaa-633c-3556-947b-d6f7912835f5.roa (raw, json) Hash identifier: nB1r1lHNiILWodyJnJj1HWwEwcdjtwy1IvDmY9oTOQk= Subject key identifier: 11:9A:F2:A1:35:B6:A2:06:17:AC:C7:49:24:44:84:DE:2F:0F:09:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2496EAC6AC396CEB18399900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 396603 IP address blocks: 192.42.175.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:ea:c6:ac:39:6c:eb:18:39:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=8d7db3a3-cb18-441d-a579-a0b136897e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:cd:39:0e:3a:1d:a3:47:fe:f3:c7:1e:a3:8f: f7:18:1d:bd:cc:9b:da:59:b5:ca:c0:aa:e6:9c:91: 72:f3:a0:21:33:b7:0b:fc:b6:b3:ff:7c:9e:a2:9b: d0:99:af:35:4b:27:1d:e7:3f:c6:ed:dd:1f:80:d4: c6:93:14:52:b4:b2:3c:eb:31:ad:2d:5b:2e:aa:5d: 7b:6a:1d:c8:a8:98:72:9e:18:07:fa:72:74:5a:22: 0d:0e:9c:b0:7e:4f:61:91:8e:bc:93:29:fb:e0:4b: b8:ae:8d:82:19:23:f3:6a:dd:0a:8e:83:4f:ed:64: a0:78:13:63:cc:04:9a:f2:88:8b:c6:ad:90:b8:0b: ef:45:c1:38:3e:e3:f8:6a:ce:f5:da:75:7f:11:1f: db:4b:53:e5:3f:b3:d0:5f:df:67:4d:a3:aa:24:a5: cc:07:5c:22:c9:af:24:f2:c5:1d:e7:34:96:12:3c: 46:1b:45:78:1a:ac:64:2a:20:f0:74:f9:e4:c0:9e: c9:3e:c7:ac:d3:89:b3:8c:6e:97:93:64:32:5d:0b: c3:4c:d7:ae:10:21:5f:43:30:40:ae:c4:54:80:63: 94:fe:86:b8:f4:32:24:a8:97:6d:4a:9d:f0:ac:89: 4b:dd:cd:a2:29:2d:11:2f:0a:00:91:a9:56:15:b8: 94:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9A:F2:A1:35:B6:A2:06:17:AC:C7:49:24:44:84:DE:2F:0F:09:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8644eaaa-633c-3556-947b-d6f7912835f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.175.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:73:39:c6:06:20:a6:29:9e:ab:a9:65:dd:a0:04:0d:03:26: 96:9f:2b:e8:dc:b5:76:ff:28:90:ed:f1:38:ae:6b:48:fc:00: 18:1f:ba:6a:36:5a:f1:a1:99:9a:40:3b:26:cf:3c:89:ef:14: d9:a0:4d:e9:d6:ef:47:3d:59:93:c3:68:a7:04:c1:7c:d2:f0: d5:3c:c4:c1:30:75:97:48:06:17:c4:1d:c5:15:b7:0c:9e:ff: ab:00:e2:a3:37:b4:8e:3b:4c:83:dc:75:7e:5b:c4:11:6e:c6: 10:0c:1d:0e:06:36:89:17:a3:8b:2b:f8:64:5c:14:b8:51:92: 83:20:e8:40:31:44:5e:e8:40:8f:67:2b:51:aa:0e:3d:3e:de: c0:50:36:ab:00:05:f7:57:c9:3e:dd:49:13:78:65:9f:b2:47: 58:bb:da:e2:68:c3:ea:03:d1:c5:95:75:3a:88:14:58:d9:09: bf:c1:fe:7f:ec:46:a4:6f:7f:c6:16:20:57:f1:c8:fa:77:68: 72:ec:0e:f0:d4:7f:61:54:0a:52:91:77:78:a5:e9:73:b3:f7: b6:07:8d:40:72:6a:c2:a4:3a:4c:a4:ad:05:dc:f1:f0:0f:12: b7:14:9c:e6:cc:19:93:e7:20:b1:a5:ef:09:1f:51:e6:e0:f9: 8a:f4:f4:23 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsklurGrDls6xg5mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk OGQ3ZGIzYTMtY2IxOC00NDFkLWE1NzktYTBiMTM2ODk3ZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs05Djodo0f+88ceo4/3GB29zJvaWbXKwKrm nJFy86AhM7cL/Laz/3yeopvQma81Sycd5z/G7d0fgNTGkxRStLI86zGtLVsuql17 ah3IqJhynhgH+nJ0WiINDpywfk9hkY68kyn74Eu4ro2CGSPzat0KjoNP7WSgeBNj zASa8oiLxq2QuAvvRcE4PuP4as712nV/ER/bS1PlP7PQX99nTaOqJKXMB1wiya8k 8sUd5zSWEjxGG0V4GqxkKiDwdPnkwJ7JPses04mzjG6Xk2QyXQvDTNeuECFfQzBA rsRUgGOU/oa49DIkqJdtSp3wrIlL3c2iKS0RLwoAkalWFbiUMQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBGa8qE1tqIGF6zHSSREhN4vDwkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY0NGVhYWEtNjMzYy0z NTU2LTk0N2ItZDZmNzkxMjgzNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCqvHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCFcznGBiCmKZ6rqWXdoAQNAyaWnyvo3LV2/yiQ7fE4rmtI/AAYH7pq NlrxoZmaQDsmzzyJ7xTZoE3p1u9HPVmTw2inBMF80vDVPMTBMHWXSAYXxB3FFbcM nv+rAOKjN7SOO0yD3HV+W8QRbsYQDB0OBjaJF6OLK/hkXBS4UZKDIOhAMURe6ECP ZytRqg49Pt7AUDarAAX3V8k+3UkTeGWfskdYu9riaMPqA9HFlXU6iBRY2Qm/wf5/ 7Eakb3/GFiBX8cj6d2hy7A7w1H9hVApSkXd4pelzs/e2B41AcmrCpDpMpK0F3PHw DxK3FJzmzBmT5yCxpe8JH1Hm4PmK9PQj -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:52 2025 by rpki-client