$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbf32dc3-2f22-308b-937d-bd7828e78f18.roa File: bbf32dc3-2f22-308b-937d-bd7828e78f18.roa (raw, json) Hash identifier: qwRrSFXjYEKP+BLLy8M5pVvsFwcEa9DJfsATshsofRI= Subject key identifier: A7:7B:14:2D:DB:54:FB:A7:26:54:5F:05:6B:78:F7:FA:3E:A2:CE:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B13D6CBE237CB98677C8B9F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbf32dc3-2f22-308b-937d-bd7828e78f18.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 36620 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:cb:e2:37:cb:98:67:7c:8b:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=60e0946a-4d7f-49e9-8714-e9b53b1a4653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7c:0f:21:87:60:7a:26:4f:ef:dc:70:14:f3: 0d:b6:7b:8d:eb:c1:5a:4b:da:af:9f:4c:97:22:d4: 8a:15:59:11:4b:23:64:8e:c5:31:ad:11:96:a0:ec: 05:9b:59:27:bd:7b:fe:a5:69:a8:58:0d:0f:81:87: 71:4e:91:25:e1:96:e6:f7:af:f8:9b:43:06:30:a5: a6:a1:63:8c:d7:4d:9d:fc:df:ea:aa:20:1a:1f:31: 0e:b4:80:7a:6d:d1:29:7a:b0:d1:bf:2e:4b:37:eb: 07:49:03:32:c9:d7:e9:7b:91:7c:bd:3d:61:90:8f: 00:0a:3b:64:ca:3e:7b:0f:e0:19:3e:57:0d:a8:0e: fc:f1:11:35:d9:20:70:c0:fd:b9:18:64:35:f3:bc: 27:46:0e:a2:5d:29:bd:68:dc:c2:59:88:3c:17:da: 03:4b:5b:d0:02:ee:8f:28:50:28:c7:d6:21:b5:f9: d0:70:07:92:9a:b4:29:f0:2a:68:44:fc:b1:dc:0d: a5:71:f3:64:a4:55:a4:a7:1b:5f:d1:f3:9d:38:db: 55:5b:43:34:77:09:99:61:e2:2a:df:4c:be:00:95: 69:1a:03:1c:e7:87:e2:53:be:24:cf:c7:5f:1a:dc: 6a:09:da:6c:42:28:a7:3f:dd:07:5e:a9:6d:f8:52: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:7B:14:2D:DB:54:FB:A7:26:54:5F:05:6B:78:F7:FA:3E:A2:CE:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbf32dc3-2f22-308b-937d-bd7828e78f18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:56:b9:29:d7:33:b9:b9:e2:a1:de:fd:f0:15:93:26:77:77: 1f:39:04:85:34:29:38:5e:4f:17:4d:fe:fc:26:2f:c0:1c:58: fe:6f:f1:8a:be:9a:12:51:7e:1c:41:6e:d5:50:66:7b:bc:97: 17:38:31:bd:b6:08:69:1e:e2:d4:e6:76:13:df:ee:da:5c:65: fd:a7:e2:c8:37:bf:68:d3:20:6d:65:1c:91:e5:41:fe:0b:c7: 44:35:f7:d7:5b:3a:c0:df:7c:10:84:af:49:d6:08:e7:f9:93: 82:47:7a:8f:08:42:ca:ff:e4:7b:8f:5b:0d:f5:43:c4:29:b5: 8b:94:da:02:57:7b:75:1b:72:af:f5:ff:45:8c:6f:b0:9a:b8: 49:b3:73:37:54:d0:5a:d1:5e:52:25:c6:ae:9a:2f:03:39:00: 1f:82:98:4d:4b:9b:36:0e:41:f2:6a:6a:4c:0a:9d:b1:d2:88: 3c:ca:84:a4:e6:fe:a0:52:71:ed:03:00:06:d5:a3:f7:2e:45: ed:a7:5d:b4:80:ae:6d:00:50:f2:8b:1a:69:9b:1d:1b:08:fd: 7c:15:44:2b:70:12:b7:3f:3a:85:27:87:f9:c5:0b:02:b8:d9: 41:ca:0f:66:4c:03:ca:75:68:d0:4c:bb:ff:a1:bf:6a:75:52: 20:ad:56:1d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1sviN8uYZ3yLn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NjBlMDk0NmEtNGQ3Zi00OWU5LTg3MTQtZTliNTNiMWE0NjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXwPIYdgeiZP79xwFPMNtnuN68FaS9qvn0yX ItSKFVkRSyNkjsUxrRGWoOwFm1knvXv+pWmoWA0PgYdxTpEl4Zbm96/4m0MGMKWm oWOM102d/N/qqiAaHzEOtIB6bdEperDRvy5LN+sHSQMyydfpe5F8vT1hkI8ACjtk yj57D+AZPlcNqA788RE12SBwwP25GGQ187wnRg6iXSm9aNzCWYg8F9oDS1vQAu6P KFAox9YhtfnQcAeSmrQp8CpoRPyx3A2lcfNkpFWkpxtf0fOdONtVW0M0dwmZYeIq 30y+AJVpGgMc54fiU74kz8dfGtxqCdpsQiinP90HXqlt+FJwgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFKd7FC3bVPunJlRfBWt49/o+os7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJmMzJkYzMtMmYyMi0z MDhiLTkzN2QtYmQ3ODI4ZTc4ZjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC7Vrkp1zO5ueKh3v3wFZMmd3cfOQSFNCk4Xk8XTf78Ji/AHFj+b/GK vpoSUX4cQW7VUGZ7vJcXODG9tghpHuLU5nYT3+7aXGX9p+LIN79o0yBtZRyR5UH+ C8dENffXWzrA33wQhK9J1gjn+ZOCR3qPCELK/+R7j1sN9UPEKbWLlNoCV3t1G3Kv 9f9FjG+wmrhJs3M3VNBa0V5SJcaumi8DOQAfgphNS5s2DkHyampMCp2x0og8yoSk 5v6gUnHtAwAG1aP3LkXtp120gK5tAFDyixppmx0bCP18FUQrcBK3PzqFJ4f5xQsC uNlByg9mTAPKdWjQTLv/ob9qdVIgrVYd -----END CERTIFICATE-----Generated at Wed Oct 29 09:20:48 2025 by rpki-client