$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa File: f44b7e37-d148-373b-9e27-ef3288bb1317.roa (raw, json) Hash identifier: bKPg199MD5MrSTKwJGGyaWvxTRhdDYhWvWjmZVPthus= Subject key identifier: FA:58:51:18:41:AF:54:00:64:C6:2D:A0:79:A0:45:F3:9C:AE:EB:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B13D6CED89627FA7211BA2F0C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 396555 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:ce:d8:96:27:fa:72:11:ba:2f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=cd7db0c2-cbbb-4f2b-b738-508c8c905ac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:81:4f:b9:34:8c:ac:8c:c4:2c:f7:63:3b: 6e:f4:6c:cc:1b:b7:53:0c:34:70:29:00:69:3a:32: 33:2d:a5:af:8e:24:ed:7f:1c:1c:b2:35:1a:67:11: e9:33:21:71:bf:4b:dd:79:ab:f5:1d:89:00:5d:e9: ec:91:1b:43:29:89:e4:6d:9c:a7:8e:7a:54:5a:04: de:e5:48:7c:fd:73:82:a7:a9:98:98:0a:0f:0e:7a: 87:cf:4a:75:17:86:82:5c:94:fc:85:96:f8:e6:a4: d5:74:04:1b:57:65:12:e7:61:f2:69:aa:cb:b6:86: 16:4b:d9:2c:35:ae:88:35:98:f6:1a:be:c1:86:cf: d3:af:49:50:d4:8a:85:e6:50:86:94:4e:c7:2d:cb: f7:3d:3c:49:35:bc:1d:58:d4:62:5b:54:db:18:65: 3e:81:83:ab:05:39:47:b1:c3:99:16:7c:6f:d0:0d: 57:3e:a0:e9:ac:e9:5b:34:e1:5a:31:23:4e:29:c0: 2a:d7:ed:ee:32:a0:4d:9b:c6:f4:48:ae:43:64:d5: 82:8d:34:aa:a8:83:b0:20:07:11:bf:16:a6:37:f3: 35:d0:43:f0:bb:ee:7b:54:2f:6c:32:9e:c7:6d:6f: 8d:b3:1b:3e:7f:61:57:56:86:88:4d:f9:79:62:db: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:58:51:18:41:AF:54:00:64:C6:2D:A0:79:A0:45:F3:9C:AE:EB:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f44b7e37-d148-373b-9e27-ef3288bb1317.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:56:9c:84:ec:4a:d7:f1:7a:78:93:c9:e8:f7:2d:b7:a1:97: fb:84:dd:1e:56:b7:ea:9d:84:74:c2:64:e8:b3:b5:9b:0b:ec: 9c:5e:52:e2:a1:5f:37:54:7c:7a:13:72:50:6d:df:32:a3:f9: 5e:41:50:1e:5f:0a:13:2e:fd:65:55:db:fa:e1:ca:40:c4:4f: 88:43:e8:b9:71:26:9b:8b:f4:2f:be:59:e2:b8:52:b3:4b:6b: 0c:12:5c:37:c3:fa:b5:5c:75:e1:5a:e6:f9:f5:34:f6:b8:d7: 03:cd:40:2b:95:c3:58:c8:82:46:06:b6:41:5b:c7:55:ae:e3: f7:8f:95:cd:b3:32:f1:dd:40:8c:45:8a:0f:80:d1:66:0a:bb: 81:40:c1:d5:a5:6b:4f:f8:c1:c5:ef:96:a6:95:19:1c:4a:be: 64:20:dc:82:72:67:52:e9:5e:f4:0d:24:90:62:20:47:94:a9: 86:86:0a:36:7c:53:2e:6e:1d:e0:09:18:47:89:4a:45:ce:1e: 1b:40:7e:86:99:a4:2d:0a:24:d8:92:9b:a3:f3:83:51:c1:21: 17:e5:f3:ed:00:7b:74:8d:70:63:a5:67:0d:5f:0d:8c:32:d2: b3:60:f0:99:54:87:0c:b4:c9:bc:3d:32:af:92:3c:ac:42:56: 0b:6f:b4:ff -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1s7Ylif6chG6LwwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk Y2Q3ZGIwYzItY2JiYi00ZjJiLWI3MzgtNTA4YzhjOTA1YWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1iBT7k0jKyMxCz3Yztu9GzMG7dTDDRwKQBp OjIzLaWvjiTtfxwcsjUaZxHpMyFxv0vdeav1HYkAXenskRtDKYnkbZynjnpUWgTe 5Uh8/XOCp6mYmAoPDnqHz0p1F4aCXJT8hZb45qTVdAQbV2US52HyaarLtoYWS9ks Na6INZj2Gr7Bhs/Tr0lQ1IqF5lCGlE7HLcv3PTxJNbwdWNRiW1TbGGU+gYOrBTlH scOZFnxv0A1XPqDprOlbNOFaMSNOKcAq1+3uMqBNm8b0SK5DZNWCjTSqqIOwIAcR vxamN/M10EPwu+57VC9sMp7HbW+Nsxs+f2FXVoaITfl5YtsLqQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPpYURhBr1QAZMYtoHmgRfOcrutEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjQ0YjdlMzctZDE0OC0z NzNiLTllMjctZWYzMjg4YmIxMzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAgVpyE7ErX8Xp4k8no9y23oZf7hN0eVrfqnYR0wmTos7WbC+ycXlLi oV83VHx6E3JQbd8yo/leQVAeXwoTLv1lVdv64cpAxE+IQ+i5cSabi/QvvlniuFKz S2sMElw3w/q1XHXhWub59TT2uNcDzUArlcNYyIJGBrZBW8dVruP3j5XNszLx3UCM RYoPgNFmCruBQMHVpWtP+MHF75amlRkcSr5kINyCcmdS6V70DSSQYiBHlKmGhgo2 fFMubh3gCRhHiUpFzh4bQH6GmaQtCiTYkpuj84NRwSEX5fPtAHt0jXBjpWcNXw2M MtKzYPCZVIcMtMm8PTKvkjysQlYLb7T/ -----END CERTIFICATE-----Generated at Wed Sep 10 17:58:24 2025 by rpki-client