$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd918ad9-4ad4-3f25-a512-caf380d82e34.roa File: fd918ad9-4ad4-3f25-a512-caf380d82e34.roa (raw, json) Hash identifier: ZqeS3pPlwOYvPUA6doH3w1/rdmo7RiMGHJTpVmNRQbg= Subject key identifier: 98:68:41:2D:08:39:E3:AE:44:7D:43:1C:23:41:F4:16:63:A5:3F:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B13D6D2508C709159BB8BA528 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd918ad9-4ad4-3f25-a512-caf380d82e34.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 40647 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 13 Sep 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d2:50:8c:70:91:59:bb:8b:a5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=22e73605-6f60-42fb-b6c8-ff82d4fa1fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:72:21:e5:07:24:2e:94:4e:46:0a:af:d0:59: 09:73:27:67:68:5a:3d:85:9e:7f:9d:d6:86:a6:04: a2:07:aa:6a:4b:70:ef:cd:f7:3f:ab:c1:61:42:be: 9e:42:94:5d:31:91:1f:50:5b:2f:2b:e0:80:10:30: 5b:49:b4:ee:f0:05:c4:78:d3:ae:bb:9a:53:f9:8c: 1c:95:e6:62:e3:6e:f6:ca:f3:14:08:1a:34:24:85: fa:b8:b7:12:c6:25:9f:12:8f:cf:99:d3:32:bb:fe: e6:c5:25:13:49:bd:f5:69:3b:04:e3:98:e5:5f:5d: 73:57:1e:82:d3:fe:8d:81:52:91:74:49:79:76:cd: 92:d2:53:46:05:9b:53:87:ba:90:ec:89:97:37:45: e1:8c:41:01:0a:e2:9e:d2:54:8b:91:29:70:4d:f0: 29:78:69:f1:00:30:56:af:46:9e:af:41:2d:68:f2: 68:fe:f9:4c:bd:34:4c:c2:8c:c6:c0:d6:00:c6:9c: 2b:38:cd:64:fb:3a:1d:0a:ab:35:16:b9:a2:39:fb: c5:80:e8:6d:12:73:88:a3:8b:9e:9c:2c:b0:a9:52: 41:b0:d9:2e:74:9d:ec:de:3a:39:48:df:e5:0f:69: 69:47:1e:d9:54:e6:79:8f:8e:ea:10:ce:2e:ba:17: df:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:68:41:2D:08:39:E3:AE:44:7D:43:1C:23:41:F4:16:63:A5:3F:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fd918ad9-4ad4-3f25-a512-caf380d82e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:3f:16:9f:d3:ed:5a:43:0b:0e:eb:44:a0:cd:be:e3:ee:0b: 60:c8:01:c0:2e:f3:35:a1:55:fb:16:d4:78:b5:7e:0b:e4:6c: f2:b9:15:5b:51:c1:47:20:fe:65:81:a2:f0:a3:5d:9f:b6:77: 0c:e3:eb:31:88:4f:ad:e1:75:58:60:5b:bd:d1:e6:03:b6:39: 65:91:03:b8:8d:2e:d8:3c:c2:7a:65:bf:3f:48:db:37:bf:54: ac:b0:59:57:5a:0b:25:67:58:c7:bf:bb:fd:16:ce:89:a3:a9: d8:e5:a6:36:a9:0c:0d:55:f4:01:55:2d:ab:b0:eb:86:ff:96: b6:00:a2:6b:bd:a7:be:80:9c:6c:00:88:15:ab:a3:2e:90:34: 15:c2:35:d7:7f:72:5c:d3:ef:f9:f4:26:30:c7:cd:f4:39:35: 3c:18:90:a6:94:fb:60:53:ed:15:f4:68:1b:84:7b:99:ee:b4: 18:a7:16:7d:67:9f:77:bc:0f:63:fe:d6:30:70:5d:23:25:8b: a9:21:a6:d1:b8:60:f1:b7:bb:27:12:ef:dd:35:fd:10:46:56: 3e:37:6e:b7:37:a2:08:d0:45:06:e5:7a:e2:25:90:44:4e:f5: 31:2d:5c:9e:fe:7a:b9:00:13:34:c4:36:20:c0:f4:48:7f:e9: 11:08:74:3c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1tJQjHCRWbuLpSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk MjJlNzM2MDUtNmY2MC00MmZiLWI2YzgtZmY4MmQ0ZmExZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnIh5QckLpRORgqv0FkJcydnaFo9hZ5/ndaG pgSiB6pqS3Dvzfc/q8FhQr6eQpRdMZEfUFsvK+CAEDBbSbTu8AXEeNOuu5pT+Ywc leZi4272yvMUCBo0JIX6uLcSxiWfEo/PmdMyu/7mxSUTSb31aTsE45jlX11zVx6C 0/6NgVKRdEl5ds2S0lNGBZtTh7qQ7ImXN0XhjEEBCuKe0lSLkSlwTfApeGnxADBW r0aer0EtaPJo/vlMvTRMwozGwNYAxpwrOM1k+zodCqs1FrmiOfvFgOhtEnOIo4ue nCywqVJBsNkudJ3s3jo5SN/lD2lpRx7ZVOZ5j47qEM4uuhffiwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJhoQS0IOeOuRH1DHCNB9BZjpT9YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmQ5MThhZDktNGFkNC0z ZjI1LWE1MTItY2FmMzgwZDgyZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB6Pxaf0+1aQwsO60Sgzb7j7gtgyAHALvM1oVX7FtR4tX4L5GzyuRVb UcFHIP5lgaLwo12ftncM4+sxiE+t4XVYYFu90eYDtjllkQO4jS7YPMJ6Zb8/SNs3 v1SssFlXWgslZ1jHv7v9Fs6Jo6nY5aY2qQwNVfQBVS2rsOuG/5a2AKJrvae+gJxs AIgVq6MukDQVwjXXf3Jc0+/59CYwx830OTU8GJCmlPtgU+0V9GgbhHuZ7rQYpxZ9 Z593vA9j/tYwcF0jJYupIabRuGDxt7snEu/dNf0QRlY+N263N6II0EUG5XriJZBE TvUxLVye/nq5ABM0xDYgwPRIf+kRCHQ8 -----END CERTIFICATE-----Generated at Wed Sep 10 17:56:13 2025 by rpki-client