$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/120672e8-4e2e-3696-a709-73df8501e98b.roa File: 120672e8-4e2e-3696-a709-73df8501e98b.roa (raw, json) Hash identifier: CUKesXYIHbfp4rQh7cUcvFgFFGW+t6dsYWo0AahaoQE= Subject key identifier: 33:7A:B9:E4:67:DF:63:9B:22:D5:43:FC:49:39:93:F2:B4:2B:BD:5A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AECC5874157E86D19C9C87860 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/120672e8-4e2e-3696-a709-73df8501e98b.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 396602 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:87:41:57:e8:6d:19:c9:c8:78:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=1c858074-59ea-44dd-a221-e447ee6732eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:e7:85:a2:51:30:35:16:97:c7:ed:74:9b: 4d:d9:4b:16:69:e3:3d:9d:5c:2c:ec:6f:db:fa:7e: d3:73:8e:e2:e9:37:b9:48:44:8f:90:44:2e:f1:60: 67:01:33:5d:ab:d0:27:41:c8:5b:4f:de:a6:4c:00: 93:db:06:da:82:68:47:e7:96:40:81:1e:15:69:db: 76:d1:c3:45:94:a2:9b:70:e6:9b:c3:19:c7:b3:60: dc:ff:cf:d8:63:b0:b6:e3:56:02:50:56:2c:ac:27: 47:04:41:fb:6b:26:75:5f:a7:e7:bd:54:97:fe:92: 59:be:91:03:8f:9e:9c:f0:1d:35:01:11:b3:0b:51: bd:58:fc:cc:f0:37:60:d2:9a:9b:6f:ce:6f:6e:0c: 72:0b:83:cd:e0:b6:e0:71:87:fb:11:d5:6d:81:33: 19:57:ca:14:79:cd:58:62:9a:82:19:72:87:69:ec: a9:ce:28:f9:3d:c3:e2:a8:a0:f8:ba:01:a5:a3:14: c9:86:43:a5:c2:a8:6a:f2:47:5c:77:07:38:87:f5: d0:20:3b:cf:f3:27:28:c9:c5:bd:23:68:d3:0d:23: cb:20:86:ef:40:84:9f:85:89:23:80:97:b6:be:25: b1:d3:90:e3:40:51:58:d3:a9:44:ef:56:96:d4:71: 45:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7A:B9:E4:67:DF:63:9B:22:D5:43:FC:49:39:93:F2:B4:2B:BD:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/120672e8-4e2e-3696-a709-73df8501e98b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:6b:64:d3:66:54:03:57:a1:08:b7:d6:38:40:ae:d2:f9:76: 75:92:1d:c5:0c:20:6e:eb:fe:7f:92:1e:9f:59:04:e5:64:d6: cc:e6:ef:e5:ef:dd:ca:14:2a:3d:73:a8:de:44:0f:79:53:93: 6f:8f:2f:d4:a5:5a:ab:52:da:40:8e:af:ac:75:cc:a3:90:7f: ca:24:55:91:92:04:86:ee:12:af:f0:b0:e9:0d:1e:06:d1:68: 25:1d:9b:b7:52:5b:73:57:fc:d3:82:ac:3a:cd:47:9d:1e:8a: a6:3b:dd:68:0f:8f:64:08:3d:43:90:62:f1:8a:1b:22:48:54: f9:40:1c:35:15:1e:ca:d6:f8:40:fb:f5:46:62:e6:97:c6:5f: 68:41:13:d8:32:ad:f1:83:05:8e:42:44:61:59:88:45:c7:f2: d7:68:0f:ca:64:9d:a3:3b:08:92:36:27:c4:99:ab:63:e1:7f: 29:39:ba:c4:79:f6:4f:2a:e6:64:16:95:7a:50:d6:5a:07:f6: 6d:9b:f1:7f:de:9a:33:4c:2a:74:f0:6f:3b:8f:8e:02:f5:e3: 7d:64:aa:af:1d:42:4c:9e:5e:60:e5:9e:87:6c:cc:f1:32:30: d9:0e:91:e5:9d:63:e4:dd:a4:98:91:94:e1:7c:57:88:34:cb: dc:24:b2:32 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErsxYdBV+htGcnIeGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MWM4NTgwNzQtNTllYS00NGRkLWEyMjEtZTQ0N2VlNjczMmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis7nhaJRMDUWl8ftdJtN2UsWaeM9nVws7G/b +n7Tc47i6Te5SESPkEQu8WBnATNdq9AnQchbT96mTACT2wbagmhH55ZAgR4Vadt2 0cNFlKKbcOabwxnHs2Dc/8/YY7C241YCUFYsrCdHBEH7ayZ1X6fnvVSX/pJZvpED j56c8B01ARGzC1G9WPzM8Ddg0pqbb85vbgxyC4PN4LbgcYf7EdVtgTMZV8oUec1Y YpqCGXKHaeypzij5PcPiqKD4ugGloxTJhkOlwqhq8kdcdwc4h/XQIDvP8ycoycW9 I2jTDSPLIIbvQISfhYkjgJe2viWx05DjQFFY06lE71aW1HFFvQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDN6ueRn32ObItVD/Ek5k/K0K71aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTIwNjcyZTgtNGUyZS0z Njk2LWE3MDktNzNkZjg1MDFlOThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBOa2TTZlQDV6EIt9Y4QK7S+XZ1kh3FDCBu6/5/kh6fWQTlZNbM5u/l 793KFCo9c6jeRA95U5Nvjy/UpVqrUtpAjq+sdcyjkH/KJFWRkgSG7hKv8LDpDR4G 0WglHZu3UltzV/zTgqw6zUedHoqmO91oD49kCD1DkGLxihsiSFT5QBw1FR7K1vhA +/VGYuaXxl9oQRPYMq3xgwWOQkRhWYhFx/LXaA/KZJ2jOwiSNifEmatj4X8pObrE efZPKuZkFpV6UNZaB/Ztm/F/3pozTCp08G87j44C9eN9ZKqvHUJMnl5g5Z6HbMzx MjDZDpHlnWPk3aSYkZThfFeINMvcJLIy -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:44 2025 by rpki-client