$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a2bf47d-06b0-308b-a758-371b786fdf66.roa File: 3a2bf47d-06b0-308b-a758-371b786fdf66.roa (raw, json) Hash identifier: JgUKZVr/dS+oI4WMI0XsAsg7d+0i4zGjXhU2T80pfuM= Subject key identifier: 91:12:7F:85:36:F4:69:19:02:06:20:7B:8F:4C:E1:0C:9B:4A:C1:61 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F11A12E918DD93378FEA24728 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a2bf47d-06b0-308b-a758-371b786fdf66.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396545 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:2e:91:8d:d9:33:78:fe:a2:47:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f73a847c-cf12-4e41-ae6d-24f11298d4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:dd:49:89:19:64:65:61:83:14:e9:38:92:d5: b8:c3:a8:9a:03:4c:6a:09:01:e2:1c:22:a9:3b:bf: 84:20:91:90:ed:1c:9f:0c:7b:ba:9f:59:44:2b:37: 7f:e5:81:91:3f:57:26:9a:06:16:5e:2a:a8:a4:b6: 9f:34:23:25:b4:46:21:34:ff:b8:13:1b:02:45:b0: 15:ee:1c:dc:bc:44:6d:52:c5:62:5c:1f:26:b2:af: 14:c3:3d:84:56:56:93:54:c0:f0:23:0b:2a:43:a9: 83:6a:a0:13:f5:d4:3a:a6:5e:61:6c:c5:b1:f8:14: 30:06:33:cc:27:84:14:05:9c:26:18:59:f5:80:24: 8b:32:86:06:fe:00:e4:d1:4a:96:99:5e:e3:75:27: 55:94:cb:7c:03:1b:b5:4e:2b:b8:dc:2c:fa:46:61: 42:3f:05:22:3b:04:29:87:db:31:8b:a0:41:fe:a5: cb:95:8a:ff:85:f4:a9:f9:cf:1b:62:1f:b8:e6:6c: a2:2a:29:74:41:ec:c2:60:4e:b1:dc:39:66:bc:c5: 5f:fb:df:1e:a9:bf:5a:be:a2:b3:b3:fd:a9:9b:11: 7e:9b:3e:50:c4:fd:d4:77:7b:00:bf:a6:42:80:e6: 57:f6:38:37:9c:58:57:8e:2e:88:c0:53:21:2b:c8: f6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:12:7F:85:36:F4:69:19:02:06:20:7B:8F:4C:E1:0C:9B:4A:C1:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a2bf47d-06b0-308b-a758-371b786fdf66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6b:5e:9b:50:8b:96:b0:72:5a:c6:2a:18:fc:b7:d8:30:dd: 8f:4f:ae:a3:3f:01:cf:1a:27:f0:a6:44:30:ad:3a:25:9b:a3: 8d:43:6f:05:12:4a:a6:8c:c3:9a:d9:30:87:24:86:b3:a8:ec: d5:fc:66:21:89:62:4f:05:08:95:0d:24:78:e0:85:d3:4f:f0: ed:2c:33:0e:d6:4c:d5:4d:b8:40:d3:67:cc:83:a6:60:c5:91: 45:9d:50:ad:57:fb:45:ad:04:e7:6e:47:8a:dd:4e:21:06:c7: 55:5c:f2:b9:e0:64:23:87:36:d8:aa:92:d7:df:bd:17:51:99: f8:6f:3a:c3:5f:3b:bf:0e:ce:65:c5:6d:05:a5:b0:17:eb:92: 8c:bd:fc:92:bd:52:7a:82:71:7a:82:1d:20:35:69:9b:d4:8c: e5:a3:38:1c:fe:56:c5:aa:96:66:30:69:5d:ae:dc:32:31:43: 47:51:5c:1d:bb:53:10:de:d9:d1:33:d0:61:37:bf:74:b5:a3: d1:2c:32:0a:65:6b:17:45:dd:5b:a7:ce:3f:4f:0f:d0:5f:98: e4:b8:5b:d5:f9:99:26:a0:ad:ed:eb:6b:c5:b1:ff:5b:45:23: 88:5e:e8:9d:c8:b3:b4:8f:46:ef:cc:cb:6a:41:e3:88:da:43: 45:54:03:a7 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RoS6RjdkzeP6iRygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjczYTg0N2MtY2YxMi00ZTQxLWFlNmQtMjRmMTEyOThkNGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt1JiRlkZWGDFOk4ktW4w6iaA0xqCQHiHCKp O7+EIJGQ7RyfDHu6n1lEKzd/5YGRP1cmmgYWXiqopLafNCMltEYhNP+4ExsCRbAV 7hzcvERtUsViXB8msq8Uwz2EVlaTVMDwIwsqQ6mDaqAT9dQ6pl5hbMWx+BQwBjPM J4QUBZwmGFn1gCSLMoYG/gDk0UqWmV7jdSdVlMt8Axu1Tiu43Cz6RmFCPwUiOwQp h9sxi6BB/qXLlYr/hfSp+c8bYh+45myiKil0QezCYE6x3DlmvMVf+98eqb9avqKz s/2pmxF+mz5QxP3Ud3sAv6ZCgOZX9jg3nFhXji6IwFMhK8j2UwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJESf4U29GkZAgYge49M4QybSsFhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2EyYmY0N2QtMDZiMC0z MDhiLWE3NTgtMzcxYjc4NmZkZjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBNa16bUIuWsHJaxioY/LfYMN2PT66jPwHPGifwpkQwrTolm6ONQ28F EkqmjMOa2TCHJIazqOzV/GYhiWJPBQiVDSR44IXTT/DtLDMO1kzVTbhA02fMg6Zg xZFFnVCtV/tFrQTnbkeK3U4hBsdVXPK54GQjhzbYqpLX370XUZn4bzrDXzu/Ds5l xW0FpbAX65KMvfySvVJ6gnF6gh0gNWmb1Izlozgc/lbFqpZmMGldrtwyMUNHUVwd u1MQ3tnRM9BhN790taPRLDIKZWsXRd1bp84/Tw/QX5jkuFvV+ZkmoK3t62vFsf9b RSOIXuidyLO0j0bvzMtqQeOI2kNFVAOn -----END CERTIFICATE-----Generated at Thu Sep 24 15:27:56 2026 by rpki-client