$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa File: 3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa (raw, json) Hash identifier: 9VwbAFf4ka2mzbjNEybLn+RfU107IONiUzHOjxPaqgc= Subject key identifier: 58:91:90:52:EB:AC:20:52:FC:FB:76:1A:A3:8D:B8:D3:70:0A:CC:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AEB8B94BD504356B0FD982BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa Signing time: Wed 20 Aug 2025 14:36:58 +0000 ROA not before: Wed 20 Aug 2025 14:36:58 +0000 ROA not after: Tue 18 Nov 2025 15:36:58 +0000 asID: 396596 IP address blocks: 192.54.112.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:8b:94:bd:50:43:56:b0:fd:98:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 20 14:36:58 2025 GMT Not After : Nov 18 15:36:58 2025 GMT Subject: CN=91f1d755-6487-470b-874f-cf5399df85af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:35:04:19:88:c7:9d:c2:83:ea:18:fd:4a:54: 12:22:5d:93:6d:c6:8d:78:ad:1e:8f:d1:39:08:31: 51:3d:dc:3c:02:3d:77:36:7e:fd:97:30:f2:14:62: 33:14:78:df:eb:cf:c1:86:60:19:94:4d:a7:0e:9a: fc:be:27:7c:3a:f4:cf:5f:67:b3:06:11:ae:31:00: fd:3b:2b:42:e9:d9:d9:30:9f:4e:28:a7:f4:16:52: e8:9b:92:15:a0:3b:5c:a9:87:17:46:c5:96:5e:42: 79:41:1b:ff:ba:7f:79:04:2f:03:f2:1d:72:36:ba: bf:6b:95:dc:87:01:9d:bd:55:51:07:7f:1e:32:9f: 13:53:ae:35:f7:c5:cb:f7:3e:15:bc:04:f8:ca:57: 6e:7a:60:9b:1e:72:94:79:83:e7:c9:94:b3:16:e1: a4:f7:bd:4c:07:c0:c3:99:8d:d5:6c:81:ae:42:c3: 74:f4:72:94:3d:f8:40:50:8d:04:23:77:80:4b:23: 7b:1a:cb:22:7d:65:ea:10:ea:a9:52:11:11:a1:08: 7b:8e:96:d9:10:0c:2c:af:b8:80:df:70:9c:ee:a8: 67:e5:ec:b8:7d:c9:4e:96:e3:e7:16:66:c5:a7:4c: 77:0a:5b:d8:0b:88:b5:13:80:a0:bb:b8:fa:62:bd: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:91:90:52:EB:AC:20:52:FC:FB:76:1A:A3:8D:B8:D3:70:0A:CC:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3c9ac2e8-c5d4-393b-a41b-b5e603d4fc42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.54.112.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5d:a0:17:61:e7:bb:d0:4c:58:d3:a7:67:31:20:27:35:1b: 98:b3:4f:14:b3:e5:3e:2c:13:52:42:85:26:08:3c:ea:4b:e7: 3d:b2:9b:95:91:61:69:4d:1c:ff:28:c4:c2:0a:ed:91:07:e4: 0c:52:82:16:01:e5:13:f6:d7:d0:00:59:7a:88:28:cf:96:74: 9b:35:fa:95:6f:17:e4:ee:d7:f1:35:2d:2e:b6:34:24:68:85: 8b:fe:61:bf:fc:c9:1d:26:36:69:35:63:ab:2b:61:c9:14:5f: 99:2c:d1:23:df:b5:1b:60:ef:8d:e2:f5:18:b8:6b:10:2f:59: 77:ae:06:07:32:d8:52:c1:ba:7a:6a:b0:f3:39:0e:2f:67:3d: 21:84:c5:a0:e3:77:1b:df:6d:aa:9c:7a:18:6f:b4:b5:35:20: 9c:15:b3:fa:6a:4c:21:07:35:74:26:df:ca:d5:f0:90:34:53: 5a:26:09:bc:54:f6:f9:f6:1e:9a:6f:c0:92:8e:7b:55:41:bf: 45:3a:f4:67:f9:36:09:e3:6b:79:ec:99:8c:f3:1b:c0:8f:25: 5e:16:f1:2a:a6:ae:3e:9f:d6:5c:f8:52:3e:50:90:ac:02:30: 6b:73:7d:57:5f:9a:d6:07:97:e0:9b:c7:e1:57:7c:e6:70:d8: 1d:8e:67:59 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErri5S9UENWsP2YK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMDE0MzY1OFoXDTI1MTExODE1MzY1OFowLzEtMCsGA1UEAxMk OTFmMWQ3NTUtNjQ4Ny00NzBiLTg3NGYtY2Y1Mzk5ZGY4NWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTUEGYjHncKD6hj9SlQSIl2TbcaNeK0ej9E5 CDFRPdw8Aj13Nn79lzDyFGIzFHjf68/BhmAZlE2nDpr8vid8OvTPX2ezBhGuMQD9 OytC6dnZMJ9OKKf0FlLom5IVoDtcqYcXRsWWXkJ5QRv/un95BC8D8h1yNrq/a5Xc hwGdvVVRB38eMp8TU64198XL9z4VvAT4ylduemCbHnKUeYPnyZSzFuGk971MB8DD mY3VbIGuQsN09HKUPfhAUI0EI3eASyN7GssifWXqEOqpUhERoQh7jpbZEAwsr7iA 33Cc7qhn5ey4fclOluPnFmbFp0x3ClvYC4i1E4Cgu7j6Yr0vbQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFiRkFLrrCBS/Pt2GqONuNNwCsx2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2M5YWMyZTgtYzVkNC0z OTNiLWE0MWItYjVlNjAzZDRmYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDZwHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAGXaAXYee70ExY06dnMSAnNRuYs08Us+U+LBNSQoUmCDzqS+c9spuV kWFpTRz/KMTCCu2RB+QMUoIWAeUT9tfQAFl6iCjPlnSbNfqVbxfk7tfxNS0utjQk aIWL/mG//MkdJjZpNWOrK2HJFF+ZLNEj37UbYO+N4vUYuGsQL1l3rgYHMthSwbp6 arDzOQ4vZz0hhMWg43cb322qnHoYb7S1NSCcFbP6akwhBzV0Jt/K1fCQNFNaJgm8 VPb59h6ab8CSjntVQb9FOvRn+TYJ42t57JmM8xvAjyVeFvEqpq4+n9Zc+FI+UJCs AjBrc31XX5rWB5fgm8fhV3zmcNgdjmdZ -----END CERTIFICATE-----Generated at Sat Aug 23 22:00:00 2025 by rpki-client