$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa File: 588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa (raw, json) Hash identifier: XMjCDF/qpvnpqfphDtGWEQCOkaA3vl+XLkt+xiia/Vs= Subject key identifier: 47:7C:B8:49:39:64:DB:87:37:D7:8B:B8:BD:FC:A2:A0:F8:BB:56:27 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DB4A590148064F1D396EEE900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 36617 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:90:14:80:64:f1:d3:96:ee:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=951fd057-39d3-4dfd-b757-e805bbc91809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:67:1c:51:1b:ee:bb:ff:37:b3:42:b1:6c:31: 09:c7:37:4c:ae:97:e7:57:65:e7:1d:b8:3f:43:6f: c8:f1:f5:24:2e:bf:24:e4:10:03:a0:c0:ed:a3:69: 6e:75:6a:91:60:33:bb:79:47:68:6d:4c:aa:1d:03: a5:0a:27:9e:5c:e8:79:a7:fe:72:81:fb:a2:94:9e: 8f:6e:7b:e9:be:ce:ab:ab:55:d1:8a:34:3f:cb:7c: 2a:33:d4:88:a3:4d:5a:cf:f1:b7:18:77:e9:e9:18: c1:46:f5:0f:9d:f1:95:f8:65:1e:1d:97:35:48:57: 17:88:c0:10:fb:d6:d8:41:b5:90:44:f1:2c:72:15: 92:0e:22:9b:5c:1e:3c:7f:7c:56:a4:2a:fe:ba:a6: 3c:46:61:0a:88:c3:47:ad:ef:b3:be:1f:27:c6:d1: 72:11:ee:c9:5c:5d:95:90:bc:9d:37:f0:10:04:d0: 49:76:95:a5:0d:f2:bd:d0:34:e6:da:6b:26:4a:22: 1f:f2:f5:4a:5f:78:d5:16:ef:7b:c2:3d:e1:57:d0: 8d:4e:9a:80:1f:fa:d1:98:1d:9e:62:43:7b:a6:8a: 69:88:bb:98:df:c5:17:6f:43:af:84:e9:e6:a8:69: 14:72:99:63:69:5f:ba:de:d5:00:14:2f:be:8c:4e: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:7C:B8:49:39:64:DB:87:37:D7:8B:B8:BD:FC:A2:A0:F8:BB:56:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/588158a4-5d48-3382-874d-5ff9eb3a6a8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:97:98:7a:64:74:af:78:6a:9c:39:65:e4:ae:05:ef:fb:4e: 25:0a:51:19:b4:23:b4:ad:2b:cb:bc:eb:37:1a:50:1c:23:56: a2:fb:19:33:c4:55:b6:aa:e5:5e:38:b1:95:45:92:77:a2:f7: f7:d9:67:b3:7d:8c:72:3d:f6:01:fa:6b:9c:e9:68:01:11:82: 3a:6f:15:b2:b4:f1:20:52:78:66:7f:36:41:29:95:6c:52:9e: 03:1e:f4:d2:32:60:99:b1:cf:97:68:22:c7:7a:4d:ac:70:5d: d6:87:7b:07:13:d6:e6:3c:f8:f5:b5:d9:e3:b9:3e:4b:cf:44: 8b:86:13:a1:a4:0b:7c:ed:b4:44:8a:5d:f9:fa:82:2a:ab:15: 4e:72:f4:a4:4e:79:6d:86:7f:7b:6d:0f:c2:8d:7b:c5:bf:f1: 5c:05:38:b5:88:af:8a:77:70:d4:5c:41:3f:0e:03:70:b5:39: c5:65:32:b1:91:bc:90:56:8a:9b:fe:54:87:05:1f:11:bc:bd: 42:77:2e:33:b6:e1:70:3e:74:79:29:e1:40:15:3f:fb:54:da: 8d:8e:e1:4d:ba:79:f9:d3:01:b7:b8:27:f6:0d:49:eb:19:ee: f3:51:1b:ab:90:59:75:eb:03:63:23:0d:b2:7c:1e:e0:35:67: 09:cb:60:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pZAUgGTx05bu6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk OTUxZmQwNTctMzlkMy00ZGZkLWI3NTctZTgwNWJiYzkxODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGccURvuu/83s0KxbDEJxzdMrpfnV2XnHbg/ Q2/I8fUkLr8k5BADoMDto2ludWqRYDO7eUdobUyqHQOlCieeXOh5p/5ygfuilJ6P bnvpvs6rq1XRijQ/y3wqM9SIo01az/G3GHfp6RjBRvUPnfGV+GUeHZc1SFcXiMAQ +9bYQbWQRPEschWSDiKbXB48f3xWpCr+uqY8RmEKiMNHre+zvh8nxtFyEe7JXF2V kLydN/AQBNBJdpWlDfK90DTm2msmSiIf8vVKX3jVFu97wj3hV9CNTpqAH/rRmB2e YkN7poppiLuY38UXb0OvhOnmqGkUcpljaV+63tUAFC++jE6EFwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEd8uEk5ZNuHN9eLuL38oqD4u1YnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTg4MTU4YTQtNWQ0OC0z MzgyLTg3NGQtNWZmOWViM2E2YThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAxl5h6ZHSveGqcOWXkrgXv+04lClEZtCO0rSvLvOs3GlAcI1ai+xkz xFW2quVeOLGVRZJ3ovf32WezfYxyPfYB+muc6WgBEYI6bxWytPEgUnhmfzZBKZVs Up4DHvTSMmCZsc+XaCLHek2scF3Wh3sHE9bmPPj1tdnjuT5Lz0SLhhOhpAt87bRE il35+oIqqxVOcvSkTnlthn97bQ/CjXvFv/FcBTi1iK+Kd3DUXEE/DgNwtTnFZTKx kbyQVoqb/lSHBR8RvL1Cdy4ztuFwPnR5KeFAFT/7VNqNjuFNunn50wG3uCf2DUnr Ge7zURurkFl16wNjIw2yfB7gNWcJy2DQ -----END CERTIFICATE-----Generated at Wed May 13 12:04:35 2026 by rpki-client