$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/718c1d0d-b16c-3a13-8ffb-95aa9591770c.roa File: 718c1d0d-b16c-3a13-8ffb-95aa9591770c.roa (raw, json) Hash identifier: +oITxpDe0HeJHvuDeDVstXkK/UCClUVHjB6DQYaH6Eo= Subject key identifier: 15:9D:A6:77:D5:41:E9:3C:E4:72:5F:98:2B:6C:C0:55:4B:09:C6:EB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B13D6CF869E820A1B55FAB080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/718c1d0d-b16c-3a13-8ffb-95aa9591770c.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 396578 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:cf:86:9e:82:0a:1b:55:fa:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=ca7e1df4-8128-42f9-a86f-eaa6407e9be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9b:69:ea:50:6d:4a:95:43:f5:2d:d7:6b:17: b2:c9:74:15:36:e1:33:e5:d0:8e:f6:a7:33:b1:92: b0:d5:74:81:8b:ef:bb:71:e2:96:ce:f5:9c:4e:5e: 87:89:e3:96:be:d6:f3:af:88:de:b6:e5:1d:22:2b: 8f:f8:5c:01:a7:dd:64:bb:0d:90:56:32:27:b2:c1: dc:4a:1d:07:ec:6d:a2:5d:6e:14:5b:db:65:a9:46: d1:c4:01:46:4b:a7:e4:fd:96:94:22:be:f4:ef:91: c7:2d:08:dc:bc:66:9a:eb:47:fd:f5:45:4a:6b:fe: e9:a9:c5:44:aa:6b:1a:4a:39:f8:05:60:15:9b:ce: 74:29:6c:10:14:5b:73:94:85:56:31:1b:97:af:0a: 8a:79:45:68:ed:ab:fc:a1:53:cb:fc:2a:6a:41:a1: 74:12:85:39:7e:fc:90:d1:4b:59:b7:e8:fa:5d:b4: 51:23:cc:e0:09:8e:be:cd:0b:06:e7:78:f8:13:fe: 3f:25:aa:e1:bb:4d:62:2b:15:8f:eb:05:84:ea:40: 55:4f:30:5b:a4:3f:78:df:ba:e0:83:8a:7d:89:71: 74:2c:bb:de:4a:3f:1d:58:8b:a7:17:ac:dc:55:c1: 69:44:7b:92:a0:50:5f:90:55:cb:46:ab:5f:90:3a: 44:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9D:A6:77:D5:41:E9:3C:E4:72:5F:98:2B:6C:C0:55:4B:09:C6:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/718c1d0d-b16c-3a13-8ffb-95aa9591770c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:fe:0f:0c:20:98:c0:0a:d5:5c:ce:66:49:f8:ae:eb:e8:f8: 04:9d:aa:4a:c0:72:65:31:09:6d:f8:43:4f:37:69:5c:24:fb: b7:c5:a2:93:59:24:5e:08:55:be:9a:79:15:7c:0f:fd:c6:78: 1c:7d:a0:84:f2:07:16:1b:7c:d8:a3:88:04:a4:a4:0c:87:e4: 40:13:e8:9f:1b:12:83:18:3a:3a:08:00:81:6b:68:52:22:54: a5:5b:ad:08:6c:bb:2a:26:24:23:77:10:eb:e7:67:fb:1e:e1: 6d:d9:ed:a5:c5:dc:93:4b:a0:25:c2:09:b7:5f:c8:59:f9:ec: 52:5f:1b:b4:e2:29:08:ec:e8:de:39:a0:d0:c7:59:9f:28:66: f0:2b:c7:9e:2b:22:42:5d:96:b6:19:2d:74:36:91:97:78:ba: ee:65:4f:e4:21:cd:10:69:fa:59:a2:9d:84:cc:55:30:48:2d: 17:87:86:fc:fe:49:f8:22:3a:d4:03:4d:69:b1:4b:93:a4:50: c1:49:de:7a:df:8d:12:2d:5b:90:71:2f:89:8c:57:74:d2:46: 27:0c:d9:8f:36:92:eb:ea:b8:42:8d:7a:8a:b6:5d:97:37:77: 3f:20:67:41:24:e1:57:d8:ba:5a:0c:ad:d3:7c:81:55:2e:9d: 07:a8:b0:0e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1s+GnoIKG1X6sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk Y2E3ZTFkZjQtODEyOC00MmY5LWE4NmYtZWFhNjQwN2U5YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA55tp6lBtSpVD9S3XaxeyyXQVNuEz5dCO9qcz sZKw1XSBi++7ceKWzvWcTl6HieOWvtbzr4jetuUdIiuP+FwBp91kuw2QVjInssHc Sh0H7G2iXW4UW9tlqUbRxAFGS6fk/ZaUIr7075HHLQjcvGaa60f99UVKa/7pqcVE qmsaSjn4BWAVm850KWwQFFtzlIVWMRuXrwqKeUVo7av8oVPL/CpqQaF0EoU5fvyQ 0UtZt+j6XbRRI8zgCY6+zQsG53j4E/4/Jarhu01iKxWP6wWE6kBVTzBbpD9437rg g4p9iXF0LLveSj8dWIunF6zcVcFpRHuSoFBfkFXLRqtfkDpEnQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBWdpnfVQek85HJfmCtswFVLCcbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzE4YzFkMGQtYjE2Yy0z YTEzLThmZmItOTVhYTk1OTE3NzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAl/g8MIJjACtVczmZJ+K7r6PgEnapKwHJlMQlt+ENPN2lcJPu3xaKT WSReCFW+mnkVfA/9xngcfaCE8gcWG3zYo4gEpKQMh+RAE+ifGxKDGDo6CACBa2hS IlSlW60IbLsqJiQjdxDr52f7HuFt2e2lxdyTS6Alwgm3X8hZ+exSXxu04ikI7Oje OaDQx1mfKGbwK8eeKyJCXZa2GS10NpGXeLruZU/kIc0QafpZop2EzFUwSC0Xh4b8 /kn4IjrUA01psUuTpFDBSd56340SLVuQcS+JjFd00kYnDNmPNpLr6rhCjXqKtl2X N3c/IGdBJOFX2LpaDK3TfIFVLp0HqLAO -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:23 2025 by rpki-client