$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8153bb33-1c98-3c6f-ad40-92e68b19094c.roa File: 8153bb33-1c98-3c6f-ad40-92e68b19094c.roa (raw, json) Hash identifier: nRfal4HBeYVWUJFRIU6aY0jdZJ3XeruXRDKnntTdb+Q= Subject key identifier: 75:98:DF:32:C8:61:79:E6:62:56:FC:D3:7F:EA:ED:74:0C:19:7B:4C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B6A62004ED56D83FABA7C7600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8153bb33-1c98-3c6f-ad40-92e68b19094c.roa Signing time: Sun 05 Oct 2025 01:00:32 +0000 ROA not before: Sun 05 Oct 2025 01:00:32 +0000 ROA not after: Sat 03 Jan 2026 02:00:32 +0000 asID: 396560 IP address blocks: 192.58.128.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:62:00:4e:d5:6d:83:fa:ba:7c:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Oct 5 01:00:32 2025 GMT Not After : Jan 3 02:00:32 2026 GMT Subject: CN=cfbe6826-86bc-4b07-b8a2-75b2b0c7d4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:65:ca:ab:e1:17:6e:00:6d:bd:9f:e9:e8:a2: cd:47:8f:d3:92:da:5d:53:46:91:cd:cc:da:9b:5f: 08:9b:80:24:70:92:55:6e:1f:3f:fd:86:4a:97:1e: 0d:d2:2b:da:ee:72:da:1e:bf:b9:2a:f9:f5:57:a6: 52:d4:37:ef:23:7c:08:24:79:8f:76:e6:38:b2:5f: fe:f7:f2:83:cd:2a:49:cf:a8:cf:51:1d:3a:bf:63: 78:5c:32:72:7f:3e:4b:8f:25:f8:63:95:54:1c:f6: 36:9c:64:eb:a0:19:e3:39:85:b3:7e:38:a4:aa:37: b3:23:60:ee:f0:c6:3f:e4:25:b0:d6:7d:8e:9b:0a: ce:ba:11:65:28:e1:97:f3:26:d1:4f:81:1a:14:96: 94:b6:22:76:98:d7:b4:e9:6f:53:8b:6a:71:5c:d7: 8d:51:e9:8c:37:3d:87:a5:bc:94:9e:6f:37:d1:67: 93:bf:a0:0b:7c:e1:9e:3d:29:fd:e9:dd:e2:d7:f3: 21:fe:fa:6a:c3:9d:c4:83:3d:45:43:2b:1b:6d:a5: 9d:6f:74:b7:d3:a0:2b:36:71:c9:7a:43:79:9f:8b: 20:7f:de:fb:d5:f3:d3:4e:82:4e:27:fa:e4:a5:c4: 0f:ff:c1:e5:c8:f3:f5:9c:e9:a8:8c:53:3f:f5:86: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:98:DF:32:C8:61:79:E6:62:56:FC:D3:7F:EA:ED:74:0C:19:7B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8153bb33-1c98-3c6f-ad40-92e68b19094c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.58.128.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:14:2f:e3:0c:fa:9e:1d:ea:64:e0:fb:41:3b:6d:f8:31:da: 51:34:6e:d1:15:e6:7b:cb:f2:35:df:16:fa:02:1e:d5:b6:4e: a8:a4:94:f2:43:25:a6:06:42:57:fe:63:f7:18:98:f0:3f:fb: 6d:3a:6c:61:fe:cd:54:43:c9:e7:1e:0f:ea:54:68:a4:0a:b9: 74:9f:68:33:b1:67:b6:8e:4a:5f:8b:31:d4:2f:a7:26:63:85: f5:08:ea:80:81:d4:c7:82:18:2a:a4:c9:04:54:23:8d:e8:cf: 8a:73:59:20:57:59:df:94:82:0a:5d:47:71:1a:d7:57:7c:bb: 5b:b7:12:53:44:09:0d:21:59:7c:9a:c0:4d:eb:3d:61:cf:e3: 6f:00:39:51:91:82:d7:1f:c0:73:5d:b4:95:5f:33:45:4d:50: 46:ae:ac:fe:2d:8c:ab:aa:95:2c:18:5c:6d:12:bb:da:e0:b3: 2b:1f:1c:d6:79:3b:55:10:95:d3:6e:20:5a:16:2a:73:ff:e3: fc:95:64:4d:f9:61:f3:2b:69:54:51:36:72:82:8c:90:d9:0d: eb:52:6d:53:b1:d0:d9:8f:75:7f:84:f2:15:a4:6b:2c:89:e2: dc:5c:f0:e6:e7:3f:ab:a7:59:3e:d5:77:86:50:62:21:36:12: 66:4e:6c:b9 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtqYgBO1W2D+rp8dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MTAwNTAxMDAzMloXDTI2MDEwMzAyMDAzMlowLzEtMCsGA1UEAxMk Y2ZiZTY4MjYtODZiYy00YjA3LWI4YTItNzViMmIwYzdkNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2XKq+EXbgBtvZ/p6KLNR4/TktpdU0aRzcza m18Im4AkcJJVbh8//YZKlx4N0iva7nLaHr+5Kvn1V6ZS1DfvI3wIJHmPduY4sl/+ 9/KDzSpJz6jPUR06v2N4XDJyfz5LjyX4Y5VUHPY2nGTroBnjOYWzfjikqjezI2Du 8MY/5CWw1n2OmwrOuhFlKOGX8ybRT4EaFJaUtiJ2mNe06W9Ti2pxXNeNUemMNz2H pbyUnm830WeTv6ALfOGePSn96d3i1/Mh/vpqw53Egz1FQysbbaWdb3S306ArNnHJ ekN5n4sgf9771fPTToJOJ/rkpcQP/8HlyPP1nOmojFM/9YbWsQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHWY3zLIYXnmYlb803/q7XQMGXtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODE1M2JiMzMtMWM5OC0z YzZmLWFkNDAtOTJlNjhiMTkwOTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCGFC/jDPqeHepk4PtBO234MdpRNG7RFeZ7y/I13xb6Ah7Vtk6opJTy QyWmBkJX/mP3GJjwP/ttOmxh/s1UQ8nnHg/qVGikCrl0n2gzsWe2jkpfizHUL6cm Y4X1COqAgdTHghgqpMkEVCON6M+Kc1kgV1nflIIKXUdxGtdXfLtbtxJTRAkNIVl8 msBN6z1hz+NvADlRkYLXH8BzXbSVXzNFTVBGrqz+LYyrqpUsGFxtErva4LMrHxzW eTtVEJXTbiBaFipz/+P8lWRN+WHzK2lUUTZygoyQ2Q3rUm1TsdDZj3V/hPIVpGss ieLcXPDm5z+rp1k+1XeGUGIhNhJmTmy5 -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:13 2025 by rpki-client