$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95b3f785-0bce-3e17-b6fb-b2c5048da9d1.roa File: 95b3f785-0bce-3e17-b6fb-b2c5048da9d1.roa (raw, json) Hash identifier: CHnviHM/sOjf9XY1FMcJEKeUkBH+BDmZVb9KI1d77Bg= Subject key identifier: 23:33:A0:38:64:C3:A7:DE:7A:34:74:0B:72:1E:B3:87:56:0A:E6:48 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AECC58E15AA01D7A314FF4180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95b3f785-0bce-3e17-b6fb-b2c5048da9d1.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 396609 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:8e:15:aa:01:d7:a3:14:ff:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=23c086ff-8457-44d3-a002-b1d247ae4ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:7a:ee:2f:fc:ab:0e:07:27:51:fd:2c:3a: 5a:38:35:61:1a:c6:52:4a:26:66:73:ef:9c:21:0c: 6f:7e:c4:e3:07:38:0f:05:de:c9:87:71:40:5c:b1: 07:53:15:0a:61:d5:1d:8c:a4:09:16:f3:b4:d5:e7: c5:a3:f7:de:1d:e8:49:5f:68:59:6c:74:08:05:a0: d4:e8:f8:f1:52:42:d2:a1:62:d6:4d:0f:9c:e1:bb: 16:94:50:97:96:37:33:87:01:ad:85:62:fa:4b:57: ec:95:a7:c1:e6:80:2b:38:5f:2f:b9:9f:f5:42:b3: 65:36:34:fb:fa:73:af:3a:a6:57:61:17:a6:6d:e5: 7a:1c:cd:be:b1:51:a1:ba:cd:69:b7:cb:60:0a:37: 0f:d0:39:d5:72:eb:d8:b9:f2:c0:1c:83:09:4a:b1: 70:9f:32:c1:77:21:37:0a:7b:ca:e5:75:99:a9:56: 4a:2d:15:38:22:2e:f4:39:d7:7c:ef:61:d0:26:53: de:29:a5:1f:68:b0:d3:a1:82:73:30:89:3b:ec:e4: fe:d9:39:b1:25:dd:e3:33:84:d5:e7:27:25:e0:5e: 31:f8:8d:0b:60:19:25:0f:46:58:e1:e6:8e:01:68: f8:41:73:a9:83:ef:13:2a:95:38:90:36:23:fd:65: 39:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:33:A0:38:64:C3:A7:DE:7A:34:74:0B:72:1E:B3:87:56:0A:E6:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/95b3f785-0bce-3e17-b6fb-b2c5048da9d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:de:92:84:cb:79:38:bb:c1:a6:2e:de:ee:f2:b1:3e:88:dc: 6c:c5:d7:5f:42:42:76:08:c5:e4:d2:6d:0e:da:a1:23:b8:8c: cf:2c:38:5c:0c:95:b0:2b:d9:bf:38:3f:31:9b:8b:e0:31:12: 8c:ec:37:93:36:39:4a:1d:97:45:dd:d0:b1:55:d1:b7:44:38: 0b:a6:a5:2c:3d:f5:7b:19:7f:52:ab:47:83:75:29:e1:9e:a4: aa:0a:25:ea:d8:7f:c8:30:a3:92:5a:70:5c:b4:47:00:41:c8: ab:93:8b:91:27:1e:6d:66:53:59:2e:55:1e:95:03:a0:39:e9: 64:a0:41:58:20:93:cf:83:74:fe:c4:50:eb:53:88:57:bf:c0: 07:09:08:ff:2b:b4:f7:0d:85:33:7a:cf:af:80:05:28:1b:cd: a2:05:ba:ed:96:26:51:89:86:00:1e:bb:c2:95:83:3b:96:e8: d4:c8:89:b3:12:fd:b6:9e:94:15:79:be:92:d3:8f:b9:05:41: 04:18:60:0b:cc:1c:b5:80:f9:be:9a:62:71:f2:a7:68:1d:c2: 59:58:b4:9f:ee:df:05:a1:9b:6b:65:ab:31:fe:c6:f8:52:f6: 2e:96:2f:48:48:c6:d7:39:1e:dd:1e:c2:b8:68:d4:69:91:9d: fd:5d:19:9f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErsxY4VqgHXoxT/QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjNjMDg2ZmYtODQ1Ny00NGQzLWEwMDItYjFkMjQ3YWU0ZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+x67i/8qw4HJ1H9LDpaODVhGsZSSiZmc++c IQxvfsTjBzgPBd7Jh3FAXLEHUxUKYdUdjKQJFvO01efFo/feHehJX2hZbHQIBaDU 6PjxUkLSoWLWTQ+c4bsWlFCXljczhwGthWL6S1fslafB5oArOF8vuZ/1QrNlNjT7 +nOvOqZXYRembeV6HM2+sVGhus1pt8tgCjcP0DnVcuvYufLAHIMJSrFwnzLBdyE3 CnvK5XWZqVZKLRU4Ii70Odd872HQJlPeKaUfaLDToYJzMIk77OT+2TmxJd3jM4TV 5ycl4F4x+I0LYBklD0ZY4eaOAWj4QXOpg+8TKpU4kDYj/WU5NQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCMzoDhkw6feejR0C3Ies4dWCuZIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTViM2Y3ODUtMGJjZS0z ZTE3LWI2ZmItYjJjNTA0OGRhOWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCF3pKEy3k4u8GmLt7u8rE+iNxsxddfQkJ2CMXk0m0O2qEjuIzPLDhc DJWwK9m/OD8xm4vgMRKM7DeTNjlKHZdF3dCxVdG3RDgLpqUsPfV7GX9Sq0eDdSnh nqSqCiXq2H/IMKOSWnBctEcAQcirk4uRJx5tZlNZLlUelQOgOelkoEFYIJPPg3T+ xFDrU4hXv8AHCQj/K7T3DYUzes+vgAUoG82iBbrtliZRiYYAHrvClYM7lujUyImz Ev22npQVeb6S04+5BUEEGGALzBy1gPm+mmJx8qdoHcJZWLSf7t8FoZtrZasx/sb4 UvYuli9ISMbXOR7dHsK4aNRpkZ39XRmf -----END CERTIFICATE-----Generated at Sat Aug 23 16:54:57 2025 by rpki-client