$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa File: 988a3538-be61-39c9-a1cb-f7b48e5b1200.roa (raw, json) Hash identifier: gA+YnDgVfmLyn2Z7F5dXDKKZ4K8KJ2WS9KjwUR1kBu8= Subject key identifier: 25:1D:70:0B:F6:D0:D2:EF:C4:9A:C4:91:70:CF:26:0C:42:F7:99:27 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AE031A2ABE0527A6FD0664680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa Signing time: Sat 16 Aug 2025 13:00:42 +0000 ROA not before: Sat 16 Aug 2025 13:00:42 +0000 ROA not after: Fri 14 Nov 2025 14:00:42 +0000 asID: 21313 IP address blocks: 192.34.234.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e0:31:a2:ab:e0:52:7a:6f:d0:66:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 16 13:00:42 2025 GMT Not After : Nov 14 14:00:42 2025 GMT Subject: CN=1cfed39e-6236-42a5-8143-7b52982379ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:67:e1:cd:5c:4f:ea:75:64:d0:cb:ea:c9: 6b:d4:ec:c2:36:89:28:03:73:2c:94:fc:22:21:ff: 42:b0:e4:a5:77:59:b3:29:1e:3f:b5:33:8e:30:77: 56:0b:b8:99:43:cb:64:59:34:e4:ec:c9:3e:92:93: 61:a2:03:b1:cd:a4:0f:2c:d7:c7:18:03:b2:70:4f: 87:3f:b9:e7:bb:ca:49:55:9c:59:09:5a:e4:56:a1: e8:72:6d:3d:8f:9c:f8:bb:d6:2a:55:e2:65:1c:2d: bb:20:1f:9a:10:63:9c:bc:1a:64:3d:c9:cb:35:78: 22:5b:13:ef:e9:d2:dd:c1:24:2a:0c:b5:59:73:b9: 52:4e:a2:44:91:66:05:68:b7:08:cf:d3:e8:34:a2: 36:8d:db:5d:e4:09:b7:a1:2a:fa:83:76:12:4e:09: cc:11:70:71:b5:36:1f:f7:bb:81:96:41:fc:88:25: 8c:1b:f6:e9:a2:15:bc:1e:44:43:f1:ba:77:af:09: eb:60:76:d1:d1:f0:8d:b1:02:1f:06:4c:ba:61:fb: a5:3e:5a:2e:37:c8:c8:a3:3d:eb:75:ab:c8:78:0b: 40:b2:59:07:ee:93:68:a3:b5:7b:9b:12:88:51:2e: aa:19:9d:b0:33:6f:3b:1e:ec:b4:82:60:13:6b:81: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1D:70:0B:F6:D0:D2:EF:C4:9A:C4:91:70:CF:26:0C:42:F7:99:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/988a3538-be61-39c9-a1cb-f7b48e5b1200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.34.234.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:87:e8:b1:bc:88:41:80:bb:2d:3b:1a:91:9a:10:76:3b:6a: 89:b7:c0:1e:0f:ee:6a:7f:66:c7:05:b5:7a:c6:84:ca:cc:4d: b8:5f:7a:73:27:7b:7b:f7:d1:f0:74:4f:a5:80:52:57:32:3c: ab:5a:71:db:60:b2:c5:07:9b:e8:3c:4e:d0:af:61:ea:8c:22: 93:dd:3d:ca:01:3e:ab:86:f0:1f:0a:0b:04:e7:0a:4b:e4:56: 02:73:c9:c7:de:c3:64:2a:b3:8f:f7:03:14:43:6e:76:1f:07: 74:a9:8b:50:fe:1c:06:f4:cd:6a:e3:1f:45:f4:0c:07:76:40: 8a:33:04:65:a1:d0:e0:d9:f3:fe:c2:04:9b:ea:3b:4a:9b:cf: f8:71:90:b0:e9:f5:71:2c:ce:5d:ad:62:1d:96:f1:cc:1e:fb: 10:c9:f6:aa:9f:c6:c9:8e:53:36:c8:f8:87:ee:87:9d:07:dc: de:c1:56:5c:1c:30:fb:5b:f6:08:f6:9f:d8:9d:74:19:c9:aa: 13:d9:be:b5:7a:40:9b:45:44:59:0a:41:86:d0:ae:29:d3:53: 69:3d:42:b7:d9:38:dd:40:6b:3e:f9:22:c8:58:26:81:76:38: f6:7e:54:b7:5e:93:70:17:8c:6a:bb:ad:69:c7:23:7d:7a:a7: 7c:0d:93:c8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErgMaKr4FJ6b9BmRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk MWNmZWQzOWUtNjIzNi00MmE1LTgxNDMtN2I1Mjk4MjM3OWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiStn4c1cT+p1ZNDL6slr1OzCNokoA3MslPwi If9CsOSld1mzKR4/tTOOMHdWC7iZQ8tkWTTk7Mk+kpNhogOxzaQPLNfHGAOycE+H P7nnu8pJVZxZCVrkVqHocm09j5z4u9YqVeJlHC27IB+aEGOcvBpkPcnLNXgiWxPv 6dLdwSQqDLVZc7lSTqJEkWYFaLcIz9PoNKI2jdtd5Am3oSr6g3YSTgnMEXBxtTYf 97uBlkH8iCWMG/bpohW8HkRD8bp3rwnrYHbR0fCNsQIfBky6YfulPlouN8jIoz3r davIeAtAslkH7pNoo7V7mxKIUS6qGZ2wM287Huy0gmATa4EdlQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCUdcAv20NLvxJrEkXDPJgxC95knMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTg4YTM1MzgtYmU2MS0z OWM5LWExY2ItZjdiNDhlNWIxMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCLqHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAhh+ixvIhBgLstOxqRmhB2O2qJt8AeD+5qf2bHBbV6xoTKzE24X3pz J3t799HwdE+lgFJXMjyrWnHbYLLFB5voPE7Qr2HqjCKT3T3KAT6rhvAfCgsE5wpL 5FYCc8nH3sNkKrOP9wMUQ252Hwd0qYtQ/hwG9M1q4x9F9AwHdkCKMwRlodDg2fP+ wgSb6jtKm8/4cZCw6fVxLM5drWIdlvHMHvsQyfaqn8bJjlM2yPiH7oedB9zewVZc HDD7W/YI9p/YnXQZyaoT2b61ekCbRURZCkGG0K4p01NpPUK32TjdQGs++SLIWCaB djj2flS3XpNwF4xqu61pxyN9eqd8DZPI -----END CERTIFICATE-----Generated at Sat Aug 23 14:54:06 2025 by rpki-client