$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa File: c2d11bd9-910a-308c-b35f-4b444c480099.roa (raw, json) Hash identifier: bmLtYVCUSOVXsJrUbGRT2tlFWpBtkF6qGtIrGHttFRg= Subject key identifier: 47:48:99:33:A6:8F:95:81:E2:10:CC:C4:21:9B:27:7A:2C:78:1C:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B13D6D01E696710B4EEE892C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 396560 IP address blocks: 192.153.247.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d0:1e:69:67:10:b4:ee:e8:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=c8a63e78-1934-4d40-87d6-53d4c76a4fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:31:93:12:19:1c:db:da:12:22:b4:12:43: 9c:12:d0:7b:52:5f:0b:cd:89:b4:8c:09:22:af:8c: ab:c8:0e:4f:ac:94:93:0f:cb:7f:71:7a:20:c1:97: ad:46:2a:86:4e:f8:dc:3e:65:f2:9c:33:0e:24:30: b7:34:73:be:01:b3:5b:7c:82:0c:c9:0b:ec:29:cb: e8:60:d6:f7:aa:4a:bc:65:f0:4c:2b:1b:18:cc:eb: 85:dc:72:65:60:ba:29:6f:04:b5:8f:d2:4b:c7:73: d9:93:a0:0d:e3:b6:2b:bb:ff:f1:65:b2:19:c6:1c: f0:6a:a7:74:4f:c9:77:a4:88:48:07:12:4f:01:f6: b7:55:4c:06:78:2a:14:b3:90:eb:13:fd:20:30:c8: 07:64:bf:b7:99:67:db:58:03:80:65:a1:79:9e:4e: d7:5c:65:96:e2:89:99:c3:2f:e5:fd:d5:2d:5c:7b: dd:24:0e:d0:d5:43:16:0c:a4:38:94:cb:b0:a9:81: b1:19:a2:56:73:57:d8:ea:63:35:f6:cc:4d:10:7c: c4:06:ca:34:e2:93:37:b0:0d:84:d0:9f:46:1b:0c: 79:1c:5e:c5:8d:52:ec:38:47:c7:d6:e3:4d:85:06: 47:6a:e6:0e:f8:2e:4d:7f:36:a8:7a:e7:e6:eb:d3: f0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:48:99:33:A6:8F:95:81:E2:10:CC:C4:21:9B:27:7A:2C:78:1C:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2d11bd9-910a-308c-b35f-4b444c480099.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.153.247.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c4:d1:2b:17:ec:d2:bd:f4:bd:7a:a0:f0:16:32:c3:81:3c: 3c:cc:89:05:cb:f0:ed:76:80:54:0d:d0:29:0d:90:5a:8d:bf: 78:31:6a:b9:53:2e:56:ee:a3:49:bf:92:fd:38:d9:19:7f:85: a8:64:ff:cc:e0:33:2e:17:69:ad:3c:de:cb:ba:2b:e9:be:85: 2f:c5:37:aa:b8:ae:d8:18:f0:d1:6f:ff:5e:93:92:ee:9c:82: 65:8c:7e:53:b1:73:b4:a2:b5:63:da:cd:90:24:9f:67:d2:40: 5b:a6:70:09:8e:35:ad:54:7c:d7:86:c4:b5:5d:ba:e9:d2:09: fc:3f:cb:fe:04:c7:a6:8f:dd:6a:cc:c4:2a:9a:98:4c:ec:2b: f4:51:c6:d3:55:c1:e6:28:60:d8:8a:2d:78:55:8d:71:b5:2b: a6:09:78:7c:ee:55:87:d6:b5:6f:f0:f0:63:dc:08:6a:58:7b: ad:62:14:1f:29:67:01:1e:43:ec:59:52:3f:02:46:41:4c:1e: 45:31:5c:f0:14:27:c7:14:23:2a:9d:d3:17:31:71:8c:97:c8: 89:6b:10:45:57:e6:0c:d5:ce:21:8d:9c:de:08:3d:50:4e:a8: d1:22:a1:a8:2b:14:07:5d:a0:65:57:82:40:8d:a7:89:2a:58: a4:6c:39:48 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEsT1tAeaWcQtO7oksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk YzhhNjNlNzgtMTkzNC00ZDQwLTg3ZDYtNTNkNGM3NmE0ZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBQxkxIZHNvaEiK0EkOcEtB7Ul8LzYm0jAki r4yryA5PrJSTD8t/cXogwZetRiqGTvjcPmXynDMOJDC3NHO+AbNbfIIMyQvsKcvo YNb3qkq8ZfBMKxsYzOuF3HJlYLopbwS1j9JLx3PZk6AN47Yru//xZbIZxhzwaqd0 T8l3pIhIBxJPAfa3VUwGeCoUs5DrE/0gMMgHZL+3mWfbWAOAZaF5nk7XXGWW4omZ wy/l/dUtXHvdJA7Q1UMWDKQ4lMuwqYGxGaJWc1fY6mM19sxNEHzEBso04pM3sA2E 0J9GGwx5HF7FjVLsOEfH1uNNhQZHauYO+C5Nfzaoeufm69PwgwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEdImTOmj5WB4hDMxCGbJ3oseBxYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJkMTFiZDktOTEwYS0z MDhjLWIzNWYtNGI0NDRjNDgwMDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCNxNErF+zSvfS9eqDwFjLDgTw8zIkFy/DtdoBUDdApDZBajb94MWq5 Uy5W7qNJv5L9ONkZf4WoZP/M4DMuF2mtPN7LuivpvoUvxTequK7YGPDRb/9ek5Lu nIJljH5TsXO0orVj2s2QJJ9n0kBbpnAJjjWtVHzXhsS1Xbrp0gn8P8v+BMemj91q zMQqmphM7Cv0UcbTVcHmKGDYii14VY1xtSumCXh87lWH1rVv8PBj3AhqWHutYhQf KWcBHkPsWVI/AkZBTB5FMVzwFCfHFCMqndMXMXGMl8iJaxBFV+YM1c4hjZzeCD1Q TqjRIqGoKxQHXaBlV4JAjaeJKlikbDlI -----END CERTIFICATE-----Generated at Mon Oct 20 20:32:05 2025 by rpki-client