$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbac4417-de9d-35ca-8a2d-49f26e98c37d.roa File: dbac4417-de9d-35ca-8a2d-49f26e98c37d.roa (raw, json) Hash identifier: Ig6kfE7YkL+C6bWtVXwukeEj0jIKAKFQBw0aibjF2sg= Subject key identifier: 99:F1:1E:C6:F1:6E:27:E8:57:63:75:E6:54:98:53:9F:A9:D3:15:93 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AECC58E4813909B46D7BC4680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbac4417-de9d-35ca-8a2d-49f26e98c37d.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 396560 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c5:8e:48:13:90:9b:46:d7:bc:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=223e391a-62f6-41ac-9e7d-0fd05cf3a36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:67:76:14:2b:1e:aa:5f:56:ec:37:17:61:6e: 5d:36:9a:c5:1e:4e:47:71:9c:d5:11:66:ca:aa:91: 42:42:7e:bf:18:9b:bc:f6:bf:eb:04:2f:2e:5e:00: 44:4d:a1:58:f8:2e:f1:54:10:07:cc:15:19:7a:a5: 14:22:ea:2e:de:6b:1b:c4:98:e7:45:9a:10:3c:cd: 39:22:10:83:27:ab:fd:9e:51:bf:5e:5f:93:0c:22: ff:d1:b5:ef:bd:59:3d:69:8b:58:07:a9:15:2d:94: 09:57:8f:c2:21:46:bc:4b:4c:47:77:cb:06:21:10: e7:93:20:ab:70:57:95:1a:0a:04:b1:e7:24:6e:7e: d6:d6:b7:26:08:60:de:ff:87:73:c7:ad:52:19:27: f2:55:b5:a7:00:31:2e:09:c0:de:38:3b:2a:cc:b6: ea:0e:b5:51:b4:22:6c:2a:4e:51:d4:22:d6:c2:5c: 20:1a:9e:33:d7:a1:5d:df:76:d0:cd:6f:7c:54:5e: fb:68:51:bb:f8:84:ef:1d:d8:5f:65:0d:73:1d:7f: 9a:b0:88:04:d2:f0:41:53:d3:3a:b1:6d:ad:40:d5: b2:4e:8f:15:88:4c:f2:a6:09:f1:75:83:fb:a2:46: 0b:10:cd:7f:c5:78:5b:c4:0e:5b:b1:32:0d:42:69: dd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F1:1E:C6:F1:6E:27:E8:57:63:75:E6:54:98:53:9F:A9:D3:15:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dbac4417-de9d-35ca-8a2d-49f26e98c37d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ab:e6:d2:c3:af:71:96:ce:3f:55:4e:c3:46:36:9f:54:55: 74:fe:32:4a:e5:ba:d7:47:b2:6c:be:2d:6a:91:00:07:ee:5f: 76:f2:5b:69:11:49:b5:17:8d:ed:f2:b1:28:e3:ba:58:c5:9b: 0f:66:96:2a:5f:00:c9:5a:d1:da:d5:0c:bb:a2:94:0f:e5:e1: b3:27:4c:5b:91:c4:6d:b4:55:3f:56:59:a9:4e:cd:cf:a7:8c: cf:ae:54:cd:62:ac:60:76:51:e2:7f:73:23:1b:f2:93:d8:40: ca:98:c8:a9:3b:42:39:cd:2d:30:8f:26:50:de:c7:fd:e8:40: 5d:d6:a0:77:92:7b:c8:47:d6:50:ea:b4:15:7c:a3:e1:7e:90: a6:3d:31:b4:22:53:69:a5:59:78:d3:ac:04:7b:31:57:06:f7: e8:5c:d9:29:a4:f7:04:fb:12:0f:33:92:7c:68:f7:5a:cc:f2: 3c:fc:9f:db:48:3d:9c:eb:db:90:38:6b:3d:fb:68:c4:90:ba: de:78:21:d9:2e:73:45:9b:2c:e3:22:a7:27:04:55:05:f4:75: 01:ad:57:8a:6a:d1:6f:a5:6f:65:e8:c5:47:b9:f1:f3:72:63: 81:f9:2e:b7:de:9d:bc:78:21:0c:43:6c:90:78:fa:2b:95:4f: 18:cc:6a:57 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWErsxY5IE5CbRte8RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk MjIzZTM5MWEtNjJmNi00MWFjLTllN2QtMGZkMDVjZjNhMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWd2FCseql9W7DcXYW5dNprFHk5HcZzVEWbK qpFCQn6/GJu89r/rBC8uXgBETaFY+C7xVBAHzBUZeqUUIuou3msbxJjnRZoQPM05 IhCDJ6v9nlG/Xl+TDCL/0bXvvVk9aYtYB6kVLZQJV4/CIUa8S0xHd8sGIRDnkyCr cFeVGgoEseckbn7W1rcmCGDe/4dzx61SGSfyVbWnADEuCcDeODsqzLbqDrVRtCJs Kk5R1CLWwlwgGp4z16Fd33bQzW98VF77aFG7+ITvHdhfZQ1zHX+asIgE0vBBU9M6 sW2tQNWyTo8ViEzypgnxdYP7okYLEM1/xXhbxA5bsTINQmndHQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJnxHsbxbifoV2N15lSYU5+p0xWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGJhYzQ0MTctZGU5ZC0z NWNhLThhMmQtNDlmMjZlOThjMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAQq+bSw69xls4/VU7DRjafVFV0/jJK5brXR7Jsvi1qkQAH7l928ltp EUm1F43t8rEo47pYxZsPZpYqXwDJWtHa1Qy7opQP5eGzJ0xbkcRttFU/VlmpTs3P p4zPrlTNYqxgdlHif3MjG/KT2EDKmMipO0I5zS0wjyZQ3sf96EBd1qB3knvIR9ZQ 6rQVfKPhfpCmPTG0IlNppVl406wEezFXBvfoXNkppPcE+xIPM5J8aPdazPI8/J/b SD2c69uQOGs9+2jEkLreeCHZLnNFmyzjIqcnBFUF9HUBrVeKatFvpW9l6MVHufHz cmOB+S633p28eCEMQ2yQePorlU8YzGpX -----END CERTIFICATE-----Generated at Sat Aug 23 18:00:51 2025 by rpki-client