$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa File: 2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa (raw, json) Hash identifier: SUDT2T8jOVRfHAaaE2shH6JkL1qo27tqBfOv1vEGCoM= Subject key identifier: 1B:03:FF:D0:3A:D8:90:2E:73:2D:FB:E0:3C:87:BD:21:BD:35:88:3D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F11A130DB0B12F54464E7FF40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396614 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:30:db:0b:12:f5:44:64:e7:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=e385d856-d40a-4104-a92d-4e754f0adf25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:ef:f0:e1:02:8a:a5:30:92:a5:c4:81:9e: 37:78:28:e8:f2:80:f8:af:91:b5:48:bd:a2:24:44: 02:4b:98:9c:52:b7:fb:e0:6f:53:62:5f:dd:e1:fb: 00:31:9f:c4:fb:66:ee:6f:01:8d:2b:10:6e:7e:bc: 90:eb:df:7f:5f:cb:99:29:85:58:46:f9:1f:98:f6: c3:bc:4c:49:d4:d3:29:6f:71:c0:5a:4e:fc:52:55: 9e:94:af:66:d8:a2:1e:d2:69:55:18:e1:fe:d4:95: 01:d6:c0:50:58:73:ea:39:40:ac:be:38:d6:b2:76: ae:c7:98:c0:3e:60:85:5e:98:f1:3a:2d:4c:85:72: 97:06:c9:fc:f4:c1:23:7d:8e:5b:65:91:08:78:16: e4:2a:78:d8:ac:70:38:97:a6:3e:26:b4:f7:d6:e0: 66:a3:0d:a6:5c:bb:57:f7:06:58:ba:83:08:fc:db: 5a:f3:77:b9:04:6f:2b:5a:57:26:9e:54:7d:8d:14: e6:1b:94:3f:23:1a:0f:43:94:a6:d2:24:a8:13:60: 49:30:64:0d:99:cc:42:71:aa:0c:9a:f4:9d:5e:48: fb:36:55:d3:5f:c0:f9:ca:4d:f9:41:f4:e3:8d:ff: a3:39:ef:96:7c:93:d7:39:c1:d2:43:f1:4c:ae:41: 9d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:03:FF:D0:3A:D8:90:2E:73:2D:FB:E0:3C:87:BD:21:BD:35:88:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2389055d-57d9-3e68-9ab3-2b45ce8d1f67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:55:3b:ab:4f:e5:02:0b:58:08:1e:b9:96:90:3d:45:78:4d: 42:2b:9b:28:00:95:d7:9a:7b:33:5b:1e:5e:ef:3a:4e:5c:f9: 0e:b7:a8:01:21:5a:54:f8:42:4f:13:8a:37:fc:da:a6:83:3e: e4:d7:38:e4:5a:e8:43:0f:49:b6:ee:1e:24:76:61:34:0f:69: 9e:a7:6e:49:00:b2:5c:1f:89:37:d6:75:79:ca:61:01:81:e0: e4:36:01:95:f2:fb:f0:7f:e3:57:4d:bb:61:63:6f:8c:ea:e7: 92:65:ac:8c:7c:30:dd:9d:c4:9d:9e:ea:2d:19:5b:3a:b2:a4: 38:38:52:01:47:d0:26:80:54:7b:5b:03:b7:1b:c9:41:de:fe: 24:45:65:27:34:b5:83:3c:12:95:67:40:f7:08:b5:2a:b6:b3: d3:ba:9b:16:3d:52:e2:ba:bd:52:6b:9a:54:3d:40:af:bb:5c: 65:c4:45:4a:82:58:fe:be:90:6c:44:37:a0:f5:98:66:12:f0: 94:7a:1f:3c:24:ce:b9:5e:28:ec:a1:5a:c4:56:7c:39:dd:0c: 60:7a:f6:4c:87:9e:bb:58:73:7f:05:8b:3e:3b:dd:6a:cb:62: 3f:5f:3f:15:43:79:68:6d:1c:61:f2:88:cb:e1:a4:c8:dd:a1: 2a:33:75:51 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RoTDbCxL1RGTn/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTM4NWQ4NTYtZDQwYS00MTA0LWE5MmQtNGU3NTRmMGFkZjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhTv8OECiqUwkqXEgZ43eCjo8oD4r5G1SL2i JEQCS5icUrf74G9TYl/d4fsAMZ/E+2bubwGNKxBufryQ699/X8uZKYVYRvkfmPbD vExJ1NMpb3HAWk78UlWelK9m2KIe0mlVGOH+1JUB1sBQWHPqOUCsvjjWsnaux5jA PmCFXpjxOi1MhXKXBsn89MEjfY5bZZEIeBbkKnjYrHA4l6Y+JrT31uBmow2mXLtX 9wZYuoMI/Nta83e5BG8rWlcmnlR9jRTmG5Q/IxoPQ5Sm0iSoE2BJMGQNmcxCcaoM mvSdXkj7NlXTX8D5yk35QfTjjf+jOe+WfJPXOcHSQ/FMrkGdIQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBsD/9A62JAucy374DyHvSG9NYg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjM4OTA1NWQtNTdkOS0z ZTY4LTlhYjMtMmI0NWNlOGQxZjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCsVTurT+UCC1gIHrmWkD1FeE1CK5soAJXXmnszWx5e7zpOXPkOt6gB IVpU+EJPE4o3/Nqmgz7k1zjkWuhDD0m27h4kdmE0D2mep25JALJcH4k31nV5ymEB geDkNgGV8vvwf+NXTbthY2+M6ueSZayMfDDdncSdnuotGVs6sqQ4OFIBR9AmgFR7 WwO3G8lB3v4kRWUnNLWDPBKVZ0D3CLUqtrPTupsWPVLiur1Sa5pUPUCvu1xlxEVK glj+vpBsRDeg9ZhmEvCUeh88JM65XijsoVrEVnw53QxgevZMh567WHN/BYs+O91q y2I/Xz8VQ3lobRxh8ojL4aTI3aEqM3VR -----END CERTIFICATE-----Generated at Tue Sep 22 10:46:35 2026 by rpki-client