$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4507f9da-75e4-3ea7-83ff-5cc295d4ad7b.roa File: 4507f9da-75e4-3ea7-83ff-5cc295d4ad7b.roa (raw, json) Hash identifier: uaSR7MShKhRlgm/ziCA0C31paCZMrrSvCe6LLIKzxIg= Subject key identifier: 12:0C:C2:54:B6:6F:09:C7:F3:60:02:F1:39:C2:7D:CC:CC:45:C4:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F093CCCA99039A89096DC2A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4507f9da-75e4-3ea7-83ff-5cc295d4ad7b.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 397195 IP address blocks: 192.42.93.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:cc:a9:90:39:a8:90:96:dc:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=a8a417ab-ad28-4b95-85cf-a8114cc8ea4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:b2:58:73:4b:fe:3d:d8:b6:11:cf:7c:8e: 6b:15:d2:f5:0a:11:b3:5d:2d:00:05:f7:e6:a8:ca: a4:83:3e:33:d5:51:33:f4:01:e6:b1:4e:11:4b:a6: 30:32:44:da:db:8c:72:8e:1c:f9:59:27:b2:44:64: b6:57:a3:c0:23:ae:4f:e8:62:a3:50:f2:5f:93:9d: 2f:69:7a:2f:0d:ff:42:9d:7e:66:d8:29:3b:e1:13: e7:2b:b8:d6:4a:6f:cc:75:b2:40:33:8f:b2:20:b9: 40:25:f9:23:21:52:b3:d1:8c:4b:1d:2b:24:12:22: ab:f6:c3:e8:d8:89:6d:d1:74:5f:57:37:94:a9:2d: 2a:5d:4c:e3:07:86:4a:43:6d:9e:c3:23:fe:57:9d: b1:d5:06:1d:8e:be:eb:63:de:06:e3:89:af:8c:f4: f9:87:70:73:7a:4e:0c:41:62:cb:91:ce:32:9f:1a: 6c:c5:78:a9:1e:fa:12:b3:17:f6:48:65:62:3c:5f: 1a:0e:a2:26:55:cc:df:0c:36:64:b0:93:54:fe:f7: 8d:d8:4f:48:c2:9a:ca:06:1a:be:62:1b:bc:72:1a: 00:96:57:a4:72:e4:1a:10:47:f8:8c:8b:44:42:35: 52:92:03:d7:1f:22:85:d0:f5:5e:d2:b3:8e:b5:8c: 5c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0C:C2:54:B6:6F:09:C7:F3:60:02:F1:39:C2:7D:CC:CC:45:C4:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4507f9da-75e4-3ea7-83ff-5cc295d4ad7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.42.93.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b9:d1:72:c5:b6:76:ec:8c:c9:84:7a:69:60:c0:29:02:e4: 36:d3:60:22:20:bf:4f:27:c0:ca:bb:13:eb:33:5c:eb:31:c8: dd:10:8d:14:f8:eb:c8:84:e1:39:57:9d:c4:15:2b:a9:26:99: 23:f6:1b:f3:4b:4c:56:c8:d3:50:6d:b1:17:84:9a:38:e9:11: a6:9a:04:f6:5d:41:6f:06:70:1d:a8:f8:08:ee:ce:0d:28:7d: 2f:29:70:dc:a8:fe:4b:93:2f:ac:26:59:ca:2a:54:29:91:34: 24:e3:d6:4f:ee:c6:e1:cd:6a:e5:3c:aa:3c:13:4b:9d:5c:58: 33:78:70:79:96:e1:5e:7a:fd:43:8c:c3:08:d9:1b:04:05:3c: 80:c5:0f:88:66:bc:dc:c4:88:42:e7:19:93:ce:ed:df:8c:dd: 8a:a3:29:39:f0:70:db:53:a9:23:c5:c4:96:45:d1:b8:7f:11: 12:6f:82:5c:54:76:d8:e9:91:5b:0a:b8:24:a0:8c:8f:3f:56: 2d:a6:e8:f7:a8:80:5a:88:5f:c6:87:14:d8:98:60:58:64:72: 11:7a:bd:6d:f4:69:58:40:69:e3:17:f1:66:84:64:b9:83:18: 1f:96:5b:d7:c6:b7:16:39:c6:b4:ad:ec:73:37:eb:37:db:85: c8:67:d4:10 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8JPMypkDmokJbcKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk YThhNDE3YWItYWQyOC00Yjk1LTg1Y2YtYTgxMTRjYzhlYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/eyWHNL/j3YthHPfI5rFdL1ChGzXS0ABffm qMqkgz4z1VEz9AHmsU4RS6YwMkTa24xyjhz5WSeyRGS2V6PAI65P6GKjUPJfk50v aXovDf9CnX5m2Ck74RPnK7jWSm/MdbJAM4+yILlAJfkjIVKz0YxLHSskEiKr9sPo 2Ilt0XRfVzeUqS0qXUzjB4ZKQ22ewyP+V52x1QYdjr7rY94G44mvjPT5h3Bzek4M QWLLkc4ynxpsxXipHvoSsxf2SGViPF8aDqImVczfDDZksJNU/veN2E9IwprKBhq+ Yhu8choAllekcuQaEEf4jItEQjVSkgPXHyKF0PVe0rOOtYxcTQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFBIMwlS2bwnH82AC8TnCfczMRcT6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDUwN2Y5ZGEtNzVlNC0z ZWE3LTgzZmYtNWNjMjk1ZDRhZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCpdHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBTudFyxbZ27IzJhHppYMApAuQ202AiIL9PJ8DKuxPrM1zrMcjdEI0U +OvIhOE5V53EFSupJpkj9hvzS0xWyNNQbbEXhJo46RGmmgT2XUFvBnAdqPgI7s4N KH0vKXDcqP5Lky+sJlnKKlQpkTQk49ZP7sbhzWrlPKo8E0udXFgzeHB5luFeev1D jMMI2RsEBTyAxQ+IZrzcxIhC5xmTzu3fjN2Koyk58HDbU6kjxcSWRdG4fxESb4Jc VHbY6ZFbCrgkoIyPP1Ytpuj3qIBaiF/GhxTYmGBYZHIRer1t9GlYQGnjF/FmhGS5 gxgfllvXxrcWOca0rexzN+s324XIZ9QQ -----END CERTIFICATE-----Generated at Tue Sep 22 18:17:35 2026 by rpki-client