$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa File: a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa (raw, json) Hash identifier: SQ+z05lKcfh1Q7toMLKiMA+3MBfmTN0tRg5sDEQQNv0= Subject key identifier: 25:3D:AB:9E:8A:42:0D:DC:61:F4:ED:C4:03:4C:E3:84:DA:8B:97:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F11A131713A7DB300F04F7A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 396581 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:31:71:3a:7d:b3:00:f0:4f:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=d6d7607f-776a-4bee-8fee-088754e4002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:25:7c:e7:cc:73:17:b0:e3:7f:79:06:32:03: be:f4:6f:b9:13:19:d8:32:a8:58:59:11:fd:15:23: 84:e1:51:9c:33:dc:bf:42:54:80:af:fa:a2:c6:12: 38:28:ac:cf:99:8f:4c:d3:d6:3e:6f:af:a1:56:a5: 72:7a:30:f7:98:7b:03:1e:f5:4e:b7:32:94:22:9b: 63:67:32:81:7d:a6:a0:97:d1:41:79:c0:17:f1:d7: c6:eb:77:63:b9:0d:94:1b:89:93:c9:f6:43:8f:f6: 64:c7:40:ed:4e:56:ae:86:f7:89:7d:20:e5:61:e0: 53:0b:5b:98:3e:dd:ca:a9:16:d5:48:7d:82:ad:b7: d5:90:53:31:58:a6:90:8c:8e:46:85:26:ab:bd:d4: 54:53:97:9b:22:4c:e9:1b:11:11:9c:1b:9c:1a:f6: 1d:87:59:8a:9a:de:3d:b5:5e:ac:e6:e2:7d:51:25: 44:94:60:19:a1:b3:4f:56:c1:27:23:97:09:05:8f: f0:3f:89:41:e4:ba:cd:b7:a6:f3:54:fc:9b:7d:34: 72:e8:b3:0d:fc:e0:d7:99:e9:dd:aa:98:dc:3f:7c: 36:b8:36:5c:06:f6:34:4f:a6:2f:a8:b3:1b:a7:eb: 74:9a:a9:b5:a5:d5:04:43:ee:f5:e4:1b:d2:38:7e: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:3D:AB:9E:8A:42:0D:DC:61:F4:ED:C4:03:4C:E3:84:DA:8B:97:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a4d9d405-a38e-3d78-8539-12ddf6b1ecb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:98:76:a9:35:ca:d7:f2:9a:e8:41:72:ae:12:cf:78:ef:62: 18:3c:46:e1:27:ee:c8:93:3d:87:dd:86:58:25:be:3d:3f:51: f1:06:c3:93:29:57:3c:8e:8c:39:84:9e:e3:06:21:11:6d:30: fb:df:eb:0e:8b:33:3f:c3:61:41:b2:0b:19:bc:c5:a4:45:58: ec:51:63:80:a0:a4:b9:04:ba:1d:08:85:0e:3f:73:a8:cb:4e: 44:7f:d6:7c:70:cb:76:f6:83:3d:29:74:18:79:76:b4:88:6a: 1d:20:0b:1e:b9:41:cf:bb:9c:fa:bf:8b:3e:ef:41:c5:f3:8c: 8d:0b:2e:2f:7d:dc:20:09:7c:c9:a4:2b:59:73:f7:07:a0:ca: ea:bc:6e:fb:e1:ee:0e:be:9d:33:c9:64:07:09:dc:dd:f4:e6: 6f:19:d2:df:b6:0b:a2:28:01:75:67:18:cf:39:ac:94:16:7f: 59:2e:88:77:dd:2d:a2:5b:62:54:68:68:05:70:c0:83:61:fb: 8d:51:30:66:7a:a8:db:fb:fc:77:0c:0e:28:09:4f:51:7f:86: 83:7d:27:fd:3c:50:d7:8c:8b:47:28:01:e9:9d:e8:4b:92:8d: 11:f3:88:ea:fc:52:26:cf:44:1e:67:57:90:43:2d:cf:e4:99: 0a:73:69:17 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RoTFxOn2zAPBPegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZkNzYwN2YtNzc2YS00YmVlLThmZWUtMDg4NzU0ZTQwMDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCV858xzF7Djf3kGMgO+9G+5ExnYMqhYWRH9 FSOE4VGcM9y/QlSAr/qixhI4KKzPmY9M09Y+b6+hVqVyejD3mHsDHvVOtzKUIptj ZzKBfaagl9FBecAX8dfG63djuQ2UG4mTyfZDj/Zkx0DtTlauhveJfSDlYeBTC1uY Pt3KqRbVSH2CrbfVkFMxWKaQjI5GhSarvdRUU5ebIkzpGxERnBucGvYdh1mKmt49 tV6s5uJ9USVElGAZobNPVsEnI5cJBY/wP4lB5LrNt6bzVPybfTRy6LMN/ODXmend qpjcP3w2uDZcBvY0T6YvqLMbp+t0mqm1pdUEQ+715BvSOH4iKwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCU9q56KQg3cYfTtxANM44Tai5eJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTRkOWQ0MDUtYTM4ZS0z ZDc4LTg1MzktMTJkZGY2YjFlY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQANmHapNcrX8proQXKuEs9472IYPEbhJ+7Ikz2H3YZYJb49P1HxBsOT KVc8jow5hJ7jBiERbTD73+sOizM/w2FBsgsZvMWkRVjsUWOAoKS5BLodCIUOP3Oo y05Ef9Z8cMt29oM9KXQYeXa0iGodIAseuUHPu5z6v4s+70HF84yNCy4vfdwgCXzJ pCtZc/cHoMrqvG774e4Ovp0zyWQHCdzd9OZvGdLftguiKAF1ZxjPOayUFn9ZLoh3 3S2iW2JUaGgFcMCDYfuNUTBmeqjb+/x3DA4oCU9Rf4aDfSf9PFDXjItHKAHpnehL ko0R84jq/FImz0QeZ1eQQy3P5JkKc2kX -----END CERTIFICATE-----Generated at Wed Sep 23 15:30:46 2026 by rpki-client