$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc04493e-ad88-3ee3-be01-65af54c8fa18.roa File: dc04493e-ad88-3ee3-be01-65af54c8fa18.roa (raw, json) Hash identifier: JgYpZeGKO8yZ9bVddbJV7KjNjP1aM+gYD4QMgF75ZzI= Subject key identifier: D3:2A:56:0F:DC:D8:B0:39:2D:F7:30:AD:A1:20:61:93:60:FC:B1:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F11A12FB4AFE3F70856A28540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc04493e-ad88-3ee3-be01-65af54c8fa18.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 397198 IP address blocks: 192.30.45.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:2f:b4:af:e3:f7:08:56:a2:85:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2f5c6999-8922-45fb-9916-338011549111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:31:1b:de:e2:94:be:c5:c3:0b:6e:d9:0c: 45:4c:b9:3f:5c:ed:a8:93:04:a0:b6:ae:48:50:07: 13:09:70:02:a2:76:7b:28:f7:eb:0a:49:f6:d6:8e: 1f:f4:b8:b4:ba:37:5a:d6:0b:7d:6d:33:31:cc:ad: 5d:79:8b:e3:8e:7d:c9:e5:e4:42:e8:ed:b1:7d:74: c2:e2:84:65:26:8c:18:b4:56:02:80:54:41:b5:03: be:e3:be:4d:f5:58:4b:b8:9f:ac:50:1a:23:21:8f: 04:93:81:9d:33:b7:a8:f8:0e:ad:b0:6b:45:f7:50: b0:b5:25:77:e8:43:a5:0c:f3:34:f6:9e:f9:5d:88: ae:30:11:21:a1:db:62:10:42:50:27:f0:1e:f1:b6: 2f:ed:fa:aa:81:87:0b:6c:19:8f:fa:c2:47:9a:0d: ae:b7:36:00:64:ff:eb:18:17:c7:b5:3b:6b:d8:80: b9:6e:aa:a5:5b:79:92:a2:53:7f:2e:7f:20:61:b7: 0c:9a:d3:9a:04:cc:2e:11:1d:15:e6:bc:57:6b:c3: 64:0a:3f:0b:c5:ea:de:3e:57:15:c3:4a:f2:83:04: 8a:24:7f:23:a5:4b:d0:65:ab:11:f9:fc:2c:4d:ab: b3:7b:4e:69:fc:d1:fb:43:09:4d:4b:0d:d5:9d:09: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:56:0F:DC:D8:B0:39:2D:F7:30:AD:A1:20:61:93:60:FC:B1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc04493e-ad88-3ee3-be01-65af54c8fa18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.30.45.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e2:17:c4:9d:23:aa:42:24:bc:e4:b7:2c:7a:0f:32:57:af: 89:a0:fc:7c:32:0d:64:10:a0:36:3a:5a:00:3c:1e:71:c8:58: 79:bb:d0:8f:84:94:80:03:b3:05:fa:95:fb:75:d8:a4:aa:6c: b5:d1:2f:ea:f2:46:08:2f:3a:02:21:bd:62:5c:b2:8f:43:bf: 24:2e:7b:b8:2c:fa:8e:36:0f:f6:a0:a5:61:44:9c:c1:1a:24: b6:4c:76:55:57:0a:f8:19:54:12:7e:20:ad:3d:23:cf:61:ec: f1:6d:a9:77:c6:93:14:6f:64:b1:19:19:13:26:0e:df:6b:f2: cb:12:ae:24:36:a9:1c:8a:ac:32:dc:1f:d9:98:e1:53:c8:aa: 8a:79:8f:e1:ef:8d:2a:40:ad:97:07:bf:a7:ef:05:b1:3e:c0: 69:48:1b:af:9d:cc:59:3d:d9:d9:06:33:13:ee:6b:50:62:24: af:93:be:ac:d9:ab:96:fe:44:4f:c3:3a:84:7f:dd:3f:d5:eb: 03:f0:73:4a:9a:01:94:5b:81:e8:6c:29:46:ce:38:f5:37:f5: 0e:d7:02:81:1c:6d:f7:e8:d8:d4:a4:6c:4a:8a:14:99:80:15: c7:48:14:ee:32:c4:c1:eb:77:f7:10:57:23:98:1d:01:13:44: f4:18:45:53 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RoS+0r+P3CFaihUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmY1YzY5OTktODkyMi00NWZiLTk5MTYtMzM4MDExNTQ5MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPUxG97ilL7Fwwtu2QxFTLk/XO2okwSgtq5I UAcTCXAConZ7KPfrCkn21o4f9Li0ujda1gt9bTMxzK1deYvjjn3J5eRC6O2xfXTC 4oRlJowYtFYCgFRBtQO+475N9VhLuJ+sUBojIY8Ek4GdM7eo+A6tsGtF91CwtSV3 6EOlDPM09p75XYiuMBEhodtiEEJQJ/Ae8bYv7fqqgYcLbBmP+sJHmg2utzYAZP/r GBfHtTtr2IC5bqqlW3mSolN/Ln8gYbcMmtOaBMwuER0V5rxXa8NkCj8LxerePlcV w0rygwSKJH8jpUvQZasR+fwsTauze05p/NH7QwlNSw3VnQn7aQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNMqVg/c2LA5LfcwraEgYZNg/LHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGMwNDQ5M2UtYWQ4OC0z ZWUzLWJlMDEtNjVhZjU0YzhmYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCq4hfEnSOqQiS85Lcseg8yV6+JoPx8Mg1kEKA2OloAPB5xyFh5u9CP hJSAA7MF+pX7ddikqmy10S/q8kYILzoCIb1iXLKPQ78kLnu4LPqONg/2oKVhRJzB GiS2THZVVwr4GVQSfiCtPSPPYezxbal3xpMUb2SxGRkTJg7fa/LLEq4kNqkciqwy 3B/ZmOFTyKqKeY/h740qQK2XB7+n7wWxPsBpSBuvncxZPdnZBjMT7mtQYiSvk76s 2auW/kRPwzqEf90/1esD8HNKmgGUW4HobClGzjj1N/UO1wKBHG336NjUpGxKihSZ gBXHSBTuMsTB63f3EFcjmB0BE0T0GEVT -----END CERTIFICATE-----Generated at Tue Sep 22 10:26:04 2026 by rpki-client