$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa File: de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa (raw, json) Hash identifier: s+tb+2t23PXefg8evZWVvK3FOfnPFD41Wz18LN/TsA0= Subject key identifier: FC:F1:08:E7:72:65:5F:3D:56:64:81:72:5E:3C:C8:7B:6B:45:CD:E2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F2ABD289C3020CABC793C2F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 20362 IP address blocks: 198.17.208.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:28:9c:30:20:ca:bc:79:3c:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=e2380fe1-4803-4e29-82a5-58459570df42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:31:56:e5:81:3b:30:ce:24:58:d5:f5:79: 0a:ae:34:3a:71:ec:0c:8e:0e:f2:e2:19:93:57:39: 89:32:ec:21:4a:aa:9d:59:0b:66:10:2d:de:36:50: 94:d3:22:36:b6:88:7f:73:0a:86:8d:c9:87:ec:1c: ed:4d:8b:8d:2a:22:03:f7:cf:ea:3c:0f:27:c4:f7: 7c:de:94:de:c2:3b:0a:35:f2:ac:b5:a7:95:28:86: 94:6b:dd:b7:9c:94:31:c7:16:4d:d4:bd:3a:35:1b: ea:5e:8e:4b:b7:49:2c:1d:ec:11:1c:c3:59:64:c8: 2c:82:5a:bc:58:f0:f2:ed:0a:22:b2:12:f7:5c:2f: bb:c0:de:bb:57:b1:c2:6c:4b:4d:48:44:9a:e5:28: 52:4c:b8:93:34:fc:2d:84:99:dd:9b:af:68:37:3a: 8f:1b:2a:69:16:33:8c:b7:74:c3:65:57:7e:95:5c: 82:2e:5e:17:33:03:8c:0d:d1:e6:00:a2:74:b0:13: 73:bd:7d:5e:b1:b9:e7:71:1e:47:04:87:b4:9c:f0: cf:e7:11:bc:1d:12:17:ae:24:6b:d8:a8:b0:a6:21: bf:2e:73:38:db:b1:ce:c1:f1:d3:a7:c4:94:2e:2c: 29:80:46:e0:76:5d:fe:8f:65:3f:a6:24:51:9f:d8: 14:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F1:08:E7:72:65:5F:3D:56:64:81:72:5E:3C:C8:7B:6B:45:CD:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de6b2284-8a31-3af9-9fb9-1d1c5173a208.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 198.17.208.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:00:c8:70:50:7f:55:0a:aa:ee:77:c3:27:b1:39:76:53:c7: 52:2c:3b:97:92:7f:91:05:f9:ae:4a:13:60:b2:35:ec:8c:cb: ea:78:7b:b3:96:02:da:e6:61:25:2a:02:34:f5:ef:9b:f5:f5: f1:73:19:db:da:62:9c:1c:d8:da:bb:64:a6:6d:48:b6:75:64: 1f:de:1d:b1:bb:f8:92:16:d8:f4:e4:66:c8:40:01:2c:f0:56: e1:25:e3:91:ba:a7:06:45:f9:9c:7a:9c:6c:8c:b0:ff:7a:0a: da:23:4d:f2:b6:2d:49:58:d4:6c:75:d4:4f:51:2c:96:d2:5b: e7:9b:e7:1b:a9:75:d6:d6:f5:ea:cf:42:b4:d6:67:2f:ae:6e: 08:61:50:75:9f:70:67:8b:69:10:ff:f7:a3:7b:21:e6:c9:45: 9c:5c:61:52:66:38:d8:e0:c0:00:af:86:2a:4a:f1:5d:be:4b: 94:a5:f6:6b:3c:df:38:bd:e6:ad:62:cc:ea:62:2c:e3:bc:90: 66:3f:90:f0:d0:11:11:03:a6:b2:91:d4:71:6a:c7:af:0b:1e: 85:97:67:90:1b:9a:b4:f8:ce:d2:9b:96:f0:ac:85:e1:50:45: 49:b5:46:5a:f5:19:57:da:cd:66:ef:b1:b0:b0:53:2e:5a:de: 98:b8:27:f2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8qvSicMCDKvHk8L0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk ZTIzODBmZTEtNDgwMy00ZTI5LTgyYTUtNTg0NTk1NzBkZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSMxVuWBOzDOJFjV9XkKrjQ6cewMjg7y4hmT VzmJMuwhSqqdWQtmEC3eNlCU0yI2toh/cwqGjcmH7BztTYuNKiID98/qPA8nxPd8 3pTewjsKNfKstaeVKIaUa923nJQxxxZN1L06NRvqXo5Lt0ksHewRHMNZZMgsglq8 WPDy7QoishL3XC+7wN67V7HCbEtNSESa5ShSTLiTNPwthJndm69oNzqPGyppFjOM t3TDZVd+lVyCLl4XMwOMDdHmAKJ0sBNzvX1esbnncR5HBIe0nPDP5xG8HRIXriRr 2KiwpiG/LnM427HOwfHTp8SULiwpgEbgdl3+j2U/piRRn9gU2QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPzxCOdyZV89VmSBcl48yHtrRc3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGU2YjIyODQtOGEzMS0z YWY5LTlmYjktMWQxYzUxNzNhMjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAxhHQHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQALAMhwUH9VCqrud8MnsTl2U8dSLDuXkn+RBfmuShNgsjXsjMvqeHuz lgLa5mElKgI09e+b9fXxcxnb2mKcHNjau2SmbUi2dWQf3h2xu/iSFtj05GbIQAEs 8FbhJeORuqcGRfmcepxsjLD/egraI03yti1JWNRsddRPUSyW0lvnm+cbqXXW1vXq z0K01mcvrm4IYVB1n3Bni2kQ//ejeyHmyUWcXGFSZjjY4MAAr4YqSvFdvkuUpfZr PN84veatYszqYizjvJBmP5Dw0BERA6aykdRxasevCx6Fl2eQG5q0+M7Sm5bwrIXh UEVJtUZa9RlX2s1m77GwsFMuWt6YuCfy -----END CERTIFICATE-----Generated at Tue Sep 22 21:14:26 2026 by rpki-client