$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ab497b-0de6-316f-abb1-621eb6eae45d.roa File: 23ab497b-0de6-316f-abb1-621eb6eae45d.roa (raw, json) Hash identifier: tnXyqXtfdRysLPbhOFKawlFoIWXYFL9g9X7Tv6fSX+s= Subject key identifier: D9:F6:4B:23:AE:DC:BC:94:E6:43:34:F0:F2:A4:C1:0F:20:01:1D:FE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B919F7430E82F1267BF9300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ab497b-0de6-316f-abb1-621eb6eae45d.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 36629 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:9f:74:30:e8:2f:12:67:bf:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=2d46c634-32dc-4c79-9144-d4b38540d88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6f:ff:1f:7c:b6:71:3c:3d:10:0c:e3:d1:0c: 3e:e0:9e:0d:af:7c:67:31:5c:53:40:05:8a:5a:cb: 34:bb:0f:49:79:d9:f5:2f:77:a1:88:53:4f:95:03: 19:c7:09:36:25:85:cf:c9:1c:c6:4b:e5:c7:1f:1a: 90:c3:0a:88:2d:9a:88:ff:c0:bb:cf:99:63:c6:51: b4:ac:90:7a:92:30:71:4f:46:95:cc:d7:12:c3:fa: ec:fe:72:8f:d6:6e:b9:df:00:11:f3:51:58:9c:8e: c0:5f:ec:30:32:e7:72:04:8f:6a:d4:fb:54:d9:e4: 08:f8:0c:80:29:67:37:f9:fe:06:02:0e:be:9d:58: 11:6c:cb:28:bf:74:e2:4e:75:00:fc:79:84:d4:7d: 5a:a7:ce:78:71:a4:41:cb:23:69:c8:7a:f0:8c:21: 84:3a:0b:c8:48:9c:63:a0:4f:15:63:e9:54:57:a2: 33:47:fa:35:c0:c4:7f:a5:07:e3:45:05:f6:de:cd: db:81:ff:36:c2:8f:bc:10:30:67:a4:b0:a8:06:b5: 2a:21:63:1e:85:df:f9:a1:fb:e5:4b:83:fe:cd:07: d5:19:65:00:52:f4:93:b6:15:56:b2:32:0e:c2:9d: 2a:e7:4b:5e:78:6b:3c:89:ee:ff:02:d0:31:dd:65: eb:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F6:4B:23:AE:DC:BC:94:E6:43:34:F0:F2:A4:C1:0F:20:01:1D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23ab497b-0de6-316f-abb1-621eb6eae45d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b9:71:32:1f:f7:e3:72:12:f0:ea:ef:e6:66:b9:49:d7:c7: 9f:6b:5c:d0:31:37:d2:f5:32:56:1e:04:9f:dd:de:df:cb:3b: 2a:1c:60:c1:33:49:c9:de:5a:3e:01:f1:42:91:01:d0:e4:44: 8a:6a:3c:9b:60:9d:b3:1b:43:10:97:28:02:4e:5b:1f:23:79: 1b:57:6f:3f:96:06:a2:0f:5f:3d:d7:f2:40:24:91:d8:31:c7: b8:46:9a:e2:69:94:af:a2:63:2d:bd:b0:2f:57:92:98:ee:2b: 1d:57:36:e9:fb:4c:d2:6a:99:58:4b:0e:bc:50:47:56:24:39: ec:d5:22:dd:ff:94:41:02:cc:c5:58:cd:ba:de:c8:16:6e:84: c0:87:76:20:ac:72:db:0a:d9:ab:ed:b3:0e:13:8b:12:c1:71: 82:f1:ed:e9:d2:c4:d2:ff:11:57:44:ad:59:d6:0b:da:4e:29: 4b:bf:d4:d2:65:f7:c0:4e:63:0d:97:a5:8d:b2:44:e4:7b:09: d9:7b:c2:cc:84:50:8a:9d:77:b1:36:64:fd:f3:d4:d6:b3:46: b8:38:96:4b:06:02:19:f7:35:1e:da:17:8b:c8:eb:cb:e8:36: 10:e4:68:58:4b:aa:c1:e3:f9:61:fe:c8:aa:22:e8:42:cf:88: a0:71:0b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZ90MOgvEme/kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MmQ0NmM2MzQtMzJkYy00Yzc5LTkxNDQtZDRiMzg1NDBkODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm//H3y2cTw9EAzj0Qw+4J4Nr3xnMVxTQAWK Wss0uw9Jedn1L3ehiFNPlQMZxwk2JYXPyRzGS+XHHxqQwwqILZqI/8C7z5ljxlG0 rJB6kjBxT0aVzNcSw/rs/nKP1m653wAR81FYnI7AX+wwMudyBI9q1PtU2eQI+AyA KWc3+f4GAg6+nVgRbMsov3TiTnUA/HmE1H1ap854caRByyNpyHrwjCGEOgvISJxj oE8VY+lUV6IzR/o1wMR/pQfjRQX23s3bgf82wo+8EDBnpLCoBrUqIWMehd/5ofvl S4P+zQfVGWUAUvSTthVWsjIOwp0q50teeGs8ie7/AtAx3WXrUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn2SyOu3LyU5kM08PKkwQ8gAR3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjNhYjQ5N2ItMGRlNi0z MTZmLWFiYjEtNjIxZWI2ZWFlNDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi5cTIf9+NyEvDq7+ZmuUnXx59rXNAxN9L1MlYeBJ/d3t/LOyocYMEz ScneWj4B8UKRAdDkRIpqPJtgnbMbQxCXKAJOWx8jeRtXbz+WBqIPXz3X8kAkkdgx x7hGmuJplK+iYy29sC9XkpjuKx1XNun7TNJqmVhLDrxQR1YkOezVIt3/lEECzMVY zbreyBZuhMCHdiCsctsK2avtsw4TixLBcYLx7enSxNL/EVdErVnWC9pOKUu/1NJl 98BOYw2XpY2yROR7Cdl7wsyEUIqdd7E2ZP3z1NazRrg4lksGAhn3NR7aF4vI68vo NhDkaFhLqsHj+WH+yKoi6ELPiKBxCwY= -----END CERTIFICATE-----Generated at Wed Oct 29 07:23:25 2025 by rpki-client