$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69838eb2-beeb-3020-9155-5f81a39d6d58.roa File: 69838eb2-beeb-3020-9155-5f81a39d6d58.roa (raw, json) Hash identifier: xaU9CgTDnjd2x83rufBQp+ERUlCc9oAhrHgjaOS3HQk= Subject key identifier: 81:66:78:DB:D2:83:D0:59:04:01:B7:0B:D6:AE:7C:0C:99:48:E4:62 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B919F520375A8E1EDCF1280 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69838eb2-beeb-3020-9155-5f81a39d6d58.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 396577 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:9f:52:03:75:a8:e1:ed:cf:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=be253a86-f52b-437c-b404-fe44b6e5500a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:5b:44:ac:70:77:56:9e:20:a6:43:2c:34: 57:24:d5:46:7f:18:66:38:c0:f2:39:5d:b4:c2:6e: 76:86:74:02:19:d1:1f:e7:80:d4:57:54:c1:6f:fa: ec:6d:79:48:72:6d:91:88:1c:40:2c:81:aa:9b:9b: a8:00:8a:2f:7f:c4:f7:81:d8:4e:88:22:8c:13:87: e5:b2:d0:ba:32:99:e7:dc:8a:30:a5:43:10:f8:ab: 4a:c7:af:e4:ff:ac:f9:51:eb:0d:1e:d4:37:f9:e5: ae:f1:bd:fd:c0:62:03:2e:a2:c5:0b:ac:a2:bf:00: b7:95:00:51:96:a3:df:1b:57:26:29:14:7e:87:42: 32:c0:f0:f5:5c:45:ea:ec:c1:bb:a9:d3:4c:b9:5d: ab:1b:db:55:d3:1f:5f:2b:8b:50:4d:93:b6:b5:63: 87:ea:74:d1:96:d7:10:c4:9d:2c:86:ae:88:73:89: ed:1c:04:e6:47:a1:2e:a0:df:37:bd:c9:33:1d:d3: 0a:ec:dd:ee:a7:67:90:16:c9:0c:b1:a6:d2:fd:75: 4c:86:02:76:6d:09:87:6d:45:e8:f1:c8:f7:25:b6: 1d:50:d8:39:57:d1:01:63:2a:ff:6e:f9:32:29:9d: c8:db:b8:d4:0b:af:a0:60:2f:a1:5e:9c:95:7f:83: 44:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:66:78:DB:D2:83:D0:59:04:01:B7:0B:D6:AE:7C:0C:99:48:E4:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/69838eb2-beeb-3020-9155-5f81a39d6d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:39:04:7d:17:95:67:d1:03:70:d2:97:ae:16:90:f3:7f:87: 68:db:df:16:cc:44:cf:c1:26:0a:28:09:83:27:90:c7:07:7c: 0c:c5:90:70:b5:0c:08:ca:3c:91:c4:ad:c5:10:76:01:03:2b: 03:8f:1b:15:6d:f3:55:cf:84:d5:a6:8f:7c:f2:31:28:01:2e: 41:bf:90:7a:16:55:66:27:3b:b1:1c:4f:f7:29:4f:f7:1e:55: a7:3f:c9:6d:2b:bd:4d:5b:d0:59:04:f5:da:1d:7b:39:2a:57: b9:21:5c:b5:5c:9b:15:e2:e7:38:c5:7e:eb:94:6f:00:14:89: 6c:7b:89:3b:ec:fb:51:a0:59:92:12:b7:ed:1c:10:95:19:1b: f4:ad:ef:9e:c3:f8:c4:a2:c2:8a:78:8c:0e:46:44:65:7c:99: 1f:cd:5f:df:7d:b5:1b:d1:2a:4c:69:21:0d:05:d9:20:a7:e3: a2:44:06:bb:cf:9a:9f:9f:0e:21:be:1b:dc:35:a3:03:a6:1f: 0c:a6:0c:95:29:4c:ef:48:ff:10:a5:d1:38:92:28:c4:6c:2d: e9:4a:4d:02:23:09:08:51:f8:7b:d9:17:29:4c:f2:b1:1e:09: 6a:36:c5:9b:97:fe:9b:d1:76:d3:e9:97:f3:f2:e1:63:35:af: 85:bf:b0:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkZ9SA3Wo4e3PEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YmUyNTNhODYtZjUyYi00MzdjLWI0MDQtZmU0NGI2ZTU1MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iBbRKxwd1aeIKZDLDRXJNVGfxhmOMDyOV20 wm52hnQCGdEf54DUV1TBb/rsbXlIcm2RiBxALIGqm5uoAIovf8T3gdhOiCKME4fl stC6Mpnn3IowpUMQ+KtKx6/k/6z5UesNHtQ3+eWu8b39wGIDLqLFC6yivwC3lQBR lqPfG1cmKRR+h0IywPD1XEXq7MG7qdNMuV2rG9tV0x9fK4tQTZO2tWOH6nTRltcQ xJ0shq6Ic4ntHATmR6EuoN83vckzHdMK7N3up2eQFskMsabS/XVMhgJ2bQmHbUXo 8cj3JbYdUNg5V9EBYyr/bvkyKZ3I27jUC6+gYC+hXpyVf4NElwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIFmeNvSg9BZBAG3C9aufAyZSORiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjk4MzhlYjItYmVlYi0z MDIwLTkxNTUtNWY4MWEzOWQ2ZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQ5BH0XlWfRA3DSl64WkPN/h2jb3xbMRM/BJgooCYMnkMcHfAzFkHC1 DAjKPJHErcUQdgEDKwOPGxVt81XPhNWmj3zyMSgBLkG/kHoWVWYnO7EcT/cpT/ce Vac/yW0rvU1b0FkE9dodezkqV7khXLVcmxXi5zjFfuuUbwAUiWx7iTvs+1GgWZIS t+0cEJUZG/St757D+MSiwop4jA5GRGV8mR/NX999tRvRKkxpIQ0F2SCn46JEBrvP mp+fDiG+G9w1owOmHwymDJUpTO9I/xCl0TiSKMRsLelKTQIjCQhR+HvZFylM8rEe CWo2xZuX/pvRdtPpl/Py4WM1r4W/sJk= -----END CERTIFICATE-----Generated at Wed Oct 29 11:32:51 2025 by rpki-client