$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c32535a6-f08f-3385-801a-26f98c2ef3fd.roa File: c32535a6-f08f-3385-801a-26f98c2ef3fd.roa (raw, json) Hash identifier: kVK8E9Bu22nLbduYM/qDjaLU+6O28YmMoPucGBFj+nQ= Subject key identifier: BE:FF:62:69:C3:07:5B:A7:4E:E4:20:08:0B:E9:AE:1E:47:4A:40:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B91A2C96CF9CEB4373121C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c32535a6-f08f-3385-801a-26f98c2ef3fd.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 396584 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:a2:c9:6c:f9:ce:b4:37:31:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=1e2a12b1-b472-4986-846b-6884a12902f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:63:08:78:27:35:ed:ce:98:f0:01:96:3b: 59:58:48:9c:87:6c:72:b6:de:8b:3d:a1:43:24:3b: 13:80:cc:10:b1:49:0b:71:38:04:da:4c:bc:70:1f: 21:01:2c:a5:61:0b:d9:65:b0:87:2c:91:32:ef:ce: 2b:94:05:38:c2:c9:65:42:41:c9:2b:a6:47:c0:2a: f1:2f:b5:7c:03:71:27:5e:96:34:b2:74:a0:7c:33: ec:b4:b5:3f:55:ac:01:bc:7f:e1:50:ff:6c:8e:77: 79:89:2a:76:ed:0f:d1:77:99:35:04:86:a5:3b:c0: 15:cf:30:24:c9:04:e9:da:6b:46:e6:59:4f:72:fb: bd:94:08:73:7f:7b:3b:be:03:91:91:04:3b:49:7b: 7b:ab:50:d7:2c:98:5d:d4:df:c2:2d:22:26:95:30: 4a:a5:93:35:b4:1d:fd:6e:57:36:64:b9:f2:7e:01: e9:2c:5f:a2:66:8b:9f:95:99:d5:37:99:2f:98:a7: c6:a4:c7:5e:fc:22:49:da:7e:46:fa:5f:41:62:28: 5d:81:3e:3a:ee:30:3d:48:a1:e1:8e:24:44:af:d6: 36:f9:2e:ab:3d:82:cb:2b:49:02:fa:10:c6:5e:bf: 33:51:6b:91:54:41:3d:da:93:82:04:e4:31:49:75: aa:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:FF:62:69:C3:07:5B:A7:4E:E4:20:08:0B:E9:AE:1E:47:4A:40:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c32535a6-f08f-3385-801a-26f98c2ef3fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:73:9c:76:11:46:ee:f2:22:d6:2f:34:f3:2d:21:8f:41:ba: 62:e3:06:14:c0:d6:a6:35:e0:a8:60:77:0f:f4:2f:52:85:d2: 08:b9:a2:49:62:a5:65:cb:51:a7:0d:c7:31:37:86:ba:1c:e9: e8:47:95:ee:f7:4a:83:68:8d:7f:cd:67:08:40:23:8f:5a:27: 3e:88:8a:9d:f9:68:5c:1e:2e:1a:18:2d:12:d1:fb:b4:87:1d: 50:1a:97:75:cd:37:4d:fe:81:86:5d:4b:06:8d:41:08:c7:a0: 56:f6:c0:75:25:3d:a2:86:b0:48:61:0c:19:bd:91:e8:40:62: 62:a1:50:08:ce:8a:49:b0:cf:47:1b:08:95:22:0a:17:7e:b5: 52:70:02:97:11:d2:56:9d:3b:03:29:dc:68:de:94:b3:1e:78: 42:67:42:62:9f:78:61:4d:ee:30:95:00:77:d4:5d:05:06:8d: 70:b9:19:07:31:8b:a5:b3:a3:32:0b:60:d1:9a:1e:68:f8:e2: 76:38:8a:0e:88:91:b4:5c:b0:ac:cc:42:20:29:4e:78:e3:14: c0:2f:62:4c:f2:a1:e4:a6:6f:4d:4c:9e:0a:0d:6e:ff:0c:2e: 23:ad:ad:0d:4c:8a:59:92:80:d3:9e:4a:59:14:bd:58:7a:03: f6:b5:1c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaLJbPnOtDcxIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk MWUyYTEyYjEtYjQ3Mi00OTg2LTg0NmItNjg4NGExMjkwMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiENjCHgnNe3OmPABljtZWEich2xytt6LPaFD JDsTgMwQsUkLcTgE2ky8cB8hASylYQvZZbCHLJEy784rlAU4wsllQkHJK6ZHwCrx L7V8A3EnXpY0snSgfDPstLU/VawBvH/hUP9sjnd5iSp27Q/Rd5k1BIalO8AVzzAk yQTp2mtG5llPcvu9lAhzf3s7vgORkQQ7SXt7q1DXLJhd1N/CLSImlTBKpZM1tB39 blc2ZLnyfgHpLF+iZouflZnVN5kvmKfGpMde/CJJ2n5G+l9BYihdgT467jA9SKHh jiREr9Y2+S6rPYLLK0kC+hDGXr8zUWuRVEE92pOCBOQxSXWqRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7/YmnDB1unTuQgCAvprh5HSkB2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzMyNTM1YTYtZjA4Zi0z Mzg1LTgwMWEtMjZmOThjMmVmM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5znHYRRu7yItYvNPMtIY9BumLjBhTA1qY14Khgdw/0L1KF0gi5okli pWXLUacNxzE3hroc6ehHle73SoNojX/NZwhAI49aJz6Iip35aFweLhoYLRLR+7SH HVAal3XNN03+gYZdSwaNQQjHoFb2wHUlPaKGsEhhDBm9kehAYmKhUAjOikmwz0cb CJUiChd+tVJwApcR0ladOwMp3GjelLMeeEJnQmKfeGFN7jCVAHfUXQUGjXC5GQcx i6WzozILYNGaHmj44nY4ig6IkbRcsKzMQiApTnjjFMAvYkzyoeSmb01MngoNbv8M LiOtrQ1MilmSgNOeSlkUvVh6A/a1HI0= -----END CERTIFICATE-----Generated at Wed Oct 29 07:04:27 2025 by rpki-client