$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e666e6-7ef6-3442-80e1-a4d1f1c2f93c.roa File: 00e666e6-7ef6-3442-80e1-a4d1f1c2f93c.roa (raw, json) Hash identifier: n0ShJhbwIRHk88Frr4TaiMrrLrInGkBEk33NraM3LDo= Subject key identifier: 70:58:EC:BA:FB:22:C0:70:A4:FB:6B:DC:87:9B:CF:57:90:9B:42:21 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B91A09513F5E0E91FC042C4 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e666e6-7ef6-3442-80e1-a4d1f1c2f93c.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 396586 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:a0:95:13:f5:e0:e9:1f:c0:42:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=7ac31bbf-b8f0-44c3-929b-4e7e3c04e437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:46:9a:d0:e2:22:58:4c:61:59:60:27:03:f2: d6:75:25:c6:96:43:5d:6b:48:50:35:c4:86:45:a3: 9a:98:47:89:3e:0d:0f:2c:4e:18:aa:de:e2:2a:2a: d3:28:fe:94:9b:d0:73:ca:3c:4d:64:ec:56:7a:de: c2:56:fe:72:bc:af:af:06:e0:61:0a:01:a9:c9:dd: e8:57:9e:5b:d2:51:20:21:52:ff:19:9c:00:49:cf: 97:18:b5:4a:f3:fc:bd:b6:f9:3e:54:52:5e:3b:bf: be:36:92:3f:f1:2c:46:86:8f:76:69:59:46:5c:05: 67:bc:08:0c:ff:c2:2d:81:1a:00:76:d0:72:ab:c0: a0:ca:f0:9c:83:76:73:35:d0:cc:86:ad:fa:31:a2: 2d:2c:f6:ef:c5:1f:73:d1:99:43:07:24:e1:1f:62: 14:c2:a5:af:5a:b5:2c:4b:9d:be:07:15:42:59:e9: d2:64:56:9c:2e:1c:92:d3:66:c9:e5:fb:8f:e1:7e: aa:a5:9d:b5:3c:47:9d:72:f1:e9:b8:b3:37:d5:bc: ba:50:d9:dc:78:93:82:22:9d:38:8f:e3:4f:16:6a: 24:bc:9f:63:06:0b:9c:b7:d2:70:34:66:9b:16:ad: 85:66:69:46:97:66:bc:aa:85:64:50:89:60:bb:0d: a1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:58:EC:BA:FB:22:C0:70:A4:FB:6B:DC:87:9B:CF:57:90:9B:42:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00e666e6-7ef6-3442-80e1-a4d1f1c2f93c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7f:5c:2d:df:c6:97:c4:fa:4f:cc:15:ac:0b:9e:92:a4:bc: 7a:69:63:3d:78:68:59:c5:7c:3e:c6:b0:6a:62:80:e6:83:a4: 7e:e2:6a:9f:c8:4b:f7:c8:b7:41:05:d4:b6:36:1e:7b:ae:98: 33:48:14:a0:00:c4:d8:08:e8:63:11:fe:a1:9c:46:97:7f:ae: c9:02:78:16:e6:ab:09:18:75:e8:8b:a5:64:14:81:26:29:8b: 52:1d:96:07:e2:ed:ae:a3:c0:09:ad:6b:de:10:79:a3:f0:23: 70:a4:14:19:4d:23:ef:b3:6c:81:5f:85:2d:2a:ed:16:d6:77: b0:93:e6:2d:e5:7f:4f:1b:b7:4c:5a:78:9e:d6:1c:51:f5:f8: 0f:52:77:3d:38:ef:fd:af:92:06:69:42:7f:c4:4d:47:42:b7: 31:9c:0a:89:fd:d3:fb:46:c6:38:4c:4a:55:23:bd:51:d3:53: 2e:fc:14:05:c1:b5:db:60:18:52:4f:2c:b4:d3:e0:68:e3:f5: 00:77:d7:f9:d8:85:ad:93:e0:ab:ee:c6:21:69:b0:34:5d:f7: 45:9c:df:02:70:5e:36:d2:5b:e7:cf:88:a0:d0:5d:b7:2e:5b: 29:d5:2a:49:51:c6:bc:0b:13:70:9f:8c:e0:34:46:d0:bf:af: e9:0f:83:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaCVE/Xg6R/AQsQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk N2FjMzFiYmYtYjhmMC00NGMzLTkyOWItNGU3ZTNjMDRlNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEaa0OIiWExhWWAnA/LWdSXGlkNda0hQNcSG RaOamEeJPg0PLE4Yqt7iKirTKP6Um9BzyjxNZOxWet7CVv5yvK+vBuBhCgGpyd3o V55b0lEgIVL/GZwASc+XGLVK8/y9tvk+VFJeO7++NpI/8SxGho92aVlGXAVnvAgM /8ItgRoAdtByq8CgyvCcg3ZzNdDMhq36MaItLPbvxR9z0ZlDByThH2IUwqWvWrUs S52+BxVCWenSZFacLhyS02bJ5fuP4X6qpZ21PEedcvHpuLM31by6UNnceJOCIp04 j+NPFmokvJ9jBguct9JwNGabFq2FZmlGl2a8qoVkUIlguw2hJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBY7Lr7IsBwpPtr3Iebz1eQm0IhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDBlNjY2ZTYtN2VmNi0z NDQyLTgwZTEtYTRkMWYxYzJmOTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId/XC3fxpfE+k/MFawLnpKkvHppYz14aFnFfD7GsGpigOaDpH7iap/I S/fIt0EF1LY2HnuumDNIFKAAxNgI6GMR/qGcRpd/rskCeBbmqwkYdeiLpWQUgSYp i1Idlgfi7a6jwAmta94QeaPwI3CkFBlNI++zbIFfhS0q7RbWd7CT5i3lf08bt0xa eJ7WHFH1+A9Sdz047/2vkgZpQn/ETUdCtzGcCon90/tGxjhMSlUjvVHTUy78FAXB tdtgGFJPLLTT4Gjj9QB31/nYha2T4KvuxiFpsDRd90Wc3wJwXjbSW+fPiKDQXbcu WynVKklRxrwLE3CfjOA0RtC/r+kPg5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 06:33:20 2025 by rpki-client