$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa File: 68ead018-a765-31a8-b426-f20084d4017a.roa (raw, json) Hash identifier: 6zlgPkjpmY9FRUFJfvjljTKqT1yA3XDc0pljILYcDjs= Subject key identifier: 43:19:6D:49:64:3D:C5:73:57:0F:08:9C:21:A1:23:1D:53:FD:66:07 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C9BC16B1F02AC325C93C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 27544 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9b:c1:6b:1f:02:ac:32:5c:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=34c1d8f2-a81d-4eb1-86fd-60c77fc5721b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e2:8d:8e:47:5d:f8:03:70:27:75:a3:46:6e: 3c:3f:dd:99:ee:b2:cd:7e:a5:ac:2d:20:ee:d4:df: e3:2e:07:21:e6:17:3e:6f:fa:c9:b5:82:63:59:af: 70:6a:51:16:af:51:94:e0:0d:48:a5:f1:ef:45:00: c5:30:d8:7b:96:41:2e:67:b1:0d:0a:9e:89:64:ae: f6:58:e5:25:af:3f:77:0b:e0:d9:d1:e5:ae:67:b7: 2b:75:eb:f1:18:60:54:ca:aa:66:4a:d7:22:ed:50: 61:76:e1:69:68:08:c8:17:73:9d:bb:60:6d:66:e0: c9:51:90:a5:21:2d:cf:9a:9d:24:6f:e0:0c:1d:68: a8:c8:0f:e2:da:49:7d:48:8a:a5:ad:6e:d7:6f:23: d6:e3:cc:74:05:41:51:43:6d:bd:49:61:25:0f:dd: e5:e7:93:a9:91:30:c1:0f:ef:92:75:19:a7:c1:65: 94:e0:2e:f6:61:d4:13:60:6c:2c:62:42:50:7c:27: 7a:ea:61:59:30:23:57:e7:66:09:b4:16:c2:bc:70: ee:4f:dd:e9:f2:ae:29:23:d5:61:d6:92:9b:24:f5: be:a4:22:d4:fb:b8:5d:1e:b7:3d:fc:b7:aa:b4:b2: f5:3d:ea:d2:59:8e:1a:4d:07:b4:f1:a6:27:ab:a9: 97:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:19:6D:49:64:3D:C5:73:57:0F:08:9C:21:A1:23:1D:53:FD:66:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68ead018-a765-31a8-b426-f20084d4017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0f:c3:61:26:86:e5:88:9c:2f:0c:9e:e3:c4:c5:39:94:b8: 79:75:64:45:fd:22:3c:81:de:ae:e5:a5:22:f7:cb:43:44:f8: d4:6f:4c:7e:ce:f9:4e:fe:69:49:d8:9f:e2:5d:e2:c7:1d:b6: 8e:75:5c:d4:8b:dc:05:7f:7d:1a:2f:bd:13:c3:f1:8f:09:a4: e9:4d:a4:d6:9e:6e:12:00:14:24:bb:a5:cf:8d:65:bb:7e:67: 10:8c:99:f1:de:cb:e1:75:f5:f9:01:9a:82:5b:e9:df:fb:3b: 11:14:c4:b8:74:3a:cc:9e:da:a0:ab:ec:89:a2:cf:57:d8:fd: ec:9e:3f:5c:0f:c9:11:02:8d:e9:1b:b0:46:c4:86:36:dd:eb: fc:fb:4c:bf:cd:64:e2:c5:7c:a0:89:31:9b:f4:2f:41:17:ab: 44:68:9c:ae:3e:83:70:e4:be:78:e0:b6:e1:15:4d:8e:4a:73: be:29:2d:bc:da:ca:a2:f8:a8:1a:bf:f6:b0:3b:2c:09:25:f1: 17:54:d9:af:35:e6:d5:8d:dc:75:bf:06:83:0e:a0:e0:0d:6d: 4e:21:18:d9:31:48:bc:82:21:29:1f:b0:a1:ab:11:be:ce:a2: 82:8a:a3:95:3a:48:6a:dc:3a:64:cc:fb:fd:50:89:66:01:95: d6:cf:02:f6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTJvBax8CrDJck8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MzRjMWQ4ZjItYTgxZC00ZWIxLTg2ZmQtNjBjNzdmYzU3MjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueKNjkdd+ANwJ3WjRm48P92Z7rLNfqWsLSDu 1N/jLgch5hc+b/rJtYJjWa9walEWr1GU4A1IpfHvRQDFMNh7lkEuZ7ENCp6JZK72 WOUlrz93C+DZ0eWuZ7crdevxGGBUyqpmStci7VBhduFpaAjIF3Odu2BtZuDJUZCl IS3Pmp0kb+AMHWioyA/i2kl9SIqlrW7XbyPW48x0BUFRQ229SWElD93l55OpkTDB D++SdRmnwWWU4C72YdQTYGwsYkJQfCd66mFZMCNX52YJtBbCvHDuT93p8q4pI9Vh 1pKbJPW+pCLU+7hdHrc9/LeqtLL1PerSWY4aTQe08aYnq6mXgQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEMZbUlkPcVzVw8InCGhIx1T/WYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjhlYWQwMTgtYTc2NS0z MWE4LWI0MjYtZjIwMDg0ZDQwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCHD8NhJobliJwvDJ7jxMU5lLh5dWRF/SI8gd6u5aUi98tDRPjUb0x+ zvlO/mlJ2J/iXeLHHbaOdVzUi9wFf30aL70Tw/GPCaTpTaTWnm4SABQku6XPjWW7 fmcQjJnx3svhdfX5AZqCW+nf+zsRFMS4dDrMntqgq+yJos9X2P3snj9cD8kRAo3p G7BGxIY23ev8+0y/zWTixXygiTGb9C9BF6tEaJyuPoNw5L544LbhFU2OSnO+KS28 2sqi+Kgav/awOywJJfEXVNmvNebVjdx1vwaDDqDgDW1OIRjZMUi8giEpH7ChqxG+ zqKCiqOVOkhq3DpkzPv9UIlmAZXWzwL2 -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:08 2025 by rpki-client