$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7ff1711-b62c-31f5-b27f-868c2f9423a1.roa File: a7ff1711-b62c-31f5-b27f-868c2f9423a1.roa (raw, json) Hash identifier: caQ43enkBP6dKUwQiyK3tbxefEuBU3b5JU8GeqqN364= Subject key identifier: C4:FA:4F:AE:A4:DF:32:99:AF:D4:31:9A:6F:A3:4A:10:CA:EA:5E:74 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B91A54295EB2097DA0F92E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7ff1711-b62c-31f5-b27f-868c2f9423a1.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 396595 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:a5:42:95:eb:20:97:da:0f:92:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=bbe4c020-75cf-4502-a9dc-22bb7e62c1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:2a:5f:4b:b7:85:bd:2c:62:99:85:ac:f2: d5:c6:b9:5f:e1:50:de:b1:5c:30:f5:cb:7e:ae:6f: 1c:f9:1d:21:66:40:2f:71:ac:6a:80:02:87:b1:e9: 66:80:9e:ba:0a:fc:70:71:e5:b7:1c:82:c1:7b:29: 64:7e:d2:5c:39:7f:21:d8:33:69:a6:c0:65:75:47: 65:ad:7d:5f:5c:6e:ee:38:e8:eb:35:a7:0a:56:7a: d2:46:dc:18:6d:01:dc:4b:50:2e:75:05:43:9f:3f: 94:6e:5e:ad:98:3f:5f:c5:9b:1a:5a:e7:78:c6:d0: 91:5c:67:d3:31:6f:32:24:e5:a2:f0:35:28:81:f6: e8:08:db:a2:07:ca:8c:30:c1:9b:6c:e6:0b:1f:d4: 03:1e:98:12:c9:2f:11:4c:21:56:66:d8:08:67:ce: 90:82:7d:12:dd:fd:8f:6d:a6:5b:3b:52:02:43:c7: d2:4b:fb:b2:ac:9e:64:aa:aa:a6:c6:1d:a6:0e:87: a9:b3:a4:e8:ed:09:d5:b1:ea:81:16:ac:b1:e3:13: 4d:10:7d:ac:51:b5:de:07:30:1a:4e:76:67:d9:bb: f8:ea:c2:87:61:ef:d2:98:cf:ef:bb:9c:9a:98:7a: fb:39:e1:94:c8:11:8d:14:83:65:98:cd:a7:00:67: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FA:4F:AE:A4:DF:32:99:AF:D4:31:9A:6F:A3:4A:10:CA:EA:5E:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7ff1711-b62c-31f5-b27f-868c2f9423a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:10:0c:3a:34:21:f4:57:b7:25:64:ae:a7:9d:03:b4:22:e2: 04:f4:89:fc:af:cb:6c:5b:4e:b4:07:37:6f:a1:d3:52:7b:b9: 23:fe:e3:ce:60:2e:a3:0b:59:ee:10:61:46:59:26:c7:16:91: cf:c2:be:09:2b:15:7f:da:88:72:aa:a0:b8:59:c7:65:6a:84: 94:f6:f0:11:be:6b:be:52:9b:cc:2f:9d:b8:c1:56:6e:e6:ac: 9a:07:b3:28:e5:06:72:c2:b3:db:18:0d:20:3d:b2:5a:43:23: 67:ca:d9:e6:61:ae:74:f1:25:26:21:70:5a:ee:ed:f7:7b:c8: 91:9c:ab:6b:b5:92:9d:54:25:7b:68:ef:14:4d:dd:8a:40:3d: 7c:2c:98:8b:c7:44:42:2a:87:18:61:98:20:9c:77:d4:5e:15: 4c:0b:10:46:30:d1:00:9d:03:fb:e2:9e:e0:7d:70:ba:81:1a: 76:0f:84:c7:9e:ad:06:d9:ec:56:df:a0:d8:d8:9c:04:be:c0: ca:f6:9a:d6:30:be:b6:26:f3:48:2a:41:de:c6:24:69:db:29: ba:cd:b7:76:99:03:d3:5f:a2:ce:3c:e8:2a:37:a0:3c:5c:ea: 92:23:db:86:58:c6:12:10:7d:c8:dc:54:40:41:09:5f:12:e7: 97:18:d6:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaVClesgl9oPkuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YmJlNGMwMjAtNzVjZi00NTAyLWE5ZGMtMjJiYjdlNjJjMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv4qX0u3hb0sYpmFrPLVxrlf4VDesVww9ct+ rm8c+R0hZkAvcaxqgAKHselmgJ66CvxwceW3HILBeylkftJcOX8h2DNppsBldUdl rX1fXG7uOOjrNacKVnrSRtwYbQHcS1AudQVDnz+Ubl6tmD9fxZsaWud4xtCRXGfT MW8yJOWi8DUogfboCNuiB8qMMMGbbOYLH9QDHpgSyS8RTCFWZtgIZ86Qgn0S3f2P baZbO1ICQ8fSS/uyrJ5kqqqmxh2mDoeps6To7QnVseqBFqyx4xNNEH2sUbXeBzAa TnZn2bv46sKHYe/SmM/vu5yamHr7OeGUyBGNFINlmM2nAGcsMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMT6T66k3zKZr9Qxmm+jShDK6l50MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTdmZjE3MTEtYjYyYy0z MWY1LWIyN2YtODY4YzJmOTQyM2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgQDDo0IfRXtyVkrqedA7Qi4gT0ifyvy2xbTrQHN2+h01J7uSP+485g LqMLWe4QYUZZJscWkc/CvgkrFX/aiHKqoLhZx2VqhJT28BG+a75Sm8wvnbjBVm7m rJoHsyjlBnLCs9sYDSA9slpDI2fK2eZhrnTxJSYhcFru7fd7yJGcq2u1kp1UJXto 7xRN3YpAPXwsmIvHREIqhxhhmCCcd9ReFUwLEEYw0QCdA/vinuB9cLqBGnYPhMee rQbZ7FbfoNjYnAS+wMr2mtYwvrYm80gqQd7GJGnbKbrNt3aZA9Nfos486Co3oDxc 6pIj24ZYxhIQfcjcVEBBCV8S55cY1lY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:34:36 2025 by rpki-client