$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa8b9f10-6f5a-34d0-a5ff-46e12ca49857.roa File: aa8b9f10-6f5a-34d0-a5ff-46e12ca49857.roa (raw, json) Hash identifier: BksV6i5vdTDIJFgG+uaNjmfxmrKQ+qijYxQm9A9r398= Subject key identifier: C9:E9:CF:7B:A9:13:9E:C8:76:B3:8B:4E:09:35:81:CA:E2:A3:D1:EC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4973902A579A323BC7FF5B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa8b9f10-6f5a-34d0-a5ff-46e12ca49857.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397196 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:90:2a:57:9a:32:3b:c7:ff:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4cd8f6f4-8b5d-4619-a7d6-694d0f8e3472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a5:70:20:04:6c:8f:0e:d9:61:f8:54:64:9b: a3:b6:ab:56:d3:c2:54:c1:b5:55:d3:f3:05:a5:3f: 21:8c:f9:41:f0:df:f2:f7:9b:a6:64:8b:5a:fe:00: b8:18:03:2d:a7:7b:ad:f0:0b:ac:e9:9c:9a:67:c7: 53:d9:d2:29:ca:07:e6:f4:c2:7c:54:24:fe:eb:70: 5a:6d:6c:1e:e6:61:e0:1a:6c:92:5d:06:00:86:e7: 75:ce:91:f0:b8:3e:48:3d:6d:a6:f9:5c:b7:e4:bb: 52:51:1e:e8:f9:ca:b7:88:46:5d:46:12:bb:bd:52: 4f:c6:59:fc:92:b4:83:ab:33:65:e6:a5:fe:00:ac: 22:e4:b2:d1:ce:49:b9:3d:50:cf:11:7f:fd:93:d6: e0:a4:de:99:42:b2:0d:3b:83:d9:3f:d5:e9:5e:1f: ad:a1:dc:c0:db:d7:ba:a5:3c:5a:61:ce:45:34:b4: 3d:40:b2:dc:2c:8c:6e:9b:0d:8d:29:d1:2e:7c:48: ba:ee:28:ba:e9:b9:53:bc:e3:8c:ca:c8:9c:56:87: 67:75:6e:7a:f3:4f:ce:00:35:b9:6d:4e:c4:a5:03: 7b:23:cd:f3:28:b3:80:c0:38:ab:17:9d:d1:85:3a: d2:90:b7:0f:18:98:ba:b8:ac:eb:4a:7e:0a:42:e5: 21:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:E9:CF:7B:A9:13:9E:C8:76:B3:8B:4E:09:35:81:CA:E2:A3:D1:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa8b9f10-6f5a-34d0-a5ff-46e12ca49857.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:38:24:e1:ac:2a:02:f5:a1:8e:5d:34:f4:1c:ba:8b:ac:3e: a1:15:f3:d2:ae:8c:6d:1a:0a:1a:8e:e5:eb:f7:bf:b9:7e:9c: 84:de:92:91:05:56:98:e3:30:3e:9f:a0:ef:c6:1c:fd:4b:85: d3:aa:7b:b3:0c:64:c5:4e:94:3a:0d:e8:9d:f8:a0:3a:75:15: c2:f6:33:19:5a:39:1c:b7:96:dc:76:1f:d4:d7:29:07:b0:40: 65:70:9a:a0:97:4a:5b:03:a6:cb:51:97:38:46:b4:6a:2d:98: fe:6f:ae:18:df:23:22:3d:c0:6a:e8:6d:bc:ac:5a:d5:e0:11: 40:6c:77:b3:64:60:b3:4f:b0:c1:32:05:58:ea:51:70:17:83: c9:74:5b:bf:5c:eb:6b:37:c9:f3:00:c9:fb:5f:20:6b:76:df: b3:ed:57:cc:e5:61:35:ce:db:53:ea:a0:94:85:cf:b7:34:73: 4a:12:bb:9d:0e:27:1c:c3:8d:0e:f5:e0:8d:cd:18:fe:ea:20: c4:86:68:54:54:ee:03:a5:ff:49:f5:65:48:3e:24:9c:bf:6d: 17:b0:38:4a:76:12:6d:f9:d6:23:9d:1d:d1:25:69:ce:ca:47: 7a:45:4c:d2:7e:02:5d:ea:a0:a8:1e:d6:df:d5:d2:3c:8d:3c: dd:4f:22:e8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc5AqV5oyO8f/W4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGNkOGY2ZjQtOGI1ZC00NjE5LWE3ZDYtNjk0ZDBmOGUzNDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6VwIARsjw7ZYfhUZJujtqtW08JUwbVV0/MF pT8hjPlB8N/y95umZIta/gC4GAMtp3ut8Aus6ZyaZ8dT2dIpygfm9MJ8VCT+63Ba bWwe5mHgGmySXQYAhud1zpHwuD5IPW2m+Vy35LtSUR7o+cq3iEZdRhK7vVJPxln8 krSDqzNl5qX+AKwi5LLRzkm5PVDPEX/9k9bgpN6ZQrINO4PZP9XpXh+todzA29e6 pTxaYc5FNLQ9QLLcLIxumw2NKdEufEi67ii66blTvOOMysicVodndW5680/OADW5 bU7EpQN7I83zKLOAwDirF53RhTrSkLcPGJi6uKzrSn4KQuUhTwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMnpz3upE57IdrOLTgk1gcrio9HsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE4YjlmMTAtNmY1YS0z NGQwLWE1ZmYtNDZlMTJjYTQ5ODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBZOCThrCoC9aGOXTT0HLqLrD6hFfPSroxtGgoajuXr97+5fpyE3pKR BVaY4zA+n6Dvxhz9S4XTqnuzDGTFTpQ6Deid+KA6dRXC9jMZWjkct5bcdh/U1ykH sEBlcJqgl0pbA6bLUZc4RrRqLZj+b64Y3yMiPcBq6G28rFrV4BFAbHezZGCzT7DB MgVY6lFwF4PJdFu/XOtrN8nzAMn7XyBrdt+z7VfM5WE1zttT6qCUhc+3NHNKErud Diccw40O9eCNzRj+6iDEhmhUVO4Dpf9J9WVIPiScv20XsDhKdhJt+dYjnR3RJWnO ykd6RUzSfgJd6qCoHtbf1dI8jTzdTyLo -----END CERTIFICATE-----Generated at Wed Sep 30 03:47:27 2026 by rpki-client