$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b41d5f86-aab1-3fd5-b5a8-58e8bdb9e081.roa File: b41d5f86-aab1-3fd5-b5a8-58e8bdb9e081.roa (raw, json) Hash identifier: 7FoDU9ZM7a2xcQuNICfpjFNefc6p5wZ60RqAYkpNpfw= Subject key identifier: FF:5A:86:7D:9C:52:04:6B:C3:42:75:FD:38:80:5A:81:22:49:73:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B91A03BA351B7623014E9C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b41d5f86-aab1-3fd5-b5a8-58e8bdb9e081.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 36631 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:a0:3b:a3:51:b7:62:30:14:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=990e971f-0a26-4e19-84c9-3c59c49bb9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fc:42:5a:5b:ff:f1:bd:59:e1:41:7f:3e:36: 84:1d:bb:aa:b8:2e:75:5c:e5:b2:7f:e2:95:44:51: b2:49:f9:8e:cd:76:04:b8:10:61:ea:57:00:46:86: b4:e3:86:bd:2b:71:6b:df:20:6e:36:a4:1b:d4:06: 7f:9b:51:e2:94:e7:be:85:da:e7:3a:42:46:91:92: 63:70:ba:c0:a6:78:30:70:12:bc:49:90:6e:55:6b: 31:7e:d9:92:41:2f:a5:1f:96:3c:9c:35:0f:19:e7: bd:4a:cc:5a:bd:b3:ca:e4:8f:07:42:66:b0:f0:1c: 0a:30:45:55:b8:0c:61:13:d2:65:74:82:75:95:42: d3:c6:a3:85:12:c0:e3:05:70:40:58:31:86:33:6c: 36:61:f1:a4:c4:17:7f:7a:f5:97:63:3d:3b:b5:a8: ba:3a:00:71:2f:05:d5:55:73:f8:94:11:57:12:11: c8:09:09:b6:85:ae:01:01:a1:02:14:f3:b1:55:58: 6f:74:22:e2:f4:07:62:d2:e7:e5:5a:3f:9d:6a:a4: ca:41:cb:72:04:68:b1:08:77:a5:a3:9b:0e:79:fc: 9e:59:c3:d2:c6:fd:ee:da:41:8d:5d:a7:d8:6f:50: f8:5f:8a:b0:16:11:bc:45:1b:8a:5d:cf:9c:80:ee: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5A:86:7D:9C:52:04:6B:C3:42:75:FD:38:80:5A:81:22:49:73:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b41d5f86-aab1-3fd5-b5a8-58e8bdb9e081.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:19:c4:6e:1b:cb:a6:cd:2f:34:71:29:f7:4d:56:de:5d:e4: 51:0d:39:ca:7a:17:36:f3:8d:84:4f:21:05:ba:66:5b:3e:a7: 5a:2e:d2:c8:ec:43:66:b2:87:17:9d:5a:5f:f3:d1:6a:7e:d5: 1a:f9:7d:e8:bb:0f:0e:7c:d0:77:12:61:dc:d7:74:b7:2a:60: 0d:60:15:33:11:c4:39:d0:7a:62:9b:dd:db:aa:f1:ee:59:55: 0b:4d:ca:a8:4d:c7:9f:95:2c:d1:52:87:a0:a2:68:bb:81:1e: 35:82:f3:c7:fd:95:47:a7:d9:e1:38:54:26:00:e2:31:73:3b: c0:66:2f:89:f4:08:8c:9b:ef:55:17:90:05:0f:3d:36:22:9f: 71:b5:b7:b3:36:1d:89:a6:91:47:03:47:12:84:af:ba:97:3c: e7:32:48:67:1c:4e:3a:85:84:c4:e1:1d:1e:48:fa:d1:88:55: d4:29:12:ff:10:a5:6e:80:e5:4c:63:c8:70:5a:cd:6c:d1:d6: 86:c3:a6:4a:47:d6:95:96:04:37:bb:63:d7:6c:c3:a2:14:a1: 52:da:62:3d:39:08:5c:5e:55:46:fe:a1:4f:a8:7b:19:80:b3: 83:b7:7f:5d:d8:42:24:49:29:2c:a9:02:1b:8e:f9:b6:f3:8a: 2e:68:33:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaA7o1G3YjAU6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk OTkwZTk3MWYtMGEyNi00ZTE5LTg0YzktM2M1OWM0OWJiOWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/xCWlv/8b1Z4UF/PjaEHbuquC51XOWyf+KV RFGySfmOzXYEuBBh6lcARoa044a9K3Fr3yBuNqQb1AZ/m1HilOe+hdrnOkJGkZJj cLrApngwcBK8SZBuVWsxftmSQS+lH5Y8nDUPGee9SsxavbPK5I8HQmaw8BwKMEVV uAxhE9JldIJ1lULTxqOFEsDjBXBAWDGGM2w2YfGkxBd/evWXYz07tai6OgBxLwXV VXP4lBFXEhHICQm2ha4BAaECFPOxVVhvdCLi9Adi0uflWj+daqTKQctyBGixCHel o5sOefyeWcPSxv3u2kGNXafYb1D4X4qwFhG8RRuKXc+cgO4+FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9ahn2cUgRrw0J1/TiAWoEiSXMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjQxZDVmODYtYWFiMS0z ZmQ1LWI1YTgtNThlOGJkYjllMDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYZxG4by6bNLzRxKfdNVt5d5FENOcp6FzbzjYRPIQW6Zls+p1ou0sjs Q2ayhxedWl/z0Wp+1Rr5fei7Dw580HcSYdzXdLcqYA1gFTMRxDnQemKb3duq8e5Z VQtNyqhNx5+VLNFSh6CiaLuBHjWC88f9lUen2eE4VCYA4jFzO8BmL4n0CIyb71UX kAUPPTYin3G1t7M2HYmmkUcDRxKEr7qXPOcySGccTjqFhMThHR5I+tGIVdQpEv8Q pW6A5UxjyHBazWzR1obDpkpH1pWWBDe7Y9dsw6IUoVLaYj05CFxeVUb+oU+oexmA s4O3f13YQiRJKSypAhuO+bbzii5oM/g= -----END CERTIFICATE-----Generated at Mon Oct 20 06:44:47 2025 by rpki-client