$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa File: b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa (raw, json) Hash identifier: sHtJ6C0LlL4dv8/GlVUOx+nfi3ha68e9Em068d7sBVg= Subject key identifier: 58:8B:9C:78:0F:1F:70:3E:57:83:09:B3:FA:C0:9E:3A:CB:98:89:D6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C55B7F649D4B740F336C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 396594 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:55:b7:f6:49:d4:b7:40:f3:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=19df28b0-7d70-4972-b5ec-756f1ee6f2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:94:10:5d:90:c2:3b:9d:b7:f1:17:45:28: 0a:2f:80:27:8a:4e:f9:93:75:66:23:bc:b4:dd:f4: bc:6a:33:45:4a:38:88:a5:64:a3:cf:80:74:73:0f: 14:a5:1d:10:b4:fe:c9:10:c2:ed:92:6b:73:4a:d7: 71:ea:73:34:a6:94:63:31:c3:96:ac:66:35:ad:86: 00:cf:17:59:7f:ac:59:e3:d4:8a:2f:06:51:49:8f: 5e:04:15:59:18:91:7d:6e:8a:42:25:0d:7e:4c:f9: 69:84:b7:3d:fd:1d:46:f0:1d:8b:07:ad:5e:e5:a8: 95:e9:60:06:4a:62:57:7e:b6:82:7a:6d:a5:78:18: 7d:2b:77:3b:c8:1f:5e:4e:76:c5:0c:c6:01:8c:c2: 9f:a7:63:7e:2b:18:c0:64:e7:2f:a3:1d:ef:8f:9a: 8f:c9:1c:5e:6b:10:ca:1c:f1:df:08:53:65:3e:e2: 6a:06:10:fc:83:b5:de:ca:21:75:c8:85:ba:dc:2d: 72:b7:4c:d5:9a:79:1e:fa:5e:71:a1:e3:57:cc:f8: 15:b2:26:4e:1b:6a:89:89:0a:e6:7a:75:85:59:bb: 41:8e:18:bb:f5:e3:cf:f0:41:53:d1:06:71:ff:c0: 33:a4:b8:ea:62:a9:cf:90:83:18:96:6d:a6:8c:b2: ee:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8B:9C:78:0F:1F:70:3E:57:83:09:B3:FA:C0:9E:3A:CB:98:89:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9df89fa-478d-3471-ba73-1cc39d36e3e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:1a:9a:e7:31:e1:b5:69:92:7c:6d:81:9e:4b:32:52:3e:dc: e9:27:ad:16:19:bb:77:05:0a:87:ff:19:ed:f5:0f:f6:33:5f: be:af:95:e8:cd:7a:1b:09:27:e9:75:4b:55:5b:4c:5a:2c:42: a8:f7:d3:33:93:19:2b:ab:7f:93:ae:8c:14:10:b1:db:8d:42: b9:39:b8:04:34:ff:7d:b8:3c:a2:30:36:a3:c1:41:ca:be:39: 71:e3:ee:d8:cd:45:a9:73:08:d6:34:9d:45:d2:30:47:3a:58: 77:81:91:43:d2:08:e8:d6:1d:67:ea:ed:c0:91:66:70:14:a3: fa:df:1c:67:83:d6:3c:d9:5c:ac:fa:da:f3:86:93:d9:db:98: 63:2d:3d:66:a6:63:94:19:75:d8:95:5a:be:f6:d7:99:a8:d0: 6b:03:b1:dc:cb:1b:60:9c:0b:e5:ee:2b:5b:c8:ef:ac:2f:eb: 82:d3:30:85:0d:a2:aa:a6:28:cf:e2:24:e5:24:5d:d9:78:98: 3f:16:29:ed:48:24:c3:f6:c7:84:8a:a6:26:8a:52:31:8e:7b: 76:cd:bb:9b:45:13:ae:44:6d:66:c1:14:39:f9:0b:7d:a7:f5: 11:bb:72:b4:a5:9f:44:8e:cd:5f:98:1a:b5:f7:f8:52:5d:1d: 47:1d:90:ab -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTFW39knUt0DzNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MTlkZjI4YjAtN2Q3MC00OTcyLWI1ZWMtNzU2ZjFlZTZmMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuSUEF2Qwjudt/EXRSgKL4Anik75k3VmI7y0 3fS8ajNFSjiIpWSjz4B0cw8UpR0QtP7JEMLtkmtzStdx6nM0ppRjMcOWrGY1rYYA zxdZf6xZ49SKLwZRSY9eBBVZGJF9bopCJQ1+TPlphLc9/R1G8B2LB61e5aiV6WAG SmJXfraCem2leBh9K3c7yB9eTnbFDMYBjMKfp2N+KxjAZOcvox3vj5qPyRxeaxDK HPHfCFNlPuJqBhD8g7XeyiF1yIW63C1yt0zVmnke+l5xoeNXzPgVsiZOG2qJiQrm enWFWbtBjhi79ePP8EFT0QZx/8AzpLjqYqnPkIMYlm2mjLLuKQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFFiLnHgPH3A+V4MJs/rAnjrLmInWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjlkZjg5ZmEtNDc4ZC0z NDcxLWJhNzMtMWNjMzlkMzZlM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCgGprnMeG1aZJ8bYGeSzJSPtzpJ60WGbt3BQqH/xnt9Q/2M1++r5Xo zXobCSfpdUtVW0xaLEKo99Mzkxkrq3+TrowUELHbjUK5ObgENP99uDyiMDajwUHK vjlx4+7YzUWpcwjWNJ1F0jBHOlh3gZFD0gjo1h1n6u3AkWZwFKP63xxng9Y82Vys +trzhpPZ25hjLT1mpmOUGXXYlVq+9teZqNBrA7HcyxtgnAvl7itbyO+sL+uC0zCF DaKqpijP4iTlJF3ZeJg/FintSCTD9seEiqYmilIxjnt2zbubRROuRG1mwRQ5+Qt9 p/URu3K0pZ9Ejs1fmBq19/hSXR1HHZCr -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:37 2025 by rpki-client