$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9e6bd9a-4de6-3351-aa1a-6f5e8742e862.roa File: b9e6bd9a-4de6-3351-aa1a-6f5e8742e862.roa (raw, json) Hash identifier: 0dcAjbq7T/pVD5d8fWodZ0xd2nYlKFYmnyH0gsz9YoU= Subject key identifier: 28:E6:F4:05:27:56:9E:25:05:A8:67:F1:FF:C9:50:14:17:A3:62:BA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B91A35179D641DB366941F0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9e6bd9a-4de6-3351-aa1a-6f5e8742e862.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 396827 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:a3:51:79:d6:41:db:36:69:41:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=65bb8d35-ffd6-40ea-b6f9-7d220b91a2f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1d:93:da:bb:0a:82:72:76:0d:74:d4:97:21: 43:48:99:39:3d:eb:b5:56:d8:19:5e:1d:14:f6:6b: d9:57:da:f7:a0:06:e0:d2:f7:57:6a:7c:1f:3e:76: ab:25:ac:c5:ea:6f:bd:96:bf:47:40:5b:4a:6d:db: 46:46:77:5c:b4:0d:f6:a5:3a:b7:2e:90:12:28:fb: e8:19:44:f3:65:4c:7a:d5:94:6d:12:b8:bd:66:a2: 79:5f:b6:ab:09:d5:60:e4:48:5b:b5:c3:46:70:be: 2f:03:a4:28:21:af:9d:bf:a7:72:9c:92:7c:8d:90: 9b:aa:a0:71:25:4f:bd:8b:99:78:dc:e5:60:82:07: 45:37:42:7c:3e:ac:42:83:e2:3e:f0:c4:ff:6d:d5: 8c:7a:08:32:cc:d2:ea:55:fa:3a:e9:0e:a2:c1:03: db:ac:d9:bb:18:9f:8c:90:80:12:bc:36:cf:60:54: 41:92:dc:82:20:18:24:be:01:34:3d:92:be:16:8d: cb:90:8a:f0:3d:53:a7:f5:64:75:ec:5b:98:98:a5: 3e:af:e6:e7:f0:1b:59:c0:c9:29:5f:17:66:56:e1: eb:a3:a4:a8:75:2e:2d:84:d6:84:2f:c8:dd:98:8a: 27:3b:b8:f9:d0:ac:55:bc:3e:89:72:9d:e1:1c:fa: 08:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E6:F4:05:27:56:9E:25:05:A8:67:F1:FF:C9:50:14:17:A3:62:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9e6bd9a-4de6-3351-aa1a-6f5e8742e862.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:0e:3a:8a:0f:0c:1e:16:db:7f:f9:04:2f:3b:01:11:d1:4b: a0:4f:a6:75:d1:6f:2a:62:fe:df:a9:2e:a5:e3:dc:2c:58:74: 73:b7:34:3c:ce:c5:8c:82:20:02:5f:6d:0e:51:62:f8:2d:87: 80:ae:61:dc:8a:33:81:0a:b7:55:9c:d2:fe:ca:f7:3b:ac:12: 9b:fb:33:d6:d7:f4:89:a1:ad:ba:50:50:68:b8:0a:e9:5b:b0: 67:34:bb:13:b0:3d:31:49:12:c8:2b:a8:3d:c1:58:5e:7e:80: 52:d2:e5:b3:bb:08:4e:85:28:66:48:6d:dd:a1:27:38:2e:3e: 06:26:37:b6:aa:57:c3:74:06:d0:20:af:28:ca:8d:1f:55:cc: e3:55:8f:37:b5:30:71:40:67:ce:c4:17:ac:8d:b8:f9:4e:2b: 2a:11:da:1e:d4:f0:ed:b3:a5:b1:86:37:71:d8:f7:58:02:ca: 76:1b:18:92:8f:5e:d7:10:2d:d6:e6:c3:a0:a3:66:51:c5:46: 85:2c:ae:0f:09:71:31:16:98:2a:67:42:b1:e0:08:6a:b2:c6: fd:13:d1:fc:f3:da:a3:03:d9:35:9d:6a:25:a2:ab:06:bf:d0: 2e:d3:06:5f:8f:b4:c0:4e:3e:6a:2b:9e:18:a5:52:6b:5e:46: 4d:8d:54:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaNRedZB2zZpQfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk NjViYjhkMzUtZmZkNi00MGVhLWI2ZjktN2QyMjBiOTFhMmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx2T2rsKgnJ2DXTUlyFDSJk5Peu1VtgZXh0U 9mvZV9r3oAbg0vdXanwfPnarJazF6m+9lr9HQFtKbdtGRndctA32pTq3LpASKPvo GUTzZUx61ZRtEri9ZqJ5X7arCdVg5EhbtcNGcL4vA6QoIa+dv6dynJJ8jZCbqqBx JU+9i5l43OVgggdFN0J8PqxCg+I+8MT/bdWMeggyzNLqVfo66Q6iwQPbrNm7GJ+M kIASvDbPYFRBktyCIBgkvgE0PZK+Fo3LkIrwPVOn9WR17FuYmKU+r+bn8BtZwMkp XxdmVuHro6SodS4thNaEL8jdmIonO7j50KxVvD6Jcp3hHPoIPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjm9AUnVp4lBahn8f/JUBQXo2K6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjllNmJkOWEtNGRlNi0z MzUxLWFhMWEtNmY1ZTg3NDJlODYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4OOooPDB4W23/5BC87ARHRS6BPpnXRbypi/t+pLqXj3CxYdHO3NDzO xYyCIAJfbQ5RYvgth4CuYdyKM4EKt1Wc0v7K9zusEpv7M9bX9ImhrbpQUGi4Culb sGc0uxOwPTFJEsgrqD3BWF5+gFLS5bO7CE6FKGZIbd2hJzguPgYmN7aqV8N0BtAg ryjKjR9VzONVjze1MHFAZ87EF6yNuPlOKyoR2h7U8O2zpbGGN3HY91gCynYbGJKP XtcQLdbmw6CjZlHFRoUsrg8JcTEWmCpnQrHgCGqyxv0T0fzz2qMD2TWdaiWiqwa/ 0C7TBl+PtMBOPmornhilUmteRk2NVD8= -----END CERTIFICATE-----Generated at Mon Oct 20 09:43:52 2025 by rpki-client