$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff602ba-7ed2-398d-96b9-40ab63dd0726.roa File: bff602ba-7ed2-398d-96b9-40ab63dd0726.roa (raw, json) Hash identifier: dibhv9RTAzXFSLlY1szTVNPlYHovJ2jE6PVD+jo+8Hk= Subject key identifier: D0:78:09:BD:1C:FC:21:EB:B5:05:20:E2:2E:9D:ED:5B:A5:6E:B2:3E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B434C68D699E533F9041CCF40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff602ba-7ed2-398d-96b9-40ab63dd0726.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 396591 IP address blocks: 192.12.94.30/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:68:d6:99:e5:33:f9:04:1c:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=a5067b37-7539-4141-bf8a-0509eee37764 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cd:cb:93:0d:4e:5a:2a:79:97:70:98:70:04: 71:cc:58:1a:65:f6:3a:5c:69:67:62:e0:54:41:ad: cc:25:f8:8b:17:ed:f1:59:c6:fe:84:97:23:02:01: 2d:1c:00:a0:ba:cd:3c:79:f6:f5:ae:71:51:a9:ac: 15:24:6a:a7:62:c7:56:fc:ba:fe:17:ef:05:1b:0a: 22:b0:8c:89:55:ff:a8:b2:3f:b3:1b:a1:ea:2e:7e: 03:30:6b:bc:43:bd:2c:3a:b1:7a:f0:9a:dd:6b:08: ec:83:92:0a:36:03:5d:6e:e8:12:a8:22:ec:2e:f0: 11:bf:8e:c3:c1:b7:2a:f5:8b:03:fd:8a:3f:50:67: a8:b4:9a:88:d7:42:4f:4d:fc:17:49:fd:3b:bb:ae: 9b:b2:68:46:15:8a:1d:17:05:25:38:65:a7:2d:76: ac:89:91:d3:dc:d1:27:8f:95:8d:18:47:e2:a4:ab: 31:15:20:13:9c:d7:65:b1:e6:24:28:b9:63:4e:f7: 5a:70:fe:49:c2:d7:63:33:51:17:f6:43:3f:fd:ec: 7c:c6:ae:96:65:be:c4:76:14:01:80:40:de:e3:90: 85:6d:fb:2b:19:66:9e:96:59:3e:e0:b0:da:cc:e3: a1:39:d2:db:16:d8:33:11:c9:22:5e:90:fa:48:55: bd:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:78:09:BD:1C:FC:21:EB:B5:05:20:E2:2E:9D:ED:5B:A5:6E:B2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bff602ba-7ed2-398d-96b9-40ab63dd0726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.30/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:58:c0:ed:47:ab:3c:6d:6d:c7:d5:bc:3c:5b:56:d1:ac:40: a0:85:c4:ae:9e:6f:da:bf:54:65:2d:13:1f:66:65:04:36:1a: 06:30:c1:2f:04:ce:19:9f:c3:6e:af:af:d2:bc:48:bf:64:10: 91:92:1d:97:52:4b:71:b0:e8:e6:f7:e4:02:c3:c3:ac:58:23: b4:9a:ea:85:76:b5:db:9e:b1:ca:d6:6b:8a:18:5a:4a:7f:45: 66:25:3f:f3:e7:71:d5:b6:74:5e:2a:01:62:d1:7b:b6:96:e5: ed:c6:31:4c:86:84:14:00:a1:2d:99:be:f1:39:b2:80:c3:b2: 24:05:5b:f7:a6:70:f1:e7:f7:91:aa:6f:a5:e2:23:3b:85:7b: 05:4d:61:3a:86:e4:cf:21:49:75:c6:2f:3a:f9:67:2a:f0:cc: f4:6a:06:79:1f:6c:de:5d:9e:47:de:6f:36:04:5c:96:a9:c1: 79:95:3a:84:1a:7c:89:bf:b3:7f:e2:88:79:33:49:09:44:9e: c2:ef:1c:05:e2:ad:4f:62:f6:93:68:4f:50:a0:f6:b8:fd:04: 14:16:0d:ae:d0:a9:f2:c8:97:e2:1d:e4:5d:9a:1d:b4:cc:91: 89:13:13:f2:08:d7:fe:66:d0:4b:1c:8b:f2:83:9d:43:d5:26: ae:85:a4:d0 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEtDTGjWmeUz+QQcz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YTUwNjdiMzctNzUzOS00MTQxLWJmOGEtMDUwOWVlZTM3NzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh83Lkw1OWip5l3CYcARxzFgaZfY6XGlnYuBU Qa3MJfiLF+3xWcb+hJcjAgEtHACgus08efb1rnFRqawVJGqnYsdW/Lr+F+8FGwoi sIyJVf+osj+zG6HqLn4DMGu8Q70sOrF68Jrdawjsg5IKNgNdbugSqCLsLvARv47D wbcq9YsD/Yo/UGeotJqI10JPTfwXSf07u66bsmhGFYodFwUlOGWnLXasiZHT3NEn j5WNGEfipKsxFSATnNdlseYkKLljTvdacP5JwtdjM1EX9kM//ex8xq6WZb7EdhQB gEDe45CFbfsrGWaellk+4LDazOOhOdLbFtgzEckiXpD6SFW97wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNB4Cb0c/CHrtQUg4i6d7VulbrI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmZmNjAyYmEtN2VkMi0z OThkLTk2YjktNDBhYjYzZGQwNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwAxeHjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAyWMDtR6s8bW3H1bw8W1bRrECghcSunm/av1RlLRMfZmUENhoGMMEv BM4Zn8Nur6/SvEi/ZBCRkh2XUktxsOjm9+QCw8OsWCO0muqFdrXbnrHK1muKGFpK f0VmJT/z53HVtnReKgFi0Xu2luXtxjFMhoQUAKEtmb7xObKAw7IkBVv3pnDx5/eR qm+l4iM7hXsFTWE6huTPIUl1xi86+Wcq8Mz0agZ5H2zeXZ5H3m82BFyWqcF5lTqE GnyJv7N/4oh5M0kJRJ7C7xwF4q1PYvaTaE9QoPa4/QQUFg2u0KnyyJfiHeRdmh20 zJGJExPyCNf+ZtBLHIvyg51D1SauhaTQ -----END CERTIFICATE-----Generated at Mon Oct 20 19:05:47 2025 by rpki-client