$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced4276c-5045-30cd-a5d5-9455a40e5a51.roa File: ced4276c-5045-30cd-a5d5-9455a40e5a51.roa (raw, json) Hash identifier: /HEiVLEda0X7P9qiBXvC7LzDFmCRvimFEWbhpb4aPEM= Subject key identifier: 73:A2:44:0D:7A:E1:96:21:66:1F:7D:BE:66:D7:9B:08:33:50:4E:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B91A3A474CB824242686500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced4276c-5045-30cd-a5d5-9455a40e5a51.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 397211 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:a3:a4:74:cb:82:42:42:68:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=4c99a2f1-ad91-40b5-98a9-ae7815aac2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b0:ff:22:45:87:79:9f:73:52:d8:ce:2e:86: 62:cb:26:7b:06:2e:09:58:4a:25:b9:3d:d8:6a:0b: 31:6e:ff:66:b0:f5:be:7b:b8:50:49:2c:67:ef:05: b0:94:b5:56:8c:ef:b0:1f:37:f8:d1:89:6e:82:3a: c8:ed:b5:39:d7:0a:3d:0d:be:2b:6e:b9:88:b4:3c: 6c:13:98:87:f3:c0:c3:6d:c2:ac:9c:ad:14:64:99: 2b:e0:a1:6e:22:c0:0b:90:61:fa:d7:1f:45:ae:30: e3:c2:64:df:c3:df:57:8f:7c:05:54:9d:e2:eb:ef: a9:20:ea:10:61:8c:bd:15:cd:e5:69:aa:b1:c1:4c: ae:19:9e:e7:52:5e:91:9a:f6:14:79:85:c8:b5:2e: 12:bf:cc:64:7c:98:f4:ee:a1:b8:0b:9b:70:b2:fe: 4e:53:e2:0e:71:5b:a7:e0:75:e4:af:fe:46:01:75: c6:8e:4b:ac:cc:d4:b1:00:58:4f:37:f7:45:23:82: 2d:85:19:03:11:fe:0d:e9:95:3c:de:d9:e0:d0:78: d6:2f:21:51:13:05:66:3b:61:9c:68:09:f5:09:23: d9:17:1e:c7:cc:cb:7c:66:3e:c9:ee:35:3e:7e:be: 80:75:70:6a:33:a4:d1:bc:e2:1d:bf:dd:73:2b:5b: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A2:44:0D:7A:E1:96:21:66:1F:7D:BE:66:D7:9B:08:33:50:4E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ced4276c-5045-30cd-a5d5-9455a40e5a51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8f:8b:84:ed:a9:3a:83:ca:45:7d:af:0a:a5:04:15:47:a4: 82:fb:56:59:52:34:9a:f7:e1:59:fe:5d:ed:5b:e7:06:a6:77: f0:3b:a9:1b:f4:2c:e7:7d:fc:5b:69:41:a7:35:c9:54:23:34: a3:9f:9d:0c:60:b4:0d:80:a5:1e:43:11:ca:27:33:38:86:9a: 35:6a:15:23:52:fb:1f:ea:f4:5d:18:7b:aa:90:4b:06:23:27: 34:7f:b5:b7:3c:11:29:5e:a4:32:52:2b:94:92:2d:ea:a5:9a: 82:c1:21:e8:46:ac:6c:90:6a:9a:8f:7f:89:e2:f5:6f:62:56: 54:68:22:d5:ad:7f:04:61:a0:5f:e2:28:86:ba:4d:34:4c:32: e7:42:7c:3a:ac:d1:38:96:b7:f1:a0:91:9c:88:ca:9a:21:0a: a0:a6:68:43:a6:be:5d:3a:d5:9e:89:7d:b5:16:c3:99:07:7d: f7:6b:62:65:1b:de:58:79:7e:cb:2b:e9:06:ee:41:82:ef:e3: 80:45:90:e4:03:ac:e6:34:d7:a0:c3:c0:da:f6:9b:f6:b9:b5: 17:f9:6d:ab:af:32:1b:a8:86:57:55:79:6d:7e:d9:17:b2:f2: d1:ae:2e:ef:a2:7f:a0:3d:82:41:72:99:db:40:28:06:90:82: 13:bd:1f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaOkdMuCQkJoZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk NGM5OWEyZjEtYWQ5MS00MGI1LTk4YTktYWU3ODE1YWFjMmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7D/IkWHeZ9zUtjOLoZiyyZ7Bi4JWEoluT3Y agsxbv9msPW+e7hQSSxn7wWwlLVWjO+wHzf40YlugjrI7bU51wo9Db4rbrmItDxs E5iH88DDbcKsnK0UZJkr4KFuIsALkGH61x9FrjDjwmTfw99Xj3wFVJ3i6++pIOoQ YYy9Fc3laaqxwUyuGZ7nUl6RmvYUeYXItS4Sv8xkfJj07qG4C5twsv5OU+IOcVun 4HXkr/5GAXXGjkuszNSxAFhPN/dFI4IthRkDEf4N6ZU83tng0HjWLyFREwVmO2Gc aAn1CSPZFx7HzMt8Zj7J7jU+fr6AdXBqM6TRvOIdv91zK1vsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOiRA164ZYhZh99vmbXmwgzUE5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2VkNDI3NmMtNTA0NS0z MGNkLWE1ZDUtOTQ1NWE0MGU1YTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaPi4TtqTqDykV9rwqlBBVHpIL7VllSNJr34Vn+Xe1b5wamd/A7qRv0 LOd9/FtpQac1yVQjNKOfnQxgtA2ApR5DEconMziGmjVqFSNS+x/q9F0Ye6qQSwYj JzR/tbc8ESlepDJSK5SSLeqlmoLBIehGrGyQapqPf4ni9W9iVlRoItWtfwRhoF/i KIa6TTRMMudCfDqs0TiWt/GgkZyIypohCqCmaEOmvl061Z6JfbUWw5kHffdrYmUb 3lh5fssr6QbuQYLv44BFkOQDrOY016DDwNr2m/a5tRf5bauvMhuohldVeW1+2Rey 8tGuLu+if6A9gkFymdtAKAaQghO9HwY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:46:08 2025 by rpki-client