$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5ba651-9111-377b-87a8-5da87720f16e.roa File: db5ba651-9111-377b-87a8-5da87720f16e.roa (raw, json) Hash identifier: dNisx3qnXggNmVPzavfL8IVOiZQAqFwk3AqwLTBShx8= Subject key identifier: 8F:DB:C6:2B:49:95:98:B8:0E:DC:04:EF:9A:3D:58:0E:5C:13:7C:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584B2B91A2DCEDD52755166DD860 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5ba651-9111-377b-87a8-5da87720f16e.roa Signing time: Fri 12 Sep 2025 13:00:42 +0000 ROA not before: Fri 12 Sep 2025 13:00:42 +0000 ROA not after: Thu 11 Dec 2025 14:00:42 +0000 asID: 396581 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2b:91:a2:dc:ed:d5:27:55:16:6d:d8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 12 13:00:42 2025 GMT Not After : Dec 11 14:00:42 2025 GMT Subject: CN=c5b99b85-59f6-49df-ae85-4ae8b3dae8e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bf:ad:57:19:1f:90:be:55:be:03:f8:47:fc: 12:7c:e8:4f:a1:92:d2:67:2c:ee:23:60:ea:c7:f4: 55:3f:dc:ff:b8:73:c8:fd:dc:94:75:31:37:a5:70: 3b:24:be:be:ac:42:b2:ac:17:91:d1:30:78:07:0a: ec:4a:4d:3f:67:6f:ba:cd:7d:e4:06:bd:34:0b:8a: 59:67:6e:74:1b:b4:94:4a:6e:a2:72:0d:c3:c5:c7: ef:81:c9:9c:18:9a:84:55:3a:47:cb:e2:16:86:73: 90:cb:d9:2b:3c:95:2f:c9:b1:bd:05:c3:f4:d0:0e: e9:d5:19:cf:13:6a:02:dd:49:e2:94:33:04:a5:1b: 4d:96:87:c7:72:2d:7c:04:93:02:1e:cc:9d:dc:02: 7f:11:9a:be:9c:29:f0:de:a8:91:8e:52:e5:ac:86: 67:ce:d6:33:7c:c0:ec:b8:76:af:30:ab:0b:48:78: 7c:f0:e2:6a:ab:45:4c:9a:ae:d9:53:49:65:f5:0d: 51:c3:80:aa:b1:3e:30:2f:bb:bc:8f:12:d0:4c:14: 0c:aa:ac:fe:b5:f3:5a:83:3c:30:e1:53:80:89:43: 39:ed:5d:b4:0b:04:1f:59:30:1f:ed:da:f3:50:fb: c4:55:b0:4f:b9:53:2c:ed:10:f7:60:98:51:bf:e4: 22:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DB:C6:2B:49:95:98:B8:0E:DC:04:EF:9A:3D:58:0E:5C:13:7C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5ba651-9111-377b-87a8-5da87720f16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:42:cc:59:b8:72:fc:ed:5d:a4:69:62:e3:f8:ef:8f:a2:a5: 48:0d:dc:9b:43:60:d9:cd:f3:50:2e:0b:2f:42:4b:5f:eb:b6: ee:e1:2f:0c:41:8b:c2:b8:8d:11:93:81:46:a8:4b:01:68:6e: ba:63:78:42:0b:08:52:de:bf:70:d1:23:2a:47:a4:8e:52:55: 89:66:44:61:a2:03:ff:55:88:ea:40:8c:a8:67:c6:23:f2:a8: 23:3b:ee:ff:3f:ae:ca:56:98:d4:3d:2a:9e:18:3a:c0:46:31: e7:9f:c5:40:f3:0b:e1:bc:a5:95:2e:94:4e:43:ce:f1:43:81: 40:f3:1d:65:fc:e2:81:e2:2f:da:8a:27:d0:4c:50:e5:c9:67: 4c:13:be:09:53:72:b4:cf:e3:ac:10:25:e3:2b:d9:7d:e7:ed: 36:89:67:a6:ed:45:6b:7c:96:45:43:8f:14:a2:3d:e9:e9:40: 85:ee:ab:11:29:11:6e:5f:e7:4c:74:ad:13:5d:d1:54:f7:d9: 40:26:dc:2d:d4:ff:cd:9e:e8:50:fb:b9:07:1b:c1:94:25:5f: 08:93:65:ee:aa:1a:a6:12:6b:c6:cd:85:9e:ca:50:ac:09:7e: f5:62:32:36:4b:a2:94:c8:ed:84:4a:a6:c2:8c:62:c0:5e:74: cb:7b:33:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsrkaLc7dUnVRZt2GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDkxMjEzMDA0MloXDTI1MTIxMTE0MDA0MlowLzEtMCsGA1UEAxMk YzViOTliODUtNTlmNi00OWRmLWFlODUtNGFlOGIzZGFlOGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7+tVxkfkL5VvgP4R/wSfOhPoZLSZyzuI2Dq x/RVP9z/uHPI/dyUdTE3pXA7JL6+rEKyrBeR0TB4BwrsSk0/Z2+6zX3kBr00C4pZ Z250G7SUSm6icg3DxcfvgcmcGJqEVTpHy+IWhnOQy9krPJUvybG9BcP00A7p1RnP E2oC3UnilDMEpRtNlofHci18BJMCHsyd3AJ/EZq+nCnw3qiRjlLlrIZnztYzfMDs uHavMKsLSHh88OJqq0VMmq7ZU0ll9Q1Rw4CqsT4wL7u8jxLQTBQMqqz+tfNagzww 4VOAiUM57V20CwQfWTAf7drzUPvEVbBPuVMs7RD3YJhRv+QiawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/bxitJlZi4DtwE75o9WA5cE3xrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI1YmE2NTEtOTExMS0z NzdiLTg3YTgtNWRhODc3MjBmMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1CzFm4cvztXaRpYuP474+ipUgN3JtDYNnN81AuCy9CS1/rtu7hLwxB i8K4jRGTgUaoSwFobrpjeEILCFLev3DRIypHpI5SVYlmRGGiA/9ViOpAjKhnxiPy qCM77v8/rspWmNQ9Kp4YOsBGMeefxUDzC+G8pZUulE5DzvFDgUDzHWX84oHiL9qK J9BMUOXJZ0wTvglTcrTP46wQJeMr2X3n7TaJZ6btRWt8lkVDjxSiPenpQIXuqxEp EW5f50x0rRNd0VT32UAm3C3U/82e6FD7uQcbwZQlXwiTZe6qGqYSa8bNhZ7KUKwJ fvViMjZLopTI7YRKpsKMYsBedMt7M/o= -----END CERTIFICATE-----Generated at Mon Oct 20 04:09:50 2025 by rpki-client