$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ecaa37-dd81-35b8-9d0d-27c6293ddc74.roa File: f8ecaa37-dd81-35b8-9d0d-27c6293ddc74.roa (raw, json) Hash identifier: IN6OQe2PvSdfrDCD847hRvvHCgaPx8dJwWVr4Ps8s4o= Subject key identifier: 65:7B:4F:9C:0C:00:08:E5:58:76:C9:BD:23:9D:54:CA:23:2F:68:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584F4974162E4AB8F49AF2091400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ecaa37-dd81-35b8-9d0d-27c6293ddc74.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36630 IP address blocks: 192.12.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:16:2e:4a:b8:f4:9a:f2:09:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=287dece7-67fd-4f43-a82e-b969809bf0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:37:a7:79:24:70:fc:f0:21:3b:02:26:78: 53:5f:32:67:1f:eb:08:6d:cb:80:97:22:bb:90:45: a9:07:a5:ed:ba:6a:26:6b:3f:b2:b0:49:6e:a8:6f: d9:11:03:97:ad:fb:76:6b:5e:b0:e4:e6:7a:73:ef: 45:7c:9d:06:28:fe:73:7e:ae:58:dd:b3:4f:63:66: 20:e2:ac:8e:e1:5a:14:01:28:9a:b7:90:cf:66:ab: e8:ad:14:0d:07:12:b7:17:74:e9:42:96:dc:31:d4: ff:38:f2:cd:4a:85:5d:37:c7:a1:be:4a:57:dc:c9: 26:e4:a7:88:2c:a2:ed:ae:fc:4a:21:76:71:27:a5: b7:1a:a3:3b:52:9b:2b:30:1f:3b:07:37:a5:f8:df: 40:ef:bd:08:ce:48:e7:9f:a7:9c:1b:0f:02:b5:b3: f4:d2:1f:db:94:6c:c3:49:53:23:9b:85:cf:c2:3a: f1:e0:19:01:f6:fa:a9:f2:f5:81:23:de:0e:9c:95: da:be:ef:5e:11:6c:ef:bf:ab:af:1a:86:57:eb:40: 7d:21:69:11:db:a7:38:52:d5:ce:d0:26:96:fb:1b: 7b:de:e9:6c:00:be:5c:7e:90:0c:39:00:0a:20:eb: 28:a6:40:64:1e:af:99:9a:69:ad:53:84:83:4e:8d: 3b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7B:4F:9C:0C:00:08:E5:58:76:C9:BD:23:9D:54:CA:23:2F:68:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ecaa37-dd81-35b8-9d0d-27c6293ddc74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.12.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ab:87:e9:c3:77:4f:62:f9:51:e1:5d:be:f6:4f:37:cb:0d: ac:da:3e:91:1b:6b:66:7d:4b:cc:94:9b:06:48:7a:91:4b:18: 97:b4:49:be:c0:8d:c2:a8:f3:42:be:2b:de:37:af:62:93:46: 57:fe:95:02:85:09:60:88:bd:ef:f1:72:f6:40:d0:00:ae:f5: 20:f1:d4:d5:1c:58:88:6f:55:7d:e8:85:03:d6:33:64:54:d1: d6:6f:a3:31:4a:6f:a0:ef:84:77:8f:93:31:d4:20:3d:e1:4d: 80:64:1f:a4:06:00:8f:24:1c:9f:16:ec:39:24:6a:fc:cd:21: fa:73:7c:50:26:2e:bc:2a:60:34:b4:2e:4f:f5:25:bd:07:6b: b4:84:5f:c5:35:71:58:7b:40:bf:ce:a9:40:c6:e8:f9:8d:84: 50:23:cd:c1:f7:ea:71:2e:cd:39:bf:05:c8:14:21:94:4a:92: c6:56:07:0e:b1:40:24:0a:c3:64:c1:73:45:00:c4:2a:e4:3d: 50:05:ce:3c:7e:85:b7:c7:3f:59:71:37:7f:ba:9b:f6:74:3c: dc:53:5e:63:a3:33:9d:df:d9:47:fd:9b:6f:f8:d8:61:a1:16: cf:fe:b0:04:8d:4a:1d:ee:71:bf:e7:3a:99:9d:c1:cf:dc:d4: 54:a0:ab:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBYuSrj0mvIJFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mjg3ZGVjZTctNjdmZC00ZjQzLWE4MmUtYjk2OTgwOWJmMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0M3p3kkcPzwITsCJnhTXzJnH+sIbcuAlyK7 kEWpB6Xtumomaz+ysEluqG/ZEQOXrft2a16w5OZ6c+9FfJ0GKP5zfq5Y3bNPY2Yg 4qyO4VoUASiat5DPZqvorRQNBxK3F3TpQpbcMdT/OPLNSoVdN8ehvkpX3Mkm5KeI LKLtrvxKIXZxJ6W3GqM7UpsrMB87Bzel+N9A770Izkjnn6ecGw8CtbP00h/blGzD SVMjm4XPwjrx4BkB9vqp8vWBI94OnJXavu9eEWzvv6uvGoZX60B9IWkR26c4UtXO 0CaW+xt73ulsAL5cfpAMOQAKIOsopkBkHq+ZmmmtU4SDTo07ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV7T5wMAAjlWHbJvSOdVMojL2iZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjhlY2FhMzctZGQ4MS0z NWI4LTlkMGQtMjdjNjI5M2RkYzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCrh+nDd09i+VHhXb72TzfLDazaPpEba2Z9S8yUmwZIepFLGJe0Sb7A jcKo80K+K943r2KTRlf+lQKFCWCIve/xcvZA0ACu9SDx1NUcWIhvVX3ohQPWM2RU 0dZvozFKb6DvhHePkzHUID3hTYBkH6QGAI8kHJ8W7DkkavzNIfpzfFAmLrwqYDS0 Lk/1Jb0Ha7SEX8U1cVh7QL/OqUDG6PmNhFAjzcH36nEuzTm/BcgUIZRKksZWBw6x QCQKw2TBc0UAxCrkPVAFzjx+hbfHP1lxN3+6m/Z0PNxTXmOjM53f2Uf9m2/42GGh Fs/+sASNSh3ucb/nOpmdwc/c1FSgq38= -----END CERTIFICATE-----Generated at Sun Sep 27 02:56:35 2026 by rpki-client