$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/225225d2-7cec-371d-903e-5f1388405657.roa File: 225225d2-7cec-371d-903e-5f1388405657.roa (raw, json) Hash identifier: JVLyXJ5REH9c1gVA54z1SAy8DIy1PFFegzbw8lPh098= Subject key identifier: 8D:E4:65:0E:38:39:F0:87:A4:D6:6A:89:A7:76:F8:90:20:6B:22:19 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D241ABB8CC8D7EDC6BBC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/225225d2-7cec-371d-903e-5f1388405657.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:41:ab:b8:cc:8d:7e:dc:6b:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=dd4337d5-9cbc-45b6-8762-0e05f1727705 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:86:f2:74:d0:7d:ee:3d:af:95:2a:29:c9:20: f0:2f:bc:8a:01:0f:41:16:27:5e:f9:3f:18:af:93: 2e:56:d9:73:d2:95:72:93:85:4b:15:92:44:a5:12: 60:7d:6d:6a:7c:ff:3f:07:0d:90:8e:41:85:84:d3: 18:96:1c:7c:8a:89:1e:c4:7a:45:3d:1a:99:42:34: c5:a5:25:93:78:eb:65:78:e9:30:1b:91:d1:31:a4: 9b:4b:9b:d5:a7:57:ca:60:77:6e:b3:b8:e6:61:14: 6a:b3:36:4d:f8:e6:99:0b:53:53:22:c8:47:74:0e: 0f:bc:a9:3b:16:f1:b0:1a:a2:27:93:f7:bf:06:c7: 7b:72:0e:58:46:e7:0d:5d:d1:da:fd:f0:73:15:e1: 4a:2a:a8:04:fa:44:bd:a8:cc:a0:7a:e9:2d:52:83: d7:91:30:2e:7f:33:48:99:73:c9:5b:6c:a2:fb:fc: 90:44:5c:e6:a1:df:05:a0:cd:a4:38:e4:55:8b:94: 69:92:ee:5d:57:e2:4e:8c:dd:e8:aa:7f:73:4f:5c: a3:69:61:f2:4b:83:bf:c8:11:5f:c9:2b:fa:2f:15: 39:3d:10:23:12:1e:34:36:63:06:7c:35:31:ee:c7: 0e:0e:40:10:a7:81:f5:69:4e:6b:5b:d2:10:aa:8c: 6c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E4:65:0E:38:39:F0:87:A4:D6:6A:89:A7:76:F8:90:20:6B:22:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/225225d2-7cec-371d-903e-5f1388405657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:31:22:3c:7b:c3:f2:94:e4:ae:76:28:59:73:42:6b:0e:4d: 75:64:08:91:19:06:aa:4f:d9:a7:47:4d:e8:08:4e:9b:1b:85: a0:00:d4:52:07:55:a5:9a:32:62:df:a8:10:87:9c:35:a5:18: 68:8b:c2:4a:c3:08:ce:ce:bf:a6:31:c7:36:21:62:f7:42:00: 9f:e2:36:70:d8:d5:7f:ca:9b:50:ed:0d:42:4e:90:ff:19:76: a2:09:0f:04:f6:37:0d:16:a9:6e:66:34:0f:49:43:d6:a7:c6: 4f:13:f1:a0:c4:58:59:e6:3b:a0:0d:97:11:de:33:9c:48:4f: a1:f7:72:53:2c:fa:4a:81:78:b7:3f:ac:c9:43:e9:22:14:e9: 2f:fd:06:83:be:b1:b6:91:d3:91:77:68:75:bc:d1:2f:7c:3f: 6b:e6:34:57:5c:ef:77:37:87:dd:9f:e7:c4:4a:39:10:b3:58: 9a:53:21:c0:40:b1:4f:81:37:fc:38:d7:87:2a:6b:30:23:c0: 49:53:30:e5:9f:92:27:a2:09:a0:44:6c:03:33:0d:e4:4a:2e: 0a:a1:e7:59:29:3e:d9:02:25:3f:d0:e4:be:37:3a:44:01:00: 0e:c9:70:06:f6:74:5e:c8:3c:1b:a4:11:62:66:95:a5:8c:89: 29:72:61:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kGruMyNftxrvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZGQ0MzM3ZDUtOWNiYy00NWI2LTg3NjItMGUwNWYxNzI3NzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYbydNB97j2vlSopySDwL7yKAQ9BFide+T8Y r5MuVtlz0pVyk4VLFZJEpRJgfW1qfP8/Bw2QjkGFhNMYlhx8iokexHpFPRqZQjTF pSWTeOtleOkwG5HRMaSbS5vVp1fKYHdus7jmYRRqszZN+OaZC1NTIshHdA4PvKk7 FvGwGqInk/e/Bsd7cg5YRucNXdHa/fBzFeFKKqgE+kS9qMygeuktUoPXkTAufzNI mXPJW2yi+/yQRFzmod8FoM2kOORVi5Rpku5dV+JOjN3oqn9zT1yjaWHyS4O/yBFf ySv6LxU5PRAjEh40NmMGfDUx7scODkAQp4H1aU5rW9IQqoxsjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI3kZQ44OfCHpNZqiad2+JAgayIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjI1MjI1ZDItN2NlYy0z NzFkLTkwM2UtNWYxMzg4NDA1NjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIwxIjx7w/KU5K52KFlzQmsOTXVkCJEZBqpP2adHTegITpsbhaAA1FIH VaWaMmLfqBCHnDWlGGiLwkrDCM7Ov6YxxzYhYvdCAJ/iNnDY1X/Km1DtDUJOkP8Z dqIJDwT2Nw0WqW5mNA9JQ9anxk8T8aDEWFnmO6ANlxHeM5xIT6H3clMs+kqBeLc/ rMlD6SIU6S/9BoO+sbaR05F3aHW80S98P2vmNFdc73c3h92f58RKORCzWJpTIcBA sU+BN/w414cqazAjwElTMOWfkieiCaBEbAMzDeRKLgqh51kpPtkCJT/Q5L43OkQB AA7JcAb2dF7IPBukEWJmlaWMiSlyYeM= -----END CERTIFICATE-----Generated at Wed Nov 5 03:55:51 2025 by rpki-client