$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa File: 2649ead5-2330-3ec5-a70e-0603b6659232.roa (raw, json) Hash identifier: uLeNY9HeMvexM3C+HIWFE5aAowJPiQ8G2cXIdkvTTXs= Subject key identifier: 98:7E:26:65:EB:91:EE:FD:7A:65:A8:73:03:46:5A:47:67:1C:56:80 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D23E82659524AE2198B180 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:3e:82:65:95:24:ae:21:98:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=ac9f6c70-2983-4b46-88ea-4988d988d808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:54:0c:85:b4:71:32:fc:d1:eb:88:17:0b: a0:59:92:22:d8:83:10:12:4d:96:73:45:b6:b8:fb: 3c:78:e0:67:6f:29:1e:fb:4c:9b:92:29:d1:2d:3e: 8c:42:78:1d:e7:b5:57:11:4f:7c:c1:90:51:92:b4: 6b:83:68:1c:4d:6c:40:34:05:1c:85:07:50:01:f1: c8:fa:ca:7a:66:3d:bb:98:ac:e5:a5:22:da:3a:5a: e2:65:e9:99:19:58:08:89:d5:35:4d:09:f7:62:bc: 53:a8:80:c9:6a:23:f0:d2:b9:8d:2e:01:02:80:29: 0d:62:b7:98:c6:7e:13:a0:49:a3:b9:87:74:70:f6: d1:79:09:b6:b5:57:f5:7c:56:d2:10:e0:79:3e:a7: 98:b8:b0:99:5e:8b:b1:17:7f:7c:0a:18:63:99:59: ed:8b:fe:68:0e:07:5c:fa:b5:24:65:8e:d2:6e:62: 6e:3a:4f:ab:8a:80:fb:88:8d:32:24:57:b3:5f:f8: 7e:0d:7c:86:d1:e8:9b:9b:88:94:f7:de:a5:17:74: 5c:70:b5:dc:a7:c8:be:4d:f5:f9:44:40:5a:e9:9c: a8:33:17:7f:fb:2f:54:c6:bb:12:83:49:8c:ae:dd: d9:65:59:1b:4e:02:15:00:b3:b3:9a:4b:6b:f1:95: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7E:26:65:EB:91:EE:FD:7A:65:A8:73:03:46:5A:47:67:1C:56:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2649ead5-2330-3ec5-a70e-0603b6659232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:1c:5a:c9:b8:a7:81:28:fe:37:6c:92:e8:a0:0e:6d:c7:37: 37:c7:a9:bc:eb:1f:eb:4d:fd:3a:cc:6e:21:b7:69:68:40:4a: 32:86:c2:d9:d6:f0:19:78:f5:40:13:62:a6:9c:89:45:ef:e6: dc:63:d4:dd:52:f0:33:ef:2d:95:c2:12:b5:9c:b8:9f:4c:0d: 17:6c:dd:df:aa:74:1f:38:f5:a3:64:7f:32:45:14:b3:d5:2d: 5f:e9:96:96:71:44:40:06:8b:c9:11:e5:bf:8f:cb:88:31:f8: 97:08:f8:02:7a:5c:07:14:9f:04:46:fb:ac:ec:22:c8:57:d2: 06:28:d7:c7:44:5b:9b:18:b7:27:db:36:dd:71:f9:bd:cf:88: 01:a6:34:59:e1:28:03:5d:5b:b3:c1:ae:5d:4a:30:ad:b1:fe: f5:81:ec:78:00:ef:5c:0e:7d:81:cf:13:f2:4d:22:fa:95:f8: e5:f0:3a:c3:2a:48:b4:4b:ba:a8:bf:86:77:91:51:be:b6:c6: ee:65:03:6e:04:be:3b:bd:ac:5e:ef:1b:89:44:b9:e2:86:7e: d5:74:43:72:4d:1c:d1:de:fd:73:5f:ed:6a:c6:40:ff:52:bc: 22:7b:84:ba:20:50:f6:75:f8:44:90:5f:2e:76:f2:1d:65:f4: 26:13:99:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0j6CZZUkriGYsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YWM5ZjZjNzAtMjk4My00YjQ2LTg4ZWEtNDk4OGQ5ODhkODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDxUDIW0cTL80euIFwugWZIi2IMQEk2Wc0W2 uPs8eOBnbyke+0ybkinRLT6MQngd57VXEU98wZBRkrRrg2gcTWxANAUchQdQAfHI +sp6Zj27mKzlpSLaOlriZemZGVgIidU1TQn3YrxTqIDJaiPw0rmNLgECgCkNYreY xn4ToEmjuYd0cPbReQm2tVf1fFbSEOB5PqeYuLCZXouxF398ChhjmVnti/5oDgdc +rUkZY7SbmJuOk+rioD7iI0yJFezX/h+DXyG0eibm4iU996lF3RccLXcp8i+TfX5 REBa6ZyoMxd/+y9UxrsSg0mMrt3ZZVkbTgIVALOzmktr8ZUUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJh+JmXrke79emWocwNGWkdnHFaAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMjY0OWVhZDUtMjMzMC0z ZWM1LWE3MGUtMDYwM2I2NjU5MjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYcWsm4p4Eo/jdskuigDm3HNzfHqbzrH+tN/TrMbiG3aWhASjKGwtnW 8Bl49UATYqaciUXv5txj1N1S8DPvLZXCErWcuJ9MDRds3d+qdB849aNkfzJFFLPV LV/plpZxREAGi8kR5b+Py4gx+JcI+AJ6XAcUnwRG+6zsIshX0gYo18dEW5sYtyfb Nt1x+b3PiAGmNFnhKANdW7PBrl1KMK2x/vWB7HgA71wOfYHPE/JNIvqV+OXwOsMq SLRLuqi/hneRUb62xu5lA24Evju9rF7vG4lEueKGftV0Q3JNHNHe/XNf7WrGQP9S vCJ7hLogUPZ1+ESQXy528h1l9CYTmVs= -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:38 2025 by rpki-client