$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3dd5724b-8a94-3069-a8b7-f6f201590387.roa File: 3dd5724b-8a94-3069-a8b7-f6f201590387.roa (raw, json) Hash identifier: +foLEl9B1gbqhI6lDYjqf0P7hdGIHUrcDw3Z4kDpHdg= Subject key identifier: 71:8B:F5:EE:01:B3:12:3A:E4:86:BF:A8:31:EC:21:D3:1B:2D:BA:CA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D240163AD998DA042A3A80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3dd5724b-8a94-3069-a8b7-f6f201590387.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:40:16:3a:d9:98:da:04:2a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=545ad905-d862-4b4a-a04a-1ee08bda5b7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:55:44:5d:03:75:9f:80:b5:dc:26:81:ff:1a: 4f:3f:c8:94:2a:7d:94:22:dd:bc:a9:27:b6:d7:cb: 18:f9:9e:66:d2:4d:ea:93:2f:77:93:ec:b4:60:b3: 05:29:20:5a:4b:3b:a6:f1:31:e0:70:bb:1b:fe:53: c3:7b:a1:2c:6f:f1:83:2c:78:d6:e7:e1:73:05:23: 6a:9d:6c:c7:32:b9:6f:7e:15:3c:52:0c:c0:fc:23: 87:be:6f:c3:26:c0:17:0d:43:05:d5:43:d8:c6:d4: fc:f5:91:65:07:6f:f1:56:73:fe:d9:9c:34:2e:5f: 0e:b1:c4:7c:0e:86:21:76:88:bb:f7:45:d0:46:24: c9:94:5d:ae:0a:5a:b3:a9:14:37:6d:aa:77:4d:71: 42:4e:da:a4:b0:08:89:c4:31:00:39:4d:96:61:1d: 18:ad:f5:77:dc:69:a9:8a:37:60:ed:b7:6d:75:e5: 5e:b9:55:76:0d:41:58:29:c5:41:e4:79:66:a9:d5: 10:67:47:9a:1a:c3:b8:0b:6d:1b:d5:64:76:c7:0b: 6a:6a:21:d5:8c:e6:88:e2:f7:23:30:36:46:c6:7f: 67:b0:9c:16:31:97:0c:f5:42:f6:bd:27:cc:93:3c: fa:9a:92:ab:16:9e:07:03:de:58:72:c9:39:9a:bb: 39:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8B:F5:EE:01:B3:12:3A:E4:86:BF:A8:31:EC:21:D3:1B:2D:BA:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/3dd5724b-8a94-3069-a8b7-f6f201590387.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e8:c5:af:00:f2:c2:c5:07:32:98:87:8f:2e:c8:6b:87:8a: 4c:82:de:b0:5c:49:c9:a8:76:c0:54:2b:5f:e8:d0:aa:e6:52: cb:99:7d:f8:12:da:c0:fc:b1:aa:08:b8:74:26:cf:01:4e:1e: c5:23:07:7c:2d:8c:9a:19:2c:84:ed:9f:f2:c0:99:cb:79:28: 6c:83:64:6f:cf:45:96:f0:0d:f3:28:15:bb:0d:53:04:d2:a6: 2e:6f:92:c2:25:e8:a6:da:70:56:fd:e2:89:9b:52:9b:81:4f: 34:0e:55:ed:58:cc:fe:2d:ed:df:99:49:3f:5e:c6:83:3c:89: ce:3b:74:e2:20:54:72:8d:e2:9b:94:9c:09:76:b2:36:63:1b: 2f:f6:6e:7d:fd:9f:b3:e9:46:f1:c2:4a:d5:bc:ab:28:e6:10: 8c:fe:33:35:82:05:de:56:7e:2c:2c:17:1f:77:68:fe:79:f0: c9:e1:c1:c6:d8:a0:3b:0c:01:eb:c4:01:fa:fd:d6:1f:5c:52: 23:1c:50:64:f7:43:b2:b0:2a:2d:15:48:45:7d:d0:39:9a:b8: 7f:30:aa:89:84:4a:2a:c9:82:89:0c:3c:49:be:89:0a:7e:42: df:09:e4:3c:4d:80:0c:8b:e9:e7:7c:62:f2:fb:95:d9:c3:e9: 3e:f2:0f:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kAWOtmY2gQqOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NTQ1YWQ5MDUtZDg2Mi00YjRhLWEwNGEtMWVlMDhiZGE1YjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVVEXQN1n4C13CaB/xpPP8iUKn2UIt28qSe2 18sY+Z5m0k3qky93k+y0YLMFKSBaSzum8THgcLsb/lPDe6Esb/GDLHjW5+FzBSNq nWzHMrlvfhU8UgzA/COHvm/DJsAXDUMF1UPYxtT89ZFlB2/xVnP+2Zw0Ll8OscR8 DoYhdoi790XQRiTJlF2uClqzqRQ3bap3TXFCTtqksAiJxDEAOU2WYR0YrfV33Gmp ijdg7bdtdeVeuVV2DUFYKcVB5HlmqdUQZ0eaGsO4C20b1WR2xwtqaiHVjOaI4vcj MDZGxn9nsJwWMZcM9UL2vSfMkzz6mpKrFp4HA95Ycsk5mrs5+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGL9e4BsxI65Ia/qDHsIdMbLbrKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvM2RkNTcyNGItOGE5NC0z MDY5LWE4YjctZjZmMjAxNTkwMzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3oxa8A8sLFBzKYh48uyGuHikyC3rBcScmodsBUK1/o0KrmUsuZffgS 2sD8saoIuHQmzwFOHsUjB3wtjJoZLITtn/LAmct5KGyDZG/PRZbwDfMoFbsNUwTS pi5vksIl6KbacFb94ombUpuBTzQOVe1YzP4t7d+ZST9exoM8ic47dOIgVHKN4puU nAl2sjZjGy/2bn39n7PpRvHCStW8qyjmEIz+MzWCBd5WfiwsFx93aP558MnhwcbY oDsMAevEAfr91h9cUiMcUGT3Q7KwKi0VSEV90DmauH8wqomESirJgokMPEm+iQp+ Qt8J5DxNgAyL6ed8YvL7ldnD6T7yD+Y= -----END CERTIFICATE-----Generated at Tue Nov 4 21:26:33 2025 by rpki-client