$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa File: 42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa (raw, json) Hash identifier: KWbPGg4tfBtnBHH0+LQ+BQ7CmD98dFceAv3c/QBddL0= Subject key identifier: C7:1E:04:FC:3E:87:AB:C4:7F:BF:AF:DF:D8:F1:16:CF:94:84:45:3C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26D661DC39D6F11812940 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6d:66:1d:c3:9d:6f:11:81:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=3789a5c8-5201-4697-b2f4-ae054af8961b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cc:2a:50:8a:78:26:c4:62:5a:08:f9:9b:01: 79:c6:d9:81:df:19:58:25:b0:96:07:6b:28:05:57: 1f:73:89:37:d3:9a:a7:59:0d:b6:ef:7d:08:1c:49: c4:e6:41:f5:a7:b9:e3:05:96:fd:b0:53:7b:54:46: 23:01:b2:51:85:35:f2:54:75:c4:c2:80:0f:89:8e: 65:5a:28:a0:6b:02:5d:ab:66:3a:23:17:a4:4a:e0: 87:93:84:6a:5d:c1:75:e1:0b:f9:8f:00:d1:70:f5: cd:5a:63:4b:96:a0:4a:71:1e:72:ef:f8:27:af:6d: 2d:35:37:8f:9d:e7:7b:90:82:c1:db:95:48:69:aa: 67:4f:6c:a2:84:06:9b:59:91:57:73:d4:11:15:d1: 6d:b1:d1:a5:97:d8:37:80:83:81:29:15:4e:9f:fd: 7a:9c:08:03:9a:96:e1:27:de:19:dd:29:67:98:43: 93:c8:9c:29:98:5d:77:73:60:88:4b:b4:ef:ce:df: 6c:07:89:40:d6:48:df:e7:30:ab:97:21:e5:e3:17: e0:ee:de:3e:a2:bd:af:09:84:1c:3d:d3:64:55:66: f4:35:d5:cd:c1:4d:0c:b9:3a:b8:64:2e:01:fc:6f: 24:c6:b9:03:e5:29:0a:c5:07:f3:2b:07:b2:5c:0b: 36:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:1E:04:FC:3E:87:AB:C4:7F:BF:AF:DF:D8:F1:16:CF:94:84:45:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:00:09:7c:56:53:84:95:f7:ba:25:ce:48:12:ee:c0:8e:14: 7e:56:72:3b:d8:ab:01:88:a6:78:e9:4a:ad:fb:6c:ab:87:f4: 02:7b:19:31:c7:c9:25:61:90:47:f0:d5:14:67:92:c1:f3:56: 06:71:6f:b5:bb:bd:c2:5a:55:25:de:2a:5a:33:72:17:a5:0b: c1:9c:73:01:fc:26:e0:52:c3:57:cb:63:61:71:d3:f8:b6:21: 6b:45:53:29:f8:79:de:c0:e2:b2:c8:59:32:62:b5:2f:02:2c: d9:d5:ee:f1:f5:29:20:f9:48:bd:bc:3a:69:33:be:c4:d5:4b: 90:fb:2f:0e:56:d5:5b:70:2c:07:9b:27:99:23:be:f7:3d:13: 86:b6:81:ee:29:08:44:56:96:fe:ad:c5:fd:9f:57:a0:51:ac: ee:e8:7a:d6:c0:d0:d3:3e:9d:40:8a:89:7d:0c:1c:2a:98:ff: 63:8a:6a:b1:9d:cb:2d:b5:e0:c4:10:0f:8f:5c:b2:e3:ba:9d: 4a:c2:b3:68:a5:dc:5a:5c:8b:bd:8d:bc:e6:34:02:9f:45:71: 53:21:ae:dd:da:14:0b:64:06:47:86:7d:c1:71:32:8a:1e:03: 36:34:9a:0d:7c:27:f0:0e:5c:1e:c1:18:a1:42:54:48:26:a8: bb:fc:6a:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m1mHcOdbxGBKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk Mzc4OWE1YzgtNTIwMS00Njk3LWIyZjQtYWUwNTRhZjg5NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4swqUIp4JsRiWgj5mwF5xtmB3xlYJbCWB2so BVcfc4k305qnWQ22730IHEnE5kH1p7njBZb9sFN7VEYjAbJRhTXyVHXEwoAPiY5l WiigawJdq2Y6IxekSuCHk4RqXcF14Qv5jwDRcPXNWmNLlqBKcR5y7/gnr20tNTeP ned7kILB25VIaapnT2yihAabWZFXc9QRFdFtsdGll9g3gIOBKRVOn/16nAgDmpbh J94Z3SlnmEOTyJwpmF13c2CIS7Tvzt9sB4lA1kjf5zCrlyHl4xfg7t4+or2vCYQc PdNkVWb0NdXNwU0MuTq4ZC4B/G8kxrkD5SkKxQfzKweyXAs2YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMceBPw+h6vEf7+v39jxFs+UhEU8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDJkNjQzYjYtN2ZkNS0z OTI5LWEzOGQtMzA3ZjNiNmZkODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUACXxWU4SV97olzkgS7sCOFH5WcjvYqwGIpnjpSq37bKuH9AJ7GTHH ySVhkEfw1RRnksHzVgZxb7W7vcJaVSXeKlozchelC8GccwH8JuBSw1fLY2Fx0/i2 IWtFUyn4ed7A4rLIWTJitS8CLNnV7vH1KSD5SL28OmkzvsTVS5D7Lw5W1VtwLAeb J5kjvvc9E4a2ge4pCERWlv6txf2fV6BRrO7oetbA0NM+nUCKiX0MHCqY/2OKarGd yy214MQQD49csuO6nUrCs2il3Fpci72NvOY0Ap9FcVMhrt3aFAtkBkeGfcFxMooe AzY0mg18J/AOXB7BGKFCVEgmqLv8ajA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:57 2025 by rpki-client