$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa File: 5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa (raw, json) Hash identifier: qxbsZQo7DFVZplp1VcEGbHvmDVYetlUDbDsoeuoBbhQ= Subject key identifier: A9:1B:0B:FB:00:18:CC:E2:67:0D:91:42:3C:DA:6C:DC:40:74:01:D7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26EB2704A9358D2C9B600 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6e:b2:70:4a:93:58:d2:c9:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=b9da37a0-1ee9-4178-9d8b-16ef94d62466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:0f:bc:80:60:c9:75:7e:76:29:62:9b:a6: b6:ad:bc:04:d5:82:f5:df:f3:6d:3f:d6:58:3f:af: be:92:91:58:5b:03:ea:2a:c2:c5:49:23:98:fd:9e: 8d:8a:0c:a4:40:62:73:4b:b0:a3:5c:b0:14:4f:08: 26:ac:38:32:14:16:36:69:1f:42:19:ea:d1:16:a2: 73:82:76:40:29:0c:ec:5b:d9:ed:aa:ba:8b:43:58: cb:88:b6:7d:2f:dd:c4:86:51:6a:65:a0:cf:08:da: 02:53:17:01:f7:63:f5:3b:d9:25:ab:0a:e6:bf:f0: 26:74:e2:76:40:ae:23:82:4d:99:02:eb:1d:72:dd: 0d:0f:cf:a7:72:b4:e1:5d:66:0f:d9:86:e5:8c:60: 5f:e4:a4:67:38:b2:1d:5f:36:96:10:87:d6:de:74: af:b7:6b:c1:c0:31:18:8b:5b:ea:77:b1:fd:44:f9: c8:55:8c:dc:2f:7a:6f:c7:3c:36:62:17:df:02:dd: ee:58:89:69:e0:eb:b8:10:29:16:ec:fb:0e:df:02: f0:ac:c1:b8:13:14:7a:09:0d:74:dd:22:b0:46:58: 74:a7:0a:db:3c:4e:3b:44:14:70:0d:81:e2:a6:4e: 3f:a4:5e:72:c0:7e:87:5b:85:8a:79:44:41:fe:2a: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1B:0B:FB:00:18:CC:E2:67:0D:91:42:3C:DA:6C:DC:40:74:01:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5c949233-30ae-39e5-81c2-6eb04c02cb9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:e8:c2:d6:90:3f:9f:54:6d:a9:dd:c1:9e:d4:6d:e5:b2:3b: 90:d4:11:f2:dc:f1:51:3b:af:64:6e:3c:42:de:8f:60:c9:b2: 80:f1:8d:c0:1b:c7:48:aa:6b:9f:f1:1b:d0:f2:9e:d5:a1:09: 21:73:5c:ef:13:cc:57:a6:55:67:5b:95:b8:1c:1b:0a:1c:9e: 20:f8:5f:16:b6:db:12:b9:e1:95:ca:88:ab:f4:b8:6a:f9:ec: a8:a0:4e:6d:b5:bf:c7:06:48:4b:d7:7f:12:04:5d:06:ae:40: 42:3e:b6:a1:c2:85:67:99:a9:2b:74:b0:d8:1c:f9:9c:31:62: 7c:da:ff:36:81:6b:c7:b5:19:bd:36:bd:55:2d:05:5e:9a:7c: c1:9a:e8:6f:3e:44:7d:b9:7d:6c:d6:4d:74:5a:de:fc:ed:96: 58:b3:78:a9:5c:8a:b8:16:cf:a1:3a:bc:42:01:ae:fb:7d:6d: e9:bf:2c:ef:60:d8:93:d6:74:6b:d4:e5:6e:69:71:f4:65:f1: 15:98:c6:45:35:99:a2:9c:29:75:4f:34:36:a6:c3:c6:04:0b: dc:94:97:34:ff:7c:dc:a0:ae:9e:c1:85:76:f6:76:98:2f:90: bb:49:50:c2:20:c7:21:fc:28:47:4e:c2:80:17:e1:33:31:c4: d6:c0:14:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m6ycEqTWNLJtgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YjlkYTM3YTAtMWVlOS00MTc4LTlkOGItMTZlZjk0ZDYyNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolcPvIBgyXV+dilim6a2rbwE1YL13/NtP9ZY P6++kpFYWwPqKsLFSSOY/Z6NigykQGJzS7CjXLAUTwgmrDgyFBY2aR9CGerRFqJz gnZAKQzsW9ntqrqLQ1jLiLZ9L93EhlFqZaDPCNoCUxcB92P1O9klqwrmv/AmdOJ2 QK4jgk2ZAusdct0ND8+ncrThXWYP2YbljGBf5KRnOLIdXzaWEIfW3nSvt2vBwDEY i1vqd7H9RPnIVYzcL3pvxzw2YhffAt3uWIlp4Ou4ECkW7PsO3wLwrMG4ExR6CQ10 3SKwRlh0pwrbPE47RBRwDYHipk4/pF5ywH6HW4WKeURB/iqVHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkbC/sAGMziZw2RQjzabNxAdAHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWM5NDkyMzMtMzBhZS0z OWU1LTgxYzItNmViMDRjMDJjYjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrowtaQP59UbandwZ7UbeWyO5DUEfLc8VE7r2RuPELej2DJsoDxjcAb x0iqa5/xG9DyntWhCSFzXO8TzFemVWdblbgcGwocniD4Xxa22xK54ZXKiKv0uGr5 7KigTm21v8cGSEvXfxIEXQauQEI+tqHChWeZqSt0sNgc+ZwxYnza/zaBa8e1Gb02 vVUtBV6afMGa6G8+RH25fWzWTXRa3vztllizeKlcirgWz6E6vEIBrvt9bem/LO9g 2JPWdGvU5W5pcfRl8RWYxkU1maKcKXVPNDamw8YEC9yUlzT/fNygrp7BhXb2dpgv kLtJUMIgxyH8KEdOwoAX4TMxxNbAFJE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:15:34 2025 by rpki-client