$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7fa8dbec-6553-32e3-bb65-78cd360f890d.roa File: 7fa8dbec-6553-32e3-bb65-78cd360f890d.roa (raw, json) Hash identifier: j1LkYIuflR4xCfKooC4uZojxxoz5KKZZj9Yvu152QMU= Subject key identifier: FE:4D:BF:7F:E4:52:C2:68:8C:FD:3E:04:6F:BB:A9:C3:67:41:5F:6A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26D2B0B3D25571A8D3F80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7fa8dbec-6553-32e3-bb65-78cd360f890d.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6d:2b:0b:3d:25:57:1a:8d:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=83658de0-67b1-4fbd-9b9f-5cd6faec3fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c1:81:9e:ba:60:7f:79:9b:36:53:3a:d8:30: 33:54:e9:47:6f:a2:94:1a:c4:0b:d0:90:7b:f9:a9: 20:9a:09:b2:90:6e:10:17:61:bc:c8:8d:cc:34:a0: 16:a0:97:51:d6:29:f3:d3:0c:bd:05:12:a1:8e:12: 6a:cc:8a:c0:14:4a:94:96:33:7a:e5:02:26:4a:9d: 33:e1:96:79:3f:24:ad:48:97:95:4a:77:08:f8:05: 3f:94:92:19:72:55:de:ef:aa:73:14:a4:66:ec:b3: d0:97:9f:eb:cb:31:f0:11:3a:e7:ec:7c:92:56:3e: f7:19:9b:da:43:eb:27:36:52:c8:8b:14:47:0b:1b: 56:1e:82:64:1d:12:08:ee:cc:cf:5c:58:a2:2b:0f: af:3a:eb:77:a5:33:55:5b:05:47:9c:40:4d:6f:ec: b3:74:91:23:59:20:97:de:13:4d:c9:b2:67:19:2a: 54:c1:49:a0:e0:b2:b2:2e:b4:03:b9:94:ce:5d:0d: ca:b2:81:c7:6d:60:fb:1a:21:0d:07:cc:ec:1b:3c: 3b:30:87:72:80:bd:d8:d1:c7:14:1a:a2:1d:d0:a8: db:e4:b4:cb:1a:4f:8e:ba:d4:34:dd:3a:95:d9:9a: a5:d9:19:7b:b3:c3:04:c8:b5:05:23:c1:96:85:cb: f3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4D:BF:7F:E4:52:C2:68:8C:FD:3E:04:6F:BB:A9:C3:67:41:5F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7fa8dbec-6553-32e3-bb65-78cd360f890d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:50:30:fc:1b:2d:50:2f:3b:26:fd:e0:e9:a4:5f:6b:17:37: e1:cc:e7:85:d4:47:1f:3b:6b:18:c6:a4:20:09:6f:44:8d:9f: 77:ba:df:19:e8:f5:e3:f4:36:1c:37:00:9c:78:c9:74:ed:0e: b0:1a:5a:9a:9c:dd:30:5d:14:f9:13:d2:8e:15:19:4d:11:85: 8c:3a:be:85:d2:51:5b:7d:04:57:90:81:32:c5:a0:b5:81:90: f3:0d:43:3b:7a:3b:8d:93:0b:bf:92:a3:40:f4:99:c0:e7:8b: 9d:ed:d9:95:5c:24:44:cc:dc:43:ee:4f:95:25:16:62:6d:93: fd:80:f6:88:6b:e7:81:8b:18:26:56:ae:c3:7b:79:7b:24:34: a6:3a:06:92:1a:9b:e6:0f:95:c4:ff:c8:1f:dc:80:89:6c:a3: 1e:34:f9:f6:6d:36:b7:ac:c3:0e:34:05:a7:c8:27:48:7b:e0: a6:a9:db:01:eb:b0:cb:2f:75:37:0e:a0:3a:ed:c3:d4:74:dc: 7d:0a:dd:82:05:b6:0e:d3:a8:0c:5a:6d:e3:20:07:d4:f9:7f: b3:e4:54:a7:29:5d:0d:0c:28:5e:d9:3c:40:fe:94:77:ad:aa: 8b:ba:f2:25:7c:2c:b8:84:f7:f5:ca:56:f9:71:d4:32:f6:55: 5a:01:ac:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0m0rCz0lVxqNP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ODM2NThkZTAtNjdiMS00ZmJkLTliOWYtNWNkNmZhZWMzZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8GBnrpgf3mbNlM62DAzVOlHb6KUGsQL0JB7 +akgmgmykG4QF2G8yI3MNKAWoJdR1inz0wy9BRKhjhJqzIrAFEqUljN65QImSp0z 4ZZ5PyStSJeVSncI+AU/lJIZclXe76pzFKRm7LPQl5/ryzHwETrn7HySVj73GZva Q+snNlLIixRHCxtWHoJkHRII7szPXFiiKw+vOut3pTNVWwVHnEBNb+yzdJEjWSCX 3hNNybJnGSpUwUmg4LKyLrQDuZTOXQ3KsoHHbWD7GiENB8zsGzw7MIdygL3Y0ccU GqId0Kjb5LTLGk+OutQ03TqV2Zql2Rl7s8MEyLUFI8GWhcvzdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5Nv3/kUsJojP0+BG+7qcNnQV9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2ZhOGRiZWMtNjU1My0z MmUzLWJiNjUtNzhjZDM2MGY4OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhQMPwbLVAvOyb94OmkX2sXN+HM54XURx87axjGpCAJb0SNn3e63xno 9eP0Nhw3AJx4yXTtDrAaWpqc3TBdFPkT0o4VGU0RhYw6voXSUVt9BFeQgTLFoLWB kPMNQzt6O42TC7+So0D0mcDni53t2ZVcJETM3EPuT5UlFmJtk/2A9ohr54GLGCZW rsN7eXskNKY6BpIam+YPlcT/yB/cgIlsox40+fZtNresww40BafIJ0h74Kap2wHr sMsvdTcOoDrtw9R03H0K3YIFtg7TqAxabeMgB9T5f7PkVKcpXQ0MKF7ZPED+lHet qou68iV8LLiE9/XKVvlx1DL2VVoBrHE= -----END CERTIFICATE-----Generated at Wed Nov 5 07:34:52 2025 by rpki-client