$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/822c17f4-8fbb-381c-aaaa-13fcf6d7f082.roa File: 822c17f4-8fbb-381c-aaaa-13fcf6d7f082.roa (raw, json) Hash identifier: KsneUNXhcsO8/o/d4QD+WSWLGjfk1fQPJpm506jlYI4= Subject key identifier: 4B:48:2E:A8:CF:95:CF:E8:42:6B:E5:D6:7F:07:75:59:F4:F7:2C:87 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D24084D0ACDC9CD2B07C40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/822c17f4-8fbb-381c-aaaa-13fcf6d7f082.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:40:84:d0:ac:dc:9c:d2:b0:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=77aa2c1f-9e0a-4338-9560-6cbd099c2be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:11:fb:22:ec:e9:83:c8:03:8b:12:c5:29: e7:ce:84:92:68:44:92:3e:7f:bb:18:91:5c:16:9d: 6d:b3:9d:cd:d6:67:8f:e9:b4:6b:0a:c8:d5:46:8c: ea:d9:9d:9b:12:fc:7c:9b:4c:3c:e8:50:ad:a9:42: f0:34:4c:52:cb:4e:04:ec:7a:08:ce:f5:3c:eb:7a: c0:28:40:57:c5:78:45:19:2c:ea:2e:1c:f1:2c:9a: b7:76:a4:18:8b:11:a2:26:a4:1d:58:54:14:0a:dd: 3d:7b:be:11:ff:c3:d1:d1:30:5d:af:98:73:5f:49: 51:94:3d:99:da:30:bb:a1:1b:c8:46:63:da:c0:12: 0f:72:b8:83:4c:1f:c3:54:50:42:2b:a8:c9:c8:86: 5a:a8:3d:86:c0:15:52:e4:68:54:ea:b5:0f:6a:38: 61:4a:5b:97:fe:11:a6:8f:28:9b:21:00:8c:1d:ad: 9f:99:58:ff:a8:43:c8:bc:6e:1c:19:48:61:b6:2a: 8f:d5:a8:47:67:a5:e9:46:fc:15:8b:79:71:a0:0d: 3d:6a:b8:48:1c:10:0c:f8:a6:bf:2a:14:f3:90:cc: 62:52:58:f7:dd:da:ff:83:7c:19:0e:24:f9:c6:45: ca:08:fb:a7:aa:72:99:e7:12:61:f1:0f:40:19:3e: c2:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:48:2E:A8:CF:95:CF:E8:42:6B:E5:D6:7F:07:75:59:F4:F7:2C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/822c17f4-8fbb-381c-aaaa-13fcf6d7f082.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4e:57:08:60:86:c9:e1:4b:bf:2f:66:f0:d2:21:41:da:de: 76:1b:4f:5e:de:be:a4:b2:46:6a:ce:cd:c0:57:45:eb:ae:d8: d2:62:f6:16:1a:c2:87:6b:ec:76:c0:42:0f:08:ad:99:a6:a1: 10:4d:e0:e3:51:4b:87:8a:55:3a:56:95:7f:1b:31:f9:a1:5d: b2:a5:33:9c:ad:6e:9f:2b:4e:63:eb:04:dd:1c:73:06:70:cf: af:c6:25:5a:6d:2b:03:c1:c7:13:af:d5:a1:c3:db:8e:2b:1b: be:40:d9:48:de:37:5e:3e:7f:0a:cd:0e:0c:91:87:02:19:b8: fc:15:9d:ec:5b:f8:31:3f:ef:19:e7:2c:27:f0:7e:9e:2a:93: 7a:67:72:cb:cf:cc:50:bd:22:9f:ca:f0:08:62:37:01:2a:fe: eb:f4:7f:05:3e:7b:c5:37:aa:cd:48:45:dd:54:5f:20:4d:02: 52:20:6f:e3:c4:f6:41:85:2c:24:fa:9b:96:1a:26:23:1c:f5: d8:0f:82:92:ee:63:2c:c3:ac:b7:d8:28:06:e8:70:4e:f6:9f: 95:14:ba:d7:31:0c:22:c0:b8:90:4b:4f:79:f6:e9:8b:82:e0: 14:ae:5c:1c:44:62:74:53:6f:ad:2f:e9:7a:3c:20:14:66:1c: 0b:98:0d:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kCE0KzcnNKwfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NzdhYTJjMWYtOWUwYS00MzM4LTk1NjAtNmNiZDA5OWMyYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySAR+yLs6YPIA4sSxSnnzoSSaESSPn+7GJFc Fp1ts53N1meP6bRrCsjVRozq2Z2bEvx8m0w86FCtqULwNExSy04E7HoIzvU863rA KEBXxXhFGSzqLhzxLJq3dqQYixGiJqQdWFQUCt09e74R/8PR0TBdr5hzX0lRlD2Z 2jC7oRvIRmPawBIPcriDTB/DVFBCK6jJyIZaqD2GwBVS5GhU6rUPajhhSluX/hGm jyibIQCMHa2fmVj/qEPIvG4cGUhhtiqP1ahHZ6XpRvwVi3lxoA09arhIHBAM+Ka/ KhTzkMxiUlj33dr/g3wZDiT5xkXKCPunqnKZ5xJh8Q9AGT7CnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtILqjPlc/oQmvl1n8HdVn09yyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODIyYzE3ZjQtOGZiYi0z ODFjLWFhYWEtMTNmY2Y2ZDdmMDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtOVwhghsnhS78vZvDSIUHa3nYbT17evqSyRmrOzcBXReuu2NJi9hYa wodr7HbAQg8IrZmmoRBN4ONRS4eKVTpWlX8bMfmhXbKlM5ytbp8rTmPrBN0ccwZw z6/GJVptKwPBxxOv1aHD244rG75A2UjeN14+fwrNDgyRhwIZuPwVnexb+DE/7xnn LCfwfp4qk3pncsvPzFC9Ip/K8AhiNwEq/uv0fwU+e8U3qs1IRd1UXyBNAlIgb+PE 9kGFLCT6m5YaJiMc9dgPgpLuYyzDrLfYKAbocE72n5UUutcxDCLAuJBLT3n26YuC 4BSuXBxEYnRTb60v6Xo8IBRmHAuYDe4= -----END CERTIFICATE-----Generated at Tue Nov 4 21:27:03 2025 by rpki-client