$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88f0b0ed-660e-3ff6-9849-8294068f6c62.roa File: 88f0b0ed-660e-3ff6-9849-8294068f6c62.roa (raw, json) Hash identifier: N/Zpc7922NT/PfZs+GeYIx9SKbvv5tBARVG36EDGEbc= Subject key identifier: 9C:FD:D3:E8:18:55:35:9C:A4:04:D7:70:82:7C:CC:6C:DA:87:2E:5B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D23DEEE619D8FA003E8130 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88f0b0ed-660e-3ff6-9849-8294068f6c62.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:3d:ee:e6:19:d8:fa:00:3e:81:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=3c65f88f-1cbf-4687-b224-16ee321e7485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:77:63:be:e3:10:ba:b9:62:47:7b:f0:00:75: e3:36:11:a8:36:e9:3b:60:a6:b4:8a:d2:57:50:48: 31:ee:36:a3:c2:6e:8f:58:b2:fd:89:31:90:22:9d: 54:e7:a8:59:f1:b4:f8:ef:9a:97:16:f5:35:6a:fc: 0e:67:fb:5a:77:db:6e:67:d7:36:9c:67:dc:20:7d: 8a:0b:bf:e5:98:83:df:df:91:46:d3:c4:a3:64:a7: 89:88:ab:8f:1e:0c:04:e7:f6:6e:56:9d:d4:15:99: e5:22:8a:e2:72:bd:d3:e5:13:28:34:31:6d:6e:db: f0:45:90:e7:58:81:7f:f2:c1:8d:3b:93:91:c9:8d: ff:a3:87:f1:4a:99:c1:1e:de:f2:a9:aa:f7:0e:42: ef:c3:07:bb:98:fc:6a:76:6c:f7:a6:f6:db:52:2d: af:f1:60:5a:99:9a:e6:3a:93:52:60:d4:28:3d:7e: e1:07:1a:fc:8c:53:fe:18:de:7e:9a:2f:16:b4:23: 43:ba:98:12:e3:f5:6e:da:9f:fb:89:c5:22:dc:99: a8:de:e3:b5:3e:ca:e6:6a:ad:3e:ba:4f:57:61:12: c8:fe:e0:2c:3d:e7:ec:9d:e5:a9:8e:53:13:f7:da: 55:d7:ac:85:a2:4d:71:8f:a6:bd:bc:15:73:04:99: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FD:D3:E8:18:55:35:9C:A4:04:D7:70:82:7C:CC:6C:DA:87:2E:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88f0b0ed-660e-3ff6-9849-8294068f6c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:97:04:9c:ce:f3:9d:66:90:3e:93:1a:b6:a9:11:39:00:e2: 71:93:2d:e9:80:0e:f3:85:ff:ea:37:fd:35:4a:04:23:00:f1: df:62:68:25:c3:d6:1f:53:04:35:15:2c:34:ee:49:ff:d2:17: d3:46:36:e5:14:c3:4b:60:d7:42:fc:d8:3d:f1:32:09:17:6f: 47:1f:2b:34:72:de:43:00:fb:ed:88:e3:d0:08:79:c1:b1:58: 9f:a1:f7:7d:83:40:85:f3:ab:9b:a2:0d:1a:f7:ab:8a:08:b4: 81:df:1e:2d:3c:92:47:ac:26:18:a4:63:6d:11:52:dd:10:3e: a7:f0:ad:25:0c:44:9c:31:1d:3a:c7:a8:d2:1b:2f:38:bc:04: 52:5e:6a:8b:4c:fb:0e:52:7a:d3:09:d8:1a:fb:c3:db:fd:3f: dc:2c:1d:73:b2:02:9d:a2:72:ae:47:53:ef:78:f2:91:9d:d5: cb:b7:10:8f:e8:0c:cf:1e:8b:3d:ea:2a:b3:51:ea:29:7d:cd: 24:0a:a2:38:50:d1:37:b5:51:1c:ed:17:6a:e4:dc:5e:69:03: 9b:b8:17:24:22:42:ec:3a:bd:ee:59:73:34:f5:fe:73:19:ce: 2e:37:07:6c:3a:4a:55:60:84:44:cf:be:95:29:fc:8e:f8:c9: df:4d:81:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0j3u5hnY+gA+gTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk M2M2NWY4OGYtMWNiZi00Njg3LWIyMjQtMTZlZTMyMWU3NDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3djvuMQurliR3vwAHXjNhGoNuk7YKa0itJX UEgx7jajwm6PWLL9iTGQIp1U56hZ8bT475qXFvU1avwOZ/tad9tuZ9c2nGfcIH2K C7/lmIPf35FG08SjZKeJiKuPHgwE5/ZuVp3UFZnlIoricr3T5RMoNDFtbtvwRZDn WIF/8sGNO5ORyY3/o4fxSpnBHt7yqar3DkLvwwe7mPxqdmz3pvbbUi2v8WBamZrm OpNSYNQoPX7hBxr8jFP+GN5+mi8WtCNDupgS4/Vu2p/7icUi3Jmo3uO1Psrmaq0+ uk9XYRLI/uAsPefsneWpjlMT99pV16yFok1xj6a9vBVzBJkqzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz90+gYVTWcpATXcIJ8zGzahy5bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODhmMGIwZWQtNjYwZS0z ZmY2LTk4NDktODI5NDA2OGY2YzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqXBJzO851mkD6TGrapETkA4nGTLemADvOF/+o3/TVKBCMA8d9iaCXD 1h9TBDUVLDTuSf/SF9NGNuUUw0tg10L82D3xMgkXb0cfKzRy3kMA++2I49AIecGx WJ+h932DQIXzq5uiDRr3q4oItIHfHi08kkesJhikY20RUt0QPqfwrSUMRJwxHTrH qNIbLzi8BFJeaotM+w5SetMJ2Br7w9v9P9wsHXOyAp2icq5HU+948pGd1cu3EI/o DM8eiz3qKrNR6il9zSQKojhQ0Te1URztF2rk3F5pA5u4FyQiQuw6ve5ZczT1/nMZ zi43B2w6SlVghETPvpUp/I74yd9Ngf4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:43:26 2025 by rpki-client