$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa File: 8f5d81b4-6393-3f46-863d-83776f0c2793.roa (raw, json) Hash identifier: I+mZs+5fqQmJuDfp03zLs6gSN2f20o17jiIf0A530P4= Subject key identifier: 5F:EF:C8:10:16:C6:E8:C8:3D:65:B4:75:95:6F:CB:6B:28:81:F5:2A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D258BBBE50FCC71BDF7B80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:58:bb:be:50:fc:c7:1b:df:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=e1240f8f-d9c7-478b-9f1e-c23784f65917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:25:82:f9:2f:77:02:b6:ae:e2:67:09:da: e9:9d:cf:6f:ab:50:fe:cb:64:e6:ad:be:6b:8e:c4: 75:fc:d4:e3:7c:94:3d:2e:be:74:4d:69:07:94:19: 2b:81:69:2d:98:0b:6b:35:00:be:87:6b:cf:ce:e6: b2:49:4d:70:9a:4d:24:44:95:8a:16:bb:fb:95:d8: 5b:e1:7d:0f:ae:93:5f:2c:fd:3c:9c:ea:c8:37:23: d0:73:50:20:ff:ee:06:d5:c7:fc:c2:13:8a:f6:2c: b9:0f:4a:47:f4:de:55:a9:ca:97:e7:d4:82:41:de: 3c:bc:58:16:fd:87:9a:1e:db:e1:d6:c4:30:ff:1f: 92:53:46:bd:20:4f:ef:72:3e:fb:f7:58:e6:aa:a8: dd:2c:a7:b9:3c:91:cc:14:28:53:22:45:d9:c5:74: 76:2a:c5:68:f0:10:14:8c:9f:1a:24:9f:e2:75:70: f8:d7:ac:92:54:10:6a:e6:bc:4b:fb:23:c4:e8:47: 33:bc:7b:47:ac:e4:5c:fa:f5:ac:03:ae:42:7d:46: c3:80:34:5f:19:b7:10:c0:15:8c:48:4e:cf:2f:15: 6e:08:b9:df:34:fd:91:de:6b:3e:63:29:d9:fb:9f: 76:91:1a:af:a4:f1:8e:bf:8d:61:7a:75:0a:1e:17: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EF:C8:10:16:C6:E8:C8:3D:65:B4:75:95:6F:CB:6B:28:81:F5:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8f5d81b4-6393-3f46-863d-83776f0c2793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:2a:9f:4f:75:52:46:35:62:37:7b:be:57:80:6f:ec:51:8c: 83:67:3a:5a:8e:fc:33:ed:43:a3:fa:e7:87:1e:46:42:88:a1: 5e:ae:84:9d:82:d2:8e:46:84:86:58:73:5a:16:0d:6b:20:f7: b3:dc:b6:35:44:15:2e:e0:28:45:e7:6b:da:ab:3b:e0:49:2d: 40:a8:8d:7e:85:74:ef:bb:cf:b8:bc:db:8f:5c:83:72:73:ee: c2:b8:fc:0f:5e:c1:86:45:8f:4e:6a:6a:a9:8d:17:d0:bb:79: a3:b5:17:47:a4:a1:df:45:35:ff:2e:e1:e2:8f:42:96:7e:0d: ee:97:f2:bc:f5:a2:6a:3a:94:9c:1b:cb:37:40:ec:2b:b6:95: 1e:03:e8:dc:88:b6:6f:99:cc:7d:7f:0a:7b:f3:cb:a8:bd:c7: 6a:b2:e2:c9:d4:2e:6d:33:1f:c4:b6:70:15:c6:48:22:e3:97: 59:5a:14:ea:6f:e8:11:f8:24:65:7b:1d:25:d8:f7:be:48:e4: 83:2c:26:ef:0b:3c:a1:fc:80:ed:99:3d:1a:f1:01:ae:38:d1: 76:cb:0b:d0:74:bc:db:07:e3:2f:67:e2:e6:fd:58:89:ee:43: b0:0f:02:56:0f:06:df:8f:56:15:dd:b9:a9:33:d5:fa:e7:9e: 38:8e:46:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0li7vlD8xxvfe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZTEyNDBmOGYtZDljNy00NzhiLTlmMWUtYzIzNzg0ZjY1OTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVUlgvkvdwK2ruJnCdrpnc9vq1D+y2Tmrb5r jsR1/NTjfJQ9Lr50TWkHlBkrgWktmAtrNQC+h2vPzuaySU1wmk0kRJWKFrv7ldhb 4X0PrpNfLP08nOrINyPQc1Ag/+4G1cf8whOK9iy5D0pH9N5VqcqX59SCQd48vFgW /YeaHtvh1sQw/x+SU0a9IE/vcj7791jmqqjdLKe5PJHMFChTIkXZxXR2KsVo8BAU jJ8aJJ/idXD416ySVBBq5rxL+yPE6EczvHtHrORc+vWsA65CfUbDgDRfGbcQwBWM SE7PLxVuCLnfNP2R3ms+YynZ+592kRqvpPGOv41henUKHhfj1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/vyBAWxujIPWW0dZVvy2sogfUqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGY1ZDgxYjQtNjM5My0z ZjQ2LTg2M2QtODM3NzZmMGMyNzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwqn091UkY1Yjd7vleAb+xRjINnOlqO/DPtQ6P654ceRkKIoV6uhJ2C 0o5GhIZYc1oWDWsg97PctjVEFS7gKEXna9qrO+BJLUCojX6FdO+7z7i8249cg3Jz 7sK4/A9ewYZFj05qaqmNF9C7eaO1F0ekod9FNf8u4eKPQpZ+De6X8rz1omo6lJwb yzdA7Cu2lR4D6NyItm+ZzH1/Cnvzy6i9x2qy4snULm0zH8S2cBXGSCLjl1laFOpv 6BH4JGV7HSXY975I5IMsJu8LPKH8gO2ZPRrxAa440XbLC9B0vNsH4y9n4ub9WInu Q7APAlYPBt+PVhXduakz1frnnjiORl8= -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:54 2025 by rpki-client