$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/939627fb-4796-3cc9-8412-b5d3a3711064.roa File: 939627fb-4796-3cc9-8412-b5d3a3711064.roa (raw, json) Hash identifier: tRBtGah3Or9EsNNXmjsyJSKNXRwX6uLCn+XGZ+8jX7w= Subject key identifier: D9:E5:A7:F1:E8:0D:6A:1D:5E:71:C5:5F:78:47:81:07:FD:49:8E:79 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D257CFEF19DE3A46D2B440 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/939627fb-4796-3cc9-8412-b5d3a3711064.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:57:cf:ef:19:de:3a:46:d2:b4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=808585eb-1e57-4e85-bf6d-90882fa9e5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:df:f4:3c:3f:72:aa:97:3b:a3:46:90:79:12: 07:18:2f:3f:3c:66:75:22:91:58:16:9f:04:6c:cd: 3c:f8:e3:5d:11:4b:97:9f:d4:63:df:37:23:1e:67: f6:cb:41:34:59:73:f5:88:90:d5:ac:0e:5f:9e:4b: a8:28:49:d2:ca:5f:3e:b9:ed:ed:ad:2e:10:f0:df: 4c:91:19:75:b1:da:0c:ff:7d:b8:9b:5e:03:78:2d: a8:60:53:80:53:50:57:b9:4e:b9:f8:b5:63:c7:6e: 7c:88:bc:c5:93:ba:69:97:04:68:b1:26:0b:7b:50: 3b:df:76:8c:cd:59:83:b1:84:ca:af:97:9a:26:fc: 24:27:b2:eb:66:fc:81:5f:a6:52:d0:94:a7:1e:3a: 09:b3:6b:e5:d4:e6:9d:22:80:fa:b7:c9:f5:58:07: fe:0a:19:f0:64:0b:5b:e9:77:73:59:a4:e9:f6:4a: 61:7b:b5:a6:c4:04:35:c9:dd:a6:b6:db:c7:b9:4b: 6a:64:8c:ca:77:74:5b:56:3d:f5:9a:15:36:c3:6b: f6:0f:79:97:e6:37:ec:50:2b:4f:e0:2d:97:3c:2a: 1e:9b:2c:01:72:69:cf:55:96:60:61:57:be:f3:e2: e8:03:e5:9a:73:9c:7d:58:73:00:7d:a8:5e:92:d7: e6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E5:A7:F1:E8:0D:6A:1D:5E:71:C5:5F:78:47:81:07:FD:49:8E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/939627fb-4796-3cc9-8412-b5d3a3711064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:55:67:9a:6f:7a:b4:59:a7:5a:a3:e2:7b:c7:f4:a9:57:6c: d7:1f:a5:be:b3:05:55:a6:39:9e:8d:ad:7a:b5:fe:86:aa:60: e0:29:2d:a7:c2:1a:93:e7:9c:4c:b2:59:0d:9c:79:a0:4c:be: e4:52:6e:7a:71:c0:3a:73:35:9a:0c:76:7f:36:a2:eb:2e:80: ad:80:69:91:42:e8:2a:db:8e:a4:d8:e9:e3:94:35:59:68:04: f4:41:e7:31:75:f3:99:5a:4c:52:01:03:3d:76:38:05:0a:41: ca:e4:4c:8b:49:8e:74:49:bc:ec:ef:78:7c:af:7e:9e:d6:63: af:cf:8d:85:c0:63:64:74:f8:d4:73:97:20:5e:9d:13:49:29: e2:d7:0d:a7:f4:d7:a6:d6:a4:9f:20:14:cd:9d:e6:1a:5b:7c: 78:33:f8:9a:84:a3:c1:73:da:b2:bc:d8:ab:15:73:d7:40:0c: 82:7e:72:4e:0d:9b:13:73:c4:6a:f3:11:eb:e9:bd:ba:f8:cb: 02:d9:cd:a5:1f:1c:8d:75:f5:35:98:d0:fe:85:e6:30:e6:7f: 1e:1a:64:71:a5:e5:b0:af:8d:41:9c:36:ab:fc:41:ba:31:0d: d5:85:8b:a7:f9:07:70:85:09:dd:b1:0f:cb:ba:a7:b0:6c:b1: ea:b5:10:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lfP7xneOkbStEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ODA4NTg1ZWItMWU1Ny00ZTg1LWJmNmQtOTA4ODJmYTllNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAut/0PD9yqpc7o0aQeRIHGC8/PGZ1IpFYFp8E bM08+ONdEUuXn9Rj3zcjHmf2y0E0WXP1iJDVrA5fnkuoKEnSyl8+ue3trS4Q8N9M kRl1sdoM/324m14DeC2oYFOAU1BXuU65+LVjx258iLzFk7pplwRosSYLe1A733aM zVmDsYTKr5eaJvwkJ7LrZvyBX6ZS0JSnHjoJs2vl1OadIoD6t8n1WAf+ChnwZAtb 6XdzWaTp9kphe7WmxAQ1yd2mttvHuUtqZIzKd3RbVj31mhU2w2v2D3mX5jfsUCtP 4C2XPCoemywBcmnPVZZgYVe+8+LoA+Wac5x9WHMAfahektfmAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnlp/HoDWodXnHFX3hHgQf9SY55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOTM5NjI3ZmItNDc5Ni0z Y2M5LTg0MTItYjVkM2EzNzExMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1VZ5pverRZp1qj4nvH9KlXbNcfpb6zBVWmOZ6NrXq1/oaqYOApLafC GpPnnEyyWQ2ceaBMvuRSbnpxwDpzNZoMdn82ousugK2AaZFC6CrbjqTY6eOUNVlo BPRB5zF185laTFIBAz12OAUKQcrkTItJjnRJvOzveHyvfp7WY6/PjYXAY2R0+NRz lyBenRNJKeLXDaf016bWpJ8gFM2d5hpbfHgz+JqEo8Fz2rK82KsVc9dADIJ+ck4N mxNzxGrzEevpvbr4ywLZzaUfHI119TWY0P6F5jDmfx4aZHGl5bCvjUGcNqv8Qbox DdWFi6f5B3CFCd2xD8u6p7Bsseq1EAE= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:50 2025 by rpki-client