$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa File: 9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa (raw, json) Hash identifier: CQdBDObVmIVi4Qw1dWzomZ4TLexdSLtsWazKym+H3sQ= Subject key identifier: E7:EA:08:E3:28:C6:1C:08:9A:36:61:25:93:78:0A:CA:1A:23:C2:EC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC01623DBB72972D1BA5BEE00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 192.119.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:23:db:b7:29:72:d1:ba:5b:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=503cc4ae-66b1-4dad-8610-effb0658fe00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:22:7b:e6:2d:4b:22:0f:78:a1:f4:20:d1: 79:5e:72:a0:2a:fc:10:44:f2:54:d9:45:ff:cd:06: 34:5e:2d:56:58:a8:ba:6a:29:ba:18:fa:5a:c8:b0: 13:7b:97:c6:c1:95:71:a5:28:53:09:1c:a9:f7:9e: ef:45:f1:91:2d:d7:6f:76:c0:01:0a:73:e2:b6:82: 6f:f4:be:55:73:c0:e4:2b:31:8a:c5:e1:58:af:d8: de:e4:01:b6:35:1a:fb:1d:45:d2:81:de:51:20:29: 91:84:4e:32:c6:a3:a7:26:4a:0b:f4:16:cd:2b:cc: 32:36:fc:69:69:41:a0:b7:2f:42:6a:cc:8d:cd:e8: 8f:cf:3d:1f:ea:4a:a3:89:79:e3:7d:d0:30:fb:97: d7:a3:43:9e:c0:5d:f1:8d:dc:78:6a:8f:ec:0f:c6: c7:9f:53:95:9c:78:62:dc:b8:00:21:6a:1a:9c:31: a5:ec:5a:9b:25:44:11:db:b6:31:a7:7e:0e:63:af: 01:e2:f6:96:cb:82:84:f8:87:6c:91:73:cf:0b:6d: e1:7a:29:5a:03:45:9e:06:1a:d9:4d:c0:a9:65:bb: 29:eb:40:1a:e3:bf:47:72:58:3e:e4:dd:c9:e2:97: ff:1e:90:ca:7f:23:fc:e9:67:3b:52:79:d9:0d:72: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EA:08:E3:28:C6:1C:08:9A:36:61:25:93:78:0A:CA:1A:23:C2:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:33:5f:67:24:bd:ad:d7:c5:7f:ba:e8:66:6d:80:7d:32:7b: aa:23:91:49:f0:e2:df:a5:a4:68:07:66:06:0c:2b:f9:c7:64: 0d:37:bd:d3:d6:a9:b7:df:c9:91:b2:1a:c2:bb:03:d2:ab:fb: a2:54:72:ae:a5:11:f8:4b:b1:58:19:b5:0e:ae:77:36:40:6a: 69:db:64:e1:1d:37:73:44:5e:5e:12:8e:d3:88:af:5c:9d:18: 44:06:83:7b:a9:9c:a2:86:92:38:f0:54:4f:78:b7:0b:73:e1: 3d:16:8e:13:91:79:97:05:98:c9:90:0e:d3:51:44:3f:ad:14: c4:47:4a:4e:d2:43:1b:2e:e0:4f:11:50:76:74:ed:38:47:f6: 72:c2:a7:ba:51:d4:d2:b1:75:9d:e9:d9:38:97:14:b8:e1:3e: 62:1e:d9:07:83:a5:43:32:cf:b3:ed:68:4d:88:8b:c8:54:58: 43:7a:6e:a3:ab:ae:02:db:87:82:d5:fa:c7:3f:dd:a8:df:0f: 47:15:df:75:c8:8c:15:d7:a7:a7:a6:15:49:d1:8f:dc:a7:53: aa:d0:4d:b2:eb:2b:ea:64:5f:75:fc:95:8c:78:b8:9c:9e:1a: 83:e8:6d:68:c4:7e:f7:57:cb:21:76:f4:e5:d1:53:5a:cc:47: 00:92:19:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFiPbtyly0bpb7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk NTAzY2M0YWUtNjZiMS00ZGFkLTg2MTAtZWZmYjA2NThmZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtEie+YtSyIPeKH0INF5XnKgKvwQRPJU2UX/ zQY0Xi1WWKi6aim6GPpayLATe5fGwZVxpShTCRyp957vRfGRLddvdsABCnPitoJv 9L5Vc8DkKzGKxeFYr9je5AG2NRr7HUXSgd5RICmRhE4yxqOnJkoL9BbNK8wyNvxp aUGgty9CasyNzeiPzz0f6kqjiXnjfdAw+5fXo0OewF3xjdx4ao/sD8bHn1OVnHhi 3LgAIWoanDGl7FqbJUQR27Yxp34OY68B4vaWy4KE+IdskXPPC23heilaA0WeBhrZ TcCpZbsp60Aa479Hclg+5N3J4pf/HpDKfyP86Wc7UnnZDXLuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfqCOMoxhwImjZhJZN4CsoaI8LsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWJlN2Q3MzktMDY1YS0z ZmQ3LTkzZTMtYjlhNWQwN2YyZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0zX2ckva3XxX+66GZtgH0ye6ojkUnw4t+lpGgHZgYMK/nHZA03vdPW qbffyZGyGsK7A9Kr+6JUcq6lEfhLsVgZtQ6udzZAamnbZOEdN3NEXl4SjtOIr1yd GEQGg3upnKKGkjjwVE94twtz4T0WjhOReZcFmMmQDtNRRD+tFMRHSk7SQxsu4E8R UHZ07ThH9nLCp7pR1NKxdZ3p2TiXFLjhPmIe2QeDpUMyz7PtaE2Ii8hUWEN6bqOr rgLbh4LV+sc/3ajfD0cV33XIjBXXp6emFUnRj9ynU6rQTbLrK+pkX3X8lYx4uJye GoPobWjEfvdXyyF29OXRU1rMRwCSGXQ= -----END CERTIFICATE-----Generated at Thu Aug 7 07:30:29 2025 by rpki-client