$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8919df3-c62c-3101-a33e-b919c9623688.roa File: b8919df3-c62c-3101-a33e-b919c9623688.roa (raw, json) Hash identifier: o3L//+kKeEvUnnhJbv4JmzxdWKCpDS4vr+BkPx4qpAI= Subject key identifier: 6D:D2:64:7B:48:62:8E:9F:AA:7D:3D:20:FF:E4:1C:1C:35:69:1C:69 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D26BB6978389FF3BF14A60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8919df3-c62c-3101-a33e-b919c9623688.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:6b:b6:97:83:89:ff:3b:f1:4a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=bacd2caf-f060-4b9c-b926-1b1cd7174182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:63:69:1a:46:c2:59:54:a4:5c:86:66:18:06: e4:a7:1a:66:78:0c:01:86:e8:66:3d:7e:66:d5:b5: 20:bd:d3:8c:b5:3c:c9:62:20:ad:02:97:18:d2:76: f0:5a:b4:62:23:a1:9e:9c:da:d6:fe:c7:17:6c:d1: d9:1d:58:d3:19:51:e3:34:4d:34:2d:53:b1:cf:8e: 20:0a:38:5d:0c:e7:03:a5:94:b7:3f:e5:b4:ca:21: fa:21:12:6c:bb:79:f0:67:ae:a0:dd:ff:e1:24:52: 59:5d:6f:37:58:09:5f:ce:81:29:99:f5:dc:50:12: 3f:69:d9:2e:0a:03:74:3e:dc:40:a7:6a:6a:ca:47: 09:bf:6d:32:91:bd:fe:9f:c3:26:6f:5b:b1:80:29: 89:cc:77:8b:15:6e:e2:d2:f1:41:cd:30:14:84:7f: 39:d2:d2:73:8e:cb:99:72:99:c1:78:15:0b:a5:dc: 4c:0c:51:35:a4:35:b0:8d:07:5c:14:ad:a2:69:23: 8c:53:b9:6b:61:95:91:83:6a:19:c8:46:98:17:a6: 25:45:d3:2c:5c:f3:ea:b5:51:33:2a:6b:eb:05:14: 1f:0c:92:58:ae:7e:94:1b:81:2f:db:8f:72:59:65: 1c:cc:d4:2b:ff:26:f8:df:a7:cd:f0:d9:41:97:70: e7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D2:64:7B:48:62:8E:9F:AA:7D:3D:20:FF:E4:1C:1C:35:69:1C:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b8919df3-c62c-3101-a33e-b919c9623688.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:28:bc:60:65:2f:db:bb:00:53:73:4a:c5:44:6f:e0:29:90: 26:45:3c:11:8b:a8:06:2d:2d:28:29:2f:19:49:fe:53:12:9b: c7:b3:d5:b8:48:a7:51:84:7e:5d:39:7a:8f:b6:f7:f7:35:0c: 94:23:4f:9e:c6:4a:21:17:a5:c7:e2:52:57:da:9e:9e:f3:fd: 6f:c4:10:6a:7d:ab:56:7a:19:64:9f:a6:28:9d:fd:2e:f0:fc: ea:64:42:26:79:61:12:59:01:6c:27:45:f0:48:f1:7a:51:3b: a2:bf:ea:b8:29:3f:cf:37:f3:36:e4:f5:9b:eb:63:2e:46:ca: b1:5d:4b:b1:36:47:ff:7e:f8:04:d1:0f:e8:7e:c5:e8:0b:4c: 1b:b0:f1:40:6b:2c:a4:1a:db:d4:2b:0a:25:08:b5:fa:8c:b3: 83:1b:cc:6d:d8:54:d8:a2:c1:24:d4:5e:35:a5:b6:7f:e6:8d: de:03:48:6c:0b:9e:0a:55:63:09:46:21:2c:65:46:cf:d0:c3: cb:0c:19:5f:6c:d3:11:fa:e8:58:fe:c1:ce:d3:e8:29:70:8c: 2c:a3:69:f1:d9:1d:ea:63:49:4c:20:46:66:c2:9b:a4:0c:00: f3:d7:b2:6c:37:35:2e:a8:d0:48:c4:3d:cc:12:8a:0d:5d:8f: 12:13:74:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mu2l4OJ/zvxSmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YmFjZDJjYWYtZjA2MC00YjljLWI5MjYtMWIxY2Q3MTc0MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGNpGkbCWVSkXIZmGAbkpxpmeAwBhuhmPX5m 1bUgvdOMtTzJYiCtApcY0nbwWrRiI6GenNrW/scXbNHZHVjTGVHjNE00LVOxz44g CjhdDOcDpZS3P+W0yiH6IRJsu3nwZ66g3f/hJFJZXW83WAlfzoEpmfXcUBI/adku CgN0PtxAp2pqykcJv20ykb3+n8Mmb1uxgCmJzHeLFW7i0vFBzTAUhH850tJzjsuZ cpnBeBULpdxMDFE1pDWwjQdcFK2iaSOMU7lrYZWRg2oZyEaYF6YlRdMsXPPqtVEz KmvrBRQfDJJYrn6UG4Ev249yWWUczNQr/yb436fN8NlBl3DnHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3SZHtIYo6fqn09IP/kHBw1aRxpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjg5MTlkZjMtYzYyYy0z MTAxLWEzM2UtYjkxOWM5NjIzNjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwovGBlL9u7AFNzSsVEb+ApkCZFPBGLqAYtLSgpLxlJ/lMSm8ez1bhI p1GEfl05eo+29/c1DJQjT57GSiEXpcfiUlfanp7z/W/EEGp9q1Z6GWSfpiid/S7w /OpkQiZ5YRJZAWwnRfBI8XpRO6K/6rgpP8838zbk9ZvrYy5GyrFdS7E2R/9++ATR D+h+xegLTBuw8UBrLKQa29QrCiUItfqMs4MbzG3YVNiiwSTUXjWltn/mjd4DSGwL ngpVYwlGISxlRs/Qw8sMGV9s0xH66Fj+wc7T6ClwjCyjafHZHepjSUwgRmbCm6QM APPXsmw3NS6o0EjEPcwSig1djxITdAM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:26:39 2025 by rpki-client