$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa File: ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa (raw, json) Hash identifier: c77HEgJ/txy2bkL47kknLwF7iions4VYEe3NYNNQank= Subject key identifier: F9:C1:4D:ED:FC:29:F0:63:81:64:5A:E1:90:64:D0:E1:CA:23:64:43 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D23FC1A6B75685154213D0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:3f:c1:a6:b7:56:85:15:42:13:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=7a9ae847-1316-4c1d-bfe8-f60783fa9941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:64:68:11:64:01:8e:be:1f:37:ce:52:e4: 53:15:54:cb:d1:2a:de:a2:17:4b:d5:f2:df:29:f5: 9f:70:93:33:ce:b6:25:d3:91:76:f6:1b:c1:ec:8c: f5:be:6e:dd:73:b7:af:46:17:f6:df:0d:67:72:ad: a6:04:e6:22:7c:4e:91:9f:f9:0b:d9:87:0f:8e:0a: a2:7a:dd:8d:5c:7b:0b:b9:7e:a0:b4:ea:2b:2a:3e: f6:2d:00:94:80:95:0e:34:cb:1c:70:79:e0:13:5e: f5:db:72:55:00:56:36:c6:ae:cb:18:55:95:42:73: 8d:74:33:a4:40:f1:60:de:9d:e4:d1:92:aa:30:cf: ac:62:f1:5d:90:62:ed:0c:f2:4c:98:41:43:ff:e8: 75:fa:11:f9:80:92:1d:36:44:3f:59:0a:c7:8e:ac: 09:e2:6a:b8:3a:36:16:e7:44:b4:7d:81:d7:0b:94: c8:4d:24:00:cd:13:0d:52:da:5d:e1:73:9a:a9:ba: bd:8d:e4:a3:b4:ae:5a:58:10:42:20:b2:b7:4c:de: 52:0f:91:12:ca:da:be:23:76:3a:f5:f1:7b:29:d6: 62:dd:27:d7:a4:3e:bc:64:24:de:bb:5f:cb:87:90: 6b:8f:7c:8b:87:ce:f8:ce:1f:90:4c:b4:45:e9:ea: b4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C1:4D:ED:FC:29:F0:63:81:64:5A:E1:90:64:D0:E1:CA:23:64:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ba34520e-e96e-37a7-b058-c5eb6ff959e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:51:b8:0a:91:28:a2:b6:a5:49:a5:d5:7b:fa:d6:96:11:25: 41:af:a4:e4:c5:09:39:a3:ff:41:ce:5a:cd:96:eb:3d:98:3e: 19:e9:07:ea:2d:64:bd:7d:bb:f6:f3:3f:8a:18:8e:1a:28:9a: d2:17:76:85:86:b0:af:7b:23:5e:4a:d8:af:e7:6f:b9:40:ba: 68:b7:da:0b:6d:84:e0:2a:9a:b5:86:e6:b2:ed:0c:a0:5f:ca: 5c:d1:32:d0:ab:05:cd:09:a6:5a:f7:4d:ee:1f:d8:b0:22:04: cd:bd:f4:c4:ff:81:ea:0f:6f:24:ce:4b:32:73:9d:3f:92:dd: 93:31:d2:06:ed:e8:0a:ba:09:43:c8:37:f2:b9:98:be:03:d4: 20:c7:f6:54:e3:08:bf:74:5b:ed:eb:cf:fa:17:2b:0c:2f:e0: 04:0e:e6:0a:88:fb:2c:0e:97:0d:88:36:37:94:35:5f:a3:80: 1a:94:57:45:f1:be:5f:fe:66:85:f4:80:95:2a:4b:86:b8:59: 84:8a:94:5c:b4:b7:7e:5f:a2:6e:c9:a5:3f:28:44:09:87:fa: 27:58:fe:c2:a8:b4:0c:cc:c5:66:83:c9:78:c6:d7:ab:14:31: 3d:85:f4:11:ff:be:88:d9:d1:00:c3:1b:cf:e6:81:f7:63:18: 05:98:b2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0j/BprdWhRVCE9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk N2E5YWU4NDctMTMxNi00YzFkLWJmZTgtZjYwNzgzZmE5OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr9kaBFkAY6+HzfOUuRTFVTL0SreohdL1fLf KfWfcJMzzrYl05F29hvB7Iz1vm7dc7evRhf23w1ncq2mBOYifE6Rn/kL2YcPjgqi et2NXHsLuX6gtOorKj72LQCUgJUONMsccHngE17123JVAFY2xq7LGFWVQnONdDOk QPFg3p3k0ZKqMM+sYvFdkGLtDPJMmEFD/+h1+hH5gJIdNkQ/WQrHjqwJ4mq4OjYW 50S0fYHXC5TITSQAzRMNUtpd4XOaqbq9jeSjtK5aWBBCILK3TN5SD5ESytq+I3Y6 9fF7KdZi3SfXpD68ZCTeu1/Lh5Brj3yLh874zh+QTLRF6eq00QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnBTe38KfBjgWRa4ZBk0OHKI2RDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmEzNDUyMGUtZTk2ZS0z N2E3LWIwNTgtYzVlYjZmZjk1OWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFRuAqRKKK2pUml1Xv61pYRJUGvpOTFCTmj/0HOWs2W6z2YPhnpB+ot ZL19u/bzP4oYjhoomtIXdoWGsK97I15K2K/nb7lAumi32gtthOAqmrWG5rLtDKBf ylzRMtCrBc0Jplr3Te4f2LAiBM299MT/geoPbyTOSzJznT+S3ZMx0gbt6Aq6CUPI N/K5mL4D1CDH9lTjCL90W+3rz/oXKwwv4AQO5gqI+ywOlw2INjeUNV+jgBqUV0Xx vl/+ZoX0gJUqS4a4WYSKlFy0t35fom7JpT8oRAmH+idY/sKotAzMxWaDyXjG16sU MT2F9BH/vojZ0QDDG8/mgfdjGAWYskE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:29 2025 by rpki-client