$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa File: da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa (raw, json) Hash identifier: 5fcYATWv8iQSthIMqXljPuhhWlCEJHS9Ts6Iqukti6U= Subject key identifier: 56:B7:2D:1D:47:EF:D7:FF:4C:92:B5:94:54:C2:04:7B:E5:BC:76:86 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584AC01651355D2EF94ADB7BF080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa Signing time: Tue 05 Aug 2025 01:00:32 +0000 ROA not before: Tue 05 Aug 2025 01:00:32 +0000 ROA not after: Mon 03 Nov 2025 02:00:32 +0000 asID: 30036 IP address blocks: 192.119.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:16:51:35:5d:2e:f9:4a:db:7b:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 5 01:00:32 2025 GMT Not After : Nov 3 02:00:32 2025 GMT Subject: CN=b9022e6b-68a1-460d-ae73-d21d1247ea2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:54:0b:5c:dc:70:54:c4:dc:40:e5:35:a3: 0a:9b:bd:a3:b0:5e:d3:13:60:9f:88:e9:0d:20:8e: 0b:c3:f1:06:bb:46:e8:e8:1d:0f:c0:5e:e5:01:18: 64:42:8a:9f:fd:04:90:74:30:53:b2:8f:96:1c:35: da:a2:d6:30:3b:b4:2e:f8:ff:b4:2a:a3:6e:77:91: 93:e5:46:1c:42:c6:ac:23:52:bc:08:9e:31:94:32: 08:3d:43:6b:95:54:cf:16:f2:9c:11:08:5d:19:a9: f4:85:04:76:8d:8a:2a:b8:45:a7:e6:f8:e9:75:aa: 0a:5a:52:3e:46:34:bd:72:d2:b4:ee:2d:59:af:85: ed:c9:e3:7d:f0:0b:15:0d:b5:56:6a:a2:04:97:8e: 9f:d8:3c:23:0f:9f:c9:02:fa:f9:ed:a6:e7:75:c4: 23:ac:a3:4c:23:6c:31:c6:e4:02:55:67:ae:77:39: 38:a8:b4:34:6a:7b:6d:ed:98:d1:0b:76:bd:5b:12: 0e:f6:34:57:a1:fb:f5:26:6b:e3:26:34:85:89:8e: 02:14:88:8c:6a:45:28:36:2d:83:67:40:fe:27:06: ae:a4:fc:1b:e7:08:56:3c:b1:18:c1:bb:07:0f:50: cb:35:bc:01:69:0c:31:8f:c8:76:95:cb:07:6a:ce: b9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B7:2D:1D:47:EF:D7:FF:4C:92:B5:94:54:C2:04:7B:E5:BC:76:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:bd:6a:35:09:8d:c3:73:80:f1:1f:3f:5e:d9:e1:b6:cb:3c: 9a:05:93:da:0a:e5:97:10:b4:71:30:02:b3:ee:cb:51:e8:ee: 74:c7:ad:45:1b:96:c1:a7:a1:73:7d:a1:0b:be:a6:f2:6e:d9: e4:fa:5f:83:f8:29:51:4f:0a:0b:9a:43:41:ce:cd:3f:b1:43: b4:3d:33:9c:3b:72:af:68:2e:77:bc:12:d3:7c:e0:a9:19:cd: c3:a4:02:53:00:ef:88:eb:03:a1:8d:78:47:72:82:ce:d0:cb: 53:69:44:8d:a2:c2:f6:9c:d4:53:38:e7:82:06:fa:7d:13:02: 27:e3:20:9e:dc:46:ac:e4:b2:c4:8e:6f:21:3b:34:5d:e7:5d: b4:8b:4b:76:08:05:f8:0d:32:3b:7e:2e:e5:f4:0d:d4:bf:d0: 3e:c2:8f:b5:3f:47:e7:0b:e2:8f:6a:a1:9e:3a:26:00:b2:4b: 00:07:fe:9f:05:39:3a:d0:73:60:42:40:e4:d5:0d:95:a3:0a: 32:59:8b:fb:df:1b:b5:c2:80:94:c0:2a:5c:b4:50:65:c4:79: 4c:71:84:f9:25:83:1c:46:a5:2d:05:fe:27:d7:30:19:3b:ce: 5a:45:ef:9e:72:18:2e:89:b2:f0:b4:da:1a:39:f7:9a:c9:6e: fa:3f:59:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFlE1XS75Stt78IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk YjkwMjJlNmItNjhhMS00NjBkLWFlNzMtZDIxZDEyNDdlYTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBxUC1zccFTE3EDlNaMKm72jsF7TE2CfiOkN II4Lw/EGu0bo6B0PwF7lARhkQoqf/QSQdDBTso+WHDXaotYwO7Qu+P+0KqNud5GT 5UYcQsasI1K8CJ4xlDIIPUNrlVTPFvKcEQhdGan0hQR2jYoquEWn5vjpdaoKWlI+ RjS9ctK07i1Zr4XtyeN98AsVDbVWaqIEl46f2DwjD5/JAvr57abndcQjrKNMI2wx xuQCVWeudzk4qLQ0antt7ZjRC3a9WxIO9jRXofv1JmvjJjSFiY4CFIiMakUoNi2D Z0D+JwaupPwb5whWPLEYwbsHD1DLNbwBaQwxj8h2lcsHas650wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFa3LR1H79f/TJK1lFTCBHvlvHaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGE5Y2NiYmQtYjFhOS0z MDNiLWIyOWMtODI5ZWFhYTFhZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAy9ajUJjcNzgPEfP17Z4bbLPJoFk9oK5ZcQtHEwArPuy1Ho7nTHrUUb lsGnoXN9oQu+pvJu2eT6X4P4KVFPCguaQ0HOzT+xQ7Q9M5w7cq9oLne8EtN84KkZ zcOkAlMA74jrA6GNeEdygs7Qy1NpRI2iwvac1FM454IG+n0TAifjIJ7cRqzkssSO byE7NF3nXbSLS3YIBfgNMjt+LuX0DdS/0D7Cj7U/R+cL4o9qoZ46JgCySwAH/p8F OTrQc2BCQOTVDZWjCjJZi/vfG7XCgJTAKly0UGXEeUxxhPklgxxGpS0F/ifXMBk7 zlpF755yGC6JsvC02ho595rJbvo/Wec= -----END CERTIFICATE-----Generated at Thu Aug 7 03:20:36 2025 by rpki-client