$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa File: dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa (raw, json) Hash identifier: Luy5jZBSekn9Y9OIWqnfpk/Kg1bYYdhQMGPdU9p+roY= Subject key identifier: B0:57:EB:1B:84:33:85:06:6A:34:E2:DE:F7:4A:2F:3E:F4:06:A3:B6 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D259468CF7C27A9B9AE880 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:59:46:8c:f7:c2:7a:9b:9a:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=5a5712e9-6902-49dc-889a-8fd6d98e9e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3b:17:3f:50:53:8c:91:58:4d:53:08:52:02: 27:2e:07:6b:86:b4:8c:fb:b9:fb:8d:60:65:95:86: 67:77:8d:58:d2:8d:fc:e3:99:73:08:ba:81:39:97: 92:48:4d:48:c5:57:a6:99:53:57:6b:6f:ed:0f:3a: 25:03:0a:cd:f2:76:f0:0f:1d:19:c4:70:ac:45:a2: aa:cd:63:fe:5f:9c:39:82:17:0f:3d:ba:86:3b:c2: 0a:42:32:ff:8f:ec:46:2b:31:18:cc:27:c6:fc:0c: 07:e4:78:fa:95:4d:96:6f:ec:77:56:9b:0c:93:c8: b9:2c:29:ab:f0:ee:a5:d7:1d:98:2b:dd:c8:a0:e3: b3:0b:17:94:b7:64:b6:ba:50:f4:29:0a:13:af:d9: 27:6e:e2:90:e2:e1:08:26:e7:da:ac:99:53:75:80: 95:19:b6:80:d7:1c:13:7a:54:87:b4:07:79:8b:1e: 50:da:c1:f4:af:23:7e:ee:b2:be:57:77:43:e3:ee: e1:e0:87:dd:54:ea:6b:88:95:49:90:d2:ab:c0:fe: 22:1f:b7:67:d8:31:4a:06:08:3e:e6:06:2b:f1:43: 9e:c0:36:8d:a1:c7:dd:7b:c3:cf:4d:fe:96:45:e7: 01:7a:c7:ac:b4:ee:8b:7f:17:86:f0:59:be:ce:40: 1e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:57:EB:1B:84:33:85:06:6A:34:E2:DE:F7:4A:2F:3E:F4:06:A3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/dbe33d1f-0e85-33ab-aac5-b650dc18308f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:cf:4e:ef:80:35:2a:24:25:46:a8:41:d7:8f:4f:a7:4c:3a: a7:dd:2b:bc:1f:66:40:1e:75:b3:e4:c9:85:9f:1e:de:a8:a8: f7:99:ed:63:60:db:82:06:cc:f5:ee:0c:f5:69:54:bb:54:74: 66:51:b9:57:82:e8:da:94:79:3d:b8:04:d8:21:10:a6:cb:ed: ba:93:32:db:c5:59:82:50:63:e3:11:59:3f:c1:eb:5a:c0:dc: df:f4:e4:94:ce:c7:ee:cb:aa:5d:85:8a:eb:02:d8:4a:cd:4e: b8:d5:8a:de:f9:08:d5:85:af:3d:c4:b0:82:8c:d3:c7:9b:a7: 05:67:95:2a:7c:9b:06:c0:a3:34:21:54:1b:19:bd:f8:bd:b1: 71:45:83:60:07:1b:20:0c:f2:4a:42:56:d5:5c:99:36:39:91: 8d:88:d6:d5:33:99:81:cc:5b:ae:96:8d:65:2f:9f:f1:7d:58: dd:dc:f0:ac:b2:46:36:da:8f:77:33:14:29:fe:30:d0:b8:29: da:1f:ac:2c:d2:4b:a3:62:9c:33:e0:cf:b0:46:f3:ff:fb:f1: d2:45:ee:4d:63:b7:24:c9:57:04:f7:90:93:4f:14:37:d1:04: 0f:27:61:fd:4c:bc:f1:58:23:7a:d1:26:fa:41:ce:2e:30:05: a8:43:a6:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0llGjPfCepua6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk NWE1NzEyZTktNjkwMi00OWRjLTg4OWEtOGZkNmQ5OGU5ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjsXP1BTjJFYTVMIUgInLgdrhrSM+7n7jWBl lYZnd41Y0o3845lzCLqBOZeSSE1IxVemmVNXa2/tDzolAwrN8nbwDx0ZxHCsRaKq zWP+X5w5ghcPPbqGO8IKQjL/j+xGKzEYzCfG/AwH5Hj6lU2Wb+x3VpsMk8i5LCmr 8O6l1x2YK93IoOOzCxeUt2S2ulD0KQoTr9knbuKQ4uEIJufarJlTdYCVGbaA1xwT elSHtAd5ix5Q2sH0ryN+7rK+V3dD4+7h4IfdVOpriJVJkNKrwP4iH7dn2DFKBgg+ 5gYr8UOewDaNocfde8PPTf6WRecBesestO6LfxeG8Fm+zkAeZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBX6xuEM4UGajTi3vdKLz70BqO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGJlMzNkMWYtMGU4NS0z M2FiLWFhYzUtYjY1MGRjMTgzMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXPTu+ANSokJUaoQdePT6dMOqfdK7wfZkAedbPkyYWfHt6oqPeZ7WNg 24IGzPXuDPVpVLtUdGZRuVeC6NqUeT24BNghEKbL7bqTMtvFWYJQY+MRWT/B61rA 3N/05JTOx+7Lql2FiusC2ErNTrjVit75CNWFrz3EsIKM08ebpwVnlSp8mwbAozQh VBsZvfi9sXFFg2AHGyAM8kpCVtVcmTY5kY2I1tUzmYHMW66WjWUvn/F9WN3c8Kyy Rjbaj3czFCn+MNC4KdofrCzSS6NinDPgz7BG8//78dJF7k1jtyTJVwT3kJNPFDfR BA8nYf1MvPFYI3rRJvpBzi4wBahDpr8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:43:39 2025 by rpki-client