$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa File: ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa (raw, json) Hash identifier: 9ZE3OwDvV5cVRT3KIqt75cfKVYmqFaipaHTLp1GwWpw= Subject key identifier: 25:E5:E7:89:EF:96:84:3F:E2:E8:34:C9:5E:1A:37:33:9B:8D:38:F7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584BA0D243DAA83AF8DD7F17CA00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:43:da:a8:3a:f8:dd:7f:17:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=d2a481d9-d034-4f21-825e-c0cded173485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:10:5d:43:83:b2:29:c0:7f:01:ca:e5:f5: d9:78:77:b0:13:01:55:70:79:09:7a:b0:2d:e0:c0: 53:e2:c9:b0:47:6b:d6:99:19:87:33:c0:be:dd:d7: bb:f3:87:9d:ba:e2:b2:50:6a:af:31:51:f3:de:6b: 5b:e6:04:1c:70:72:0f:9d:1c:17:f9:1a:98:47:bf: f6:8b:c5:64:1b:b7:e1:8e:be:e5:a3:66:c2:d6:13: dd:c3:81:69:6c:c7:84:64:80:c7:e6:17:88:06:9b: a7:5c:8b:47:9d:7a:ee:19:08:d5:6a:2e:67:4a:86: a2:9d:8d:c4:3b:39:4a:f3:fd:c5:03:49:02:1e:5d: c9:b7:6a:02:a8:26:c2:34:24:df:5a:1b:3c:6f:3f: 29:2e:31:e6:49:1e:2e:20:3e:41:9b:96:00:bd:c6: 36:92:94:56:b4:c1:e2:89:4f:9e:46:c9:8e:e6:25: 37:d1:5e:c4:f1:d7:dd:74:5c:be:76:ee:81:e7:de: 40:57:0a:66:5a:54:86:cf:26:e8:1b:0b:27:db:c8: 48:01:0b:43:9d:62:f1:a4:80:94:45:06:40:bc:4e: 62:bd:2f:78:13:d5:df:03:94:2c:44:74:a6:8c:72: 6e:c4:e4:d3:e8:5c:b8:d5:d6:f5:06:87:0b:8a:b8: 66:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E5:E7:89:EF:96:84:3F:E2:E8:34:C9:5E:1A:37:33:9B:8D:38:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ea04ddc3-a272-344b-962e-875bc2ffc4f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5d:27:36:78:6f:b9:4b:8f:7a:af:5e:0c:73:fd:87:02:8a: 25:e2:cb:d7:03:00:d2:6c:fe:9b:1e:84:75:52:61:46:94:07: 37:b7:a7:ea:98:40:72:70:4b:eb:d9:c9:01:67:42:d5:cc:d8: ce:db:39:0b:3d:68:e8:2c:09:f6:4e:52:59:a7:8a:3c:5b:63: 40:c3:88:9e:ec:d0:3d:88:62:70:df:f6:2f:84:7c:83:dd:db: 37:9f:85:b6:b4:8b:ca:d0:2d:7c:91:23:f9:de:cd:65:da:8e: ad:66:f8:4d:49:7f:da:88:74:32:33:f4:e1:97:fe:0c:82:0f: 49:56:ae:b7:fc:b6:9c:34:b6:ec:c1:d0:3a:84:cb:95:64:b2: ae:d6:6a:e3:67:8d:f4:67:d6:85:76:82:f6:a7:d1:d0:75:e7: e1:29:26:67:15:8f:96:5b:26:3c:c2:c9:30:58:54:2e:e6:cd: 38:0d:b5:bd:9f:8a:8d:ef:59:bd:43:b5:ee:ee:87:fb:6c:50: 58:9a:00:55:9a:9b:59:91:36:1b:1c:e4:0a:09:40:1f:f2:58: 9d:5d:cc:56:56:62:d3:dc:9e:c4:2b:b7:22:1e:e5:91:28:fd: 60:d2:80:1a:45:9e:8c:22:60:13:f9:13:ac:7f:df:d7:bd:b1: 94:4e:13:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kPaqDr43X8XygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk ZDJhNDgxZDktZDAzNC00ZjIxLTgyNWUtYzBjZGVkMTczNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeQQXUODsinAfwHK5fXZeHewEwFVcHkJerAt 4MBT4smwR2vWmRmHM8C+3de784eduuKyUGqvMVHz3mtb5gQccHIPnRwX+RqYR7/2 i8VkG7fhjr7lo2bC1hPdw4FpbMeEZIDH5heIBpunXItHnXruGQjVai5nSoainY3E OzlK8/3FA0kCHl3Jt2oCqCbCNCTfWhs8bz8pLjHmSR4uID5Bm5YAvcY2kpRWtMHi iU+eRsmO5iU30V7E8dfddFy+du6B595AVwpmWlSGzyboGwsn28hIAQtDnWLxpICU RQZAvE5ivS94E9XfA5QsRHSmjHJuxOTT6Fy41db1BocLirhmXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXl54nvloQ/4ug0yV4aNzObjTj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWEwNGRkYzMtYTI3Mi0z NDRiLTk2MmUtODc1YmMyZmZjNGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABldJzZ4b7lLj3qvXgxz/YcCiiXiy9cDANJs/psehHVSYUaUBze3p+qY QHJwS+vZyQFnQtXM2M7bOQs9aOgsCfZOUlmnijxbY0DDiJ7s0D2IYnDf9i+EfIPd 2zefhba0i8rQLXyRI/nezWXajq1m+E1Jf9qIdDIz9OGX/gyCD0lWrrf8tpw0tuzB 0DqEy5Vksq7WauNnjfRn1oV2gvan0dB15+EpJmcVj5ZbJjzCyTBYVC7mzTgNtb2f io3vWb1Dte7uh/tsUFiaAFWam1mRNhsc5AoJQB/yWJ1dzFZWYtPcnsQrtyIe5ZEo /WDSgBpFnowiYBP5E6x/39e9sZROE3Y= -----END CERTIFICATE-----Generated at Wed Nov 5 07:34:24 2025 by rpki-client