$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa File: abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa (raw, json) Hash identifier: Ls+hui0aMVBIdSmzmp0YSUPD6vM/r7YG5uekV2W7PaI= Subject key identifier: E1:C0:4D:72:84:E8:49:63:A4:4C:E2:8A:C8:AE:53:8F:35:85:D9:D1 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B7C8758F0584FA8272E536B00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 192.119.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:58:f0:58:4f:a8:27:2e:53:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=9cbcf5dd-7f62-407c-89c4-53471720fb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:38:4e:fe:0a:25:c0:83:af:f6:82:da:ea: c2:79:ab:a3:32:72:e2:4f:32:1b:a3:17:2d:56:bb: 6c:a2:76:43:61:8a:86:bc:2e:00:c7:a2:6e:dd:04: ca:e2:24:40:6f:9b:46:78:50:ee:4c:18:9d:63:4c: 9c:a7:cd:29:bf:77:99:19:41:18:60:32:99:43:a5: 85:b2:c2:db:80:91:d4:e0:24:f1:46:95:ac:c0:9f: c9:6a:17:e9:ad:53:a1:ba:90:5c:7e:2f:58:f6:ac: dc:81:39:03:3a:69:42:16:00:3b:21:8b:ea:cf:de: 4f:3c:e7:26:b1:aa:30:91:20:36:da:bb:1b:06:14: 2e:a9:4e:56:e4:55:4b:17:ed:73:58:92:b2:de:39: eb:46:ff:1d:ec:70:ec:b9:a0:43:85:16:79:c8:1a: 42:ba:24:4e:c8:70:d1:4f:05:58:9d:af:b5:21:10: d5:74:ff:fb:8d:6f:26:8c:bb:47:2e:aa:be:49:c0: c1:76:f4:e1:ef:9d:8c:df:84:61:57:94:6f:3d:b7: d4:b3:4a:34:f6:c7:32:ff:33:66:97:03:1b:51:87: 82:0f:d9:7e:fb:15:c0:af:73:67:b9:0f:fe:bd:8e: 2b:2f:e4:03:ee:e5:a7:ee:e4:f4:0e:c8:05:9a:2b: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C0:4D:72:84:E8:49:63:A4:4C:E2:8A:C8:AE:53:8F:35:85:D9:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:8a:dd:c7:8c:13:92:97:6c:71:94:f4:eb:d0:4d:36:90:7d: fa:14:3c:dd:d7:71:f0:9b:1f:b6:0a:a6:27:f2:71:63:66:38: 92:f1:bb:0c:35:d9:02:77:79:6c:3b:cc:aa:b5:ea:a6:6b:10: a1:01:b1:f2:54:fc:ee:6f:dd:65:d5:8b:3b:17:77:df:25:67: e2:dc:17:96:cb:7a:ba:83:9b:6f:2e:d1:fe:7f:65:c7:57:66: 53:ce:df:df:54:ba:55:09:dc:0c:d1:d5:51:35:c0:09:7c:01: 36:44:bf:fa:be:3b:c0:ea:d9:cf:cc:5c:d4:28:b9:ec:38:0d: 95:32:52:69:5d:29:1c:d3:0f:7b:8d:ae:d1:87:29:37:cd:74: fc:4c:f9:c4:aa:af:9f:d5:58:bb:a5:72:a0:1d:35:4b:e1:d4: 55:21:c1:36:58:57:20:3c:e3:f4:0d:ab:fa:d8:44:f9:9d:66: e2:a8:e2:fd:47:7b:07:c0:28:b5:fb:e1:71:62:35:56:13:e1: 14:c9:78:55:02:c8:b1:00:1a:9a:d1:c8:2b:55:49:dd:3f:a5: 05:e2:0d:6f:07:23:d1:6b:d0:6b:a0:4f:d3:e5:fd:e5:14:56: 70:d1:1f:2c:33:cd:32:4b:b0:e4:40:47:58:3a:c4:18:05:5b: fd:6b:db:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt8h1jwWE+oJy5TawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk OWNiY2Y1ZGQtN2Y2Mi00MDdjLTg5YzQtNTM0NzE3MjBmYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGs4Tv4KJcCDr/aC2urCeaujMnLiTzIboxct VrtsonZDYYqGvC4Ax6Ju3QTK4iRAb5tGeFDuTBidY0ycp80pv3eZGUEYYDKZQ6WF ssLbgJHU4CTxRpWswJ/JahfprVOhupBcfi9Y9qzcgTkDOmlCFgA7IYvqz95PPOcm saowkSA22rsbBhQuqU5W5FVLF+1zWJKy3jnrRv8d7HDsuaBDhRZ5yBpCuiROyHDR TwVYna+1IRDVdP/7jW8mjLtHLqq+ScDBdvTh752M34RhV5RvPbfUs0o09scy/zNm lwMbUYeCD9l++xXAr3NnuQ/+vY4rL+QD7uWn7uT0DsgFmivl2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHATXKE6EljpEziisiuU481hdnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWJjMDhhMGQtZmRiZS0z OWJiLThlYjAtNzVlNzYyOTM0MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiK3ceME5KXbHGU9OvQTTaQffoUPN3XcfCbH7YKpifycWNmOJLxuww1 2QJ3eWw7zKq16qZrEKEBsfJU/O5v3WXVizsXd98lZ+LcF5bLerqDm28u0f5/ZcdX ZlPO399UulUJ3AzR1VE1wAl8ATZEv/q+O8Dq2c/MXNQouew4DZUyUmldKRzTD3uN rtGHKTfNdPxM+cSqr5/VWLulcqAdNUvh1FUhwTZYVyA84/QNq/rYRPmdZuKo4v1H ewfAKLX74XFiNVYT4RTJeFUCyLEAGprRyCtVSd0/pQXiDW8HI9Fr0GugT9Pl/eUU VnDRHywzzTJLsORAR1g6xBgFW/1r2x4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:57:00 2025 by rpki-client