$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa File: ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa (raw, json) Hash identifier: WdceWXpfthGSPHrUYn87NvOP9nbAYJ9n5jwfSIv3HcY= Subject key identifier: 0F:14:1E:FC:E7:3B:4A:9B:75:12:27:07:C8:72:CF:D1:4A:DA:39:4C Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584B52A77EF84099C126BE1B1C28 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 19637 IP address blocks: 192.19.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:7e:f8:40:99:c1:26:be:1b:1c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=b55430ce-0a66-439c-9905-6b4dd88589ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:c3:08:91:84:22:a4:86:e3:3a:48:75:f7: 00:d1:d6:75:d9:15:3e:10:ec:80:2a:cc:08:db:b6: ea:48:41:2d:8b:de:6d:84:ce:36:46:9f:c3:02:08: 64:8c:63:88:66:1a:ad:d9:f4:c4:99:87:c4:ad:79: cf:e9:c0:94:22:af:e2:e8:8f:13:3c:e7:c2:ff:cc: db:dd:3c:c7:82:89:f3:d0:f6:31:17:ea:d3:a1:8a: e1:78:67:45:45:d2:f7:4a:97:7b:29:f2:80:e3:8c: 5b:9e:47:21:68:ca:1c:b6:e2:0b:66:36:3a:20:e3: 2d:f8:bc:89:1d:30:64:ca:99:8b:dd:80:e8:d0:d8: 8c:97:e4:0d:55:2b:73:f3:12:b8:76:f1:f8:4c:aa: 64:91:94:03:70:75:77:4f:3f:c3:f4:6a:ab:fa:02: b2:2e:c5:9f:87:f3:7c:0c:ea:02:b1:45:17:2a:74: 09:42:cd:c7:70:ed:f9:b6:47:05:3f:d4:dd:3c:3b: 07:1b:97:98:43:fc:87:1b:99:dd:fe:af:a6:bf:0e: e4:b3:36:11:dd:1d:da:ba:2f:7d:e4:d5:3d:dc:8e: 9a:9f:e4:9c:6c:fa:ce:ae:68:a0:47:02:0e:f1:ca: 67:7e:20:8c:18:44:36:21:9a:83:10:07:b6:ba:95: a7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:14:1E:FC:E7:3B:4A:9B:75:12:27:07:C8:72:CF:D1:4A:DA:39:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/ec8ede4c-5342-3d45-bbe9-b4e0a27fd416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:01:4a:be:39:af:73:00:f9:37:b8:05:20:00:0b:0c:2f:22: e8:a9:ed:b4:06:97:04:4c:48:16:5e:f6:42:37:2b:35:21:43: 13:5a:4c:24:af:ba:0b:e5:1a:ed:b5:da:a9:b8:7e:16:da:37: 88:5d:ec:52:31:f4:a8:cf:ca:3f:5a:01:55:8b:97:0a:61:86: 88:1f:80:a8:ad:41:30:14:4c:64:33:92:ab:c7:d4:6e:08:8f: 9b:33:f4:dd:d3:42:6a:d7:09:fd:37:02:8a:f0:73:e1:8d:0a: b4:ae:3e:4a:be:11:a4:09:44:f5:21:a2:49:11:a0:80:0b:ce: c6:d5:a5:4e:26:03:08:97:6b:d3:8f:b8:c2:8e:4c:50:22:aa: 1d:d5:9c:34:67:b4:e3:57:f9:de:ab:fa:6f:37:3d:e2:52:ba: 2a:e3:a2:b5:b9:98:7b:5b:bf:ec:73:e9:ac:64:c7:2f:a4:2e: 30:dc:48:aa:6f:f9:35:0e:5b:b5:4d:6d:e6:07:91:e0:4a:a0: 39:02:61:a5:48:96:39:97:7d:bc:0e:3b:6f:fc:b7:f8:76:f6: e9:6e:4b:ea:f7:a7:8e:7b:a9:22:44:40:38:09:f2:b1:bb:09: 0b:99:75:00:88:51:b4:41:b9:0a:60:d6:a3:06:ba:aa:25:4b: 8b:c2:ca:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp374QJnBJr4bHCgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk YjU1NDMwY2UtMGE2Ni00MzljLTk5MDUtNmI0ZGQ4ODU4OWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr/DCJGEIqSG4zpIdfcA0dZ12RU+EOyAKswI 27bqSEEti95thM42Rp/DAghkjGOIZhqt2fTEmYfErXnP6cCUIq/i6I8TPOfC/8zb 3TzHgonz0PYxF+rToYrheGdFRdL3Spd7KfKA44xbnkchaMoctuILZjY6IOMt+LyJ HTBkypmL3YDo0NiMl+QNVStz8xK4dvH4TKpkkZQDcHV3Tz/D9Gqr+gKyLsWfh/N8 DOoCsUUXKnQJQs3HcO35tkcFP9TdPDsHG5eYQ/yHG5nd/q+mvw7kszYR3R3aui99 5NU93I6an+ScbPrOrmigRwIO8cpnfiCMGEQ2IZqDEAe2upWndQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA8UHvznO0qbdRInB8hyz9FK2jlMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvZWM4ZWRlNGMtNTM0Mi0z ZDQ1LWJiZTktYjRlMGEyN2ZkNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBPfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUBSr45r3MA+Te4BSAACwwvIuip7bQGlwRMSBZe9kI3KzUhQxNaTCSv ugvlGu212qm4fhbaN4hd7FIx9KjPyj9aAVWLlwphhogfgKitQTAUTGQzkqvH1G4I j5sz9N3TQmrXCf03Aorwc+GNCrSuPkq+EaQJRPUhokkRoIALzsbVpU4mAwiXa9OP uMKOTFAiqh3VnDRntONX+d6r+m83PeJSuirjorW5mHtbv+xz6axkxy+kLjDcSKpv +TUOW7VNbeYHkeBKoDkCYaVIljmXfbwOO2/8t/h29uluS+r3p457qSJEQDgJ8rG7 CQuZdQCIUbRBuQpg1qMGuqolS4vCym8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:23:28 2025 by rpki-client