$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa File: 0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa (raw, json) Hash identifier: 95in21jGmiRxd/yUu52Owcpj9wRaLZeZkDQNSrEvasU= Subject key identifier: AE:C6:CA:FA:77:D0:1E:7C:7A:61:7B:6C:15:E0:5C:5A:8C:BB:B1:2F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046CA1B04BE4C634107F9C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:ca:1b:04:be:4c:63:41:07:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=877f3654-d855-4da7-bcd0-e2ff3230f78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:b7:4e:19:8e:6c:d6:15:99:68:fb:ec:67: 5c:fc:87:54:ca:f4:0c:5b:0e:2b:b4:30:c1:a1:ab: 60:d9:d9:63:e2:89:ab:be:c9:56:d8:47:c8:6f:67: c2:71:6c:90:a1:3d:6d:04:c6:c5:c5:9a:ca:48:69: ee:2f:87:37:93:c1:71:f9:58:82:e2:e4:36:11:76: 19:12:10:a4:f2:3d:8c:9f:37:f1:2c:47:ea:6b:3b: 2e:69:67:15:c8:38:c4:ba:0d:a0:8e:64:e3:40:9f: 6e:6c:6b:f9:cf:eb:f8:27:ae:af:6b:25:f8:2c:a9: 00:d9:42:29:ed:3b:5c:f0:b7:41:0b:3e:bf:6a:10: e7:c1:9f:33:f4:41:4a:a0:7b:f8:a2:56:ea:69:97: a7:48:2e:a8:eb:33:57:4f:1e:44:2b:25:cd:f9:d1: 10:cb:a7:4e:3a:48:36:2e:66:f8:fb:8c:bb:9e:85: ff:6d:5a:71:9d:dd:e3:fe:0c:8d:84:00:57:58:3b: 6b:ab:af:b7:f2:66:6c:13:af:9d:3d:b9:e3:90:71: cd:41:ef:0b:3f:f2:98:17:cf:2a:bf:c1:59:53:f8: 6a:01:4b:de:16:11:6a:29:86:da:50:20:d4:33:61: 91:0a:b5:ad:07:14:99:9c:d9:21:12:3a:05:df:14: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:C6:CA:FA:77:D0:1E:7C:7A:61:7B:6C:15:E0:5C:5A:8C:BB:B1:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f7:b7:a7:d9:92:01:83:54:fd:4e:e7:49:4f:7c:1b:e7:f5: a4:68:be:15:fb:a4:3e:af:e9:01:70:13:70:7b:2f:74:98:29: a8:c4:94:a1:0c:3c:0a:c6:5d:2c:50:2a:c7:c1:69:87:a0:71: 64:2e:8b:1f:89:c3:ad:9a:29:b0:8e:cd:53:a3:77:3c:9a:9f: 50:a2:8e:46:22:37:04:d2:10:63:0c:cc:9f:ab:c1:3c:c7:ad: 1b:6c:af:c9:45:25:de:da:8b:16:f0:29:e4:91:98:5c:0e:9d: 1a:4e:69:a0:f2:42:e7:7e:bc:9c:06:c1:45:02:10:39:e3:67: 5c:a3:a4:12:a3:43:a1:b2:b2:07:78:4c:7f:f2:ed:5d:b7:59: 88:a5:de:c0:94:7a:87:8b:85:3e:66:56:02:ae:1d:0a:fe:2e: 32:f6:62:ef:f8:92:87:ba:00:cf:65:6d:96:c1:f1:5c:8e:37: cc:ee:bc:34:33:b4:82:3e:4b:e3:d8:e3:99:50:ca:bb:3c:be: a6:eb:55:2e:e8:23:d0:9e:9c:45:ca:e3:43:c6:c8:4a:1e:60: 00:7f:7f:45:ef:8d:43:3d:37:6a:1e:41:79:87:5a:3c:cb:3a: a5:ff:cb:9a:92:08:ea:7c:2e:ff:53:f9:8e:b2:0a:a0:df:a2: 0a:75:ab:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsobBL5MY0EH+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODc3ZjM2NTQtZDg1NS00ZGE3LWJjZDAtZTJmZjMyMzBmNzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHy3ThmObNYVmWj77Gdc/IdUyvQMWw4rtDDB oatg2dlj4omrvslW2EfIb2fCcWyQoT1tBMbFxZrKSGnuL4c3k8Fx+ViC4uQ2EXYZ EhCk8j2MnzfxLEfqazsuaWcVyDjEug2gjmTjQJ9ubGv5z+v4J66vayX4LKkA2UIp 7Ttc8LdBCz6/ahDnwZ8z9EFKoHv4olbqaZenSC6o6zNXTx5EKyXN+dEQy6dOOkg2 Lmb4+4y7noX/bVpxnd3j/gyNhABXWDtrq6+38mZsE6+dPbnjkHHNQe8LP/KYF88q v8FZU/hqAUveFhFqKYbaUCDUM2GRCrWtBxSZnNkhEjoF3xT8swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7Gyvp30B58emF7bBXgXFqMu7EvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMDg3NjI3OGUtZTQzNC0z YjVmLWIxZmYtYjQyZjU3MWM2ZjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT3t6fZkgGDVP1O50lPfBvn9aRovhX7pD6v6QFwE3B7L3SYKajElKEM PArGXSxQKsfBaYegcWQuix+Jw62aKbCOzVOjdzyan1CijkYiNwTSEGMMzJ+rwTzH rRtsr8lFJd7aixbwKeSRmFwOnRpOaaDyQud+vJwGwUUCEDnjZ1yjpBKjQ6Gysgd4 TH/y7V23WYil3sCUeoeLhT5mVgKuHQr+LjL2Yu/4koe6AM9lbZbB8VyON8zuvDQz tII+S+PY45lQyrs8vqbrVS7oI9CenEXK40PGyEoeYAB/f0XvjUM9N2oeQXmHWjzL OqX/y5qSCOp8Lv9T+Y6yCqDfogp1q9M= -----END CERTIFICATE-----Generated at Mon Mar 2 00:39:58 2026 by rpki-client