$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d6c9261-14f2-3379-9ef4-71f0f732abbe.roa File: 0d6c9261-14f2-3379-9ef4-71f0f732abbe.roa (raw, json) Hash identifier: o8fQLbPCm6rnj+v2Y7s7B+bcZvEugrQ1+QdbYiHFu+4= Subject key identifier: E3:2A:23:03:E8:CD:23:14:6D:67:21:6B:2B:7B:29:AA:EA:60:42:98 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E510CF41279EBE4BF38B40 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d6c9261-14f2-3379-9ef4-71f0f732abbe.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 192.119.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:10:cf:41:27:9e:be:4b:f3:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=f49609c4-1e52-4605-8c86-a0a2b1e8e3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:79:fd:57:36:94:18:ab:70:f3:49:64:4b:7a: d2:75:00:7d:d6:34:7e:04:55:e5:07:b6:ac:27:f5: 55:fc:ee:a0:c5:f5:da:4d:f1:12:37:1d:78:c7:97: b4:16:88:da:c0:8a:f9:2a:b1:96:ed:2b:f9:79:6b: 3b:1f:2e:26:cf:d3:ae:b7:c2:ec:2c:6a:56:27:2f: a4:f7:39:e0:48:e3:53:70:6a:43:10:46:74:2b:0e: 18:c3:fd:46:7e:75:4e:8e:41:ff:a0:a6:69:d2:71: fd:19:24:56:ee:2f:bb:e4:b8:68:75:b5:c8:64:f2: b8:6e:63:a0:8c:e9:d5:3f:d4:ff:b5:88:99:f1:20: d1:d3:4d:72:af:a7:f1:12:0f:d8:19:01:34:42:57: f4:3b:23:4d:c7:8f:38:94:56:05:ed:08:bb:cc:29: c9:75:c3:b1:95:f6:02:ec:02:0b:71:82:42:d2:0f: a9:51:b4:f7:fc:86:5b:07:8f:2b:81:43:41:e1:b7: dd:8a:53:ec:fb:80:b3:64:8d:93:06:ff:fa:91:c1: 9f:07:0d:e9:19:db:4a:9b:29:97:34:45:68:c0:f2: 2d:f9:61:e0:04:f9:9d:84:31:bf:b2:b4:42:67:f9: 99:47:e1:96:40:fb:03:73:20:c7:a4:ec:72:37:1d: 22:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:2A:23:03:E8:CD:23:14:6D:67:21:6B:2B:7B:29:AA:EA:60:42:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0d6c9261-14f2-3379-9ef4-71f0f732abbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:06:9a:c4:61:08:fa:b7:77:53:b9:72:0f:10:6c:04:8a:b0: ae:6d:91:2a:74:0d:85:e5:0c:46:66:92:52:47:54:e4:29:a5: 35:36:c6:fc:b0:ae:9a:4f:16:76:fe:70:5f:4f:f5:91:3d:c4: 42:56:78:21:4e:1c:c8:45:be:d8:7b:26:37:52:6e:d8:bd:f0: 0e:ae:15:51:f1:b6:7a:17:52:65:0f:d3:b8:d6:1e:5f:59:8c: 4c:b7:17:d0:94:cd:03:60:1b:4b:91:72:8c:cf:4f:c8:14:fd: 7f:98:dc:86:1d:d1:46:c5:cc:40:2d:56:7b:f7:18:68:ab:6f: c0:31:ac:1c:53:98:56:af:d5:cd:36:8f:8f:70:96:0d:af:70: 39:b5:b6:bf:e9:96:f6:10:d2:52:74:ec:11:cb:e6:a4:a0:b4: 5c:6c:da:ae:38:e6:29:c9:e3:a0:61:6e:97:31:0e:71:68:e8: d2:25:c7:ca:c1:5b:9a:f8:df:2f:5a:86:1b:10:d2:d0:d1:f7: 40:63:6b:90:cd:03:14:23:10:81:15:bd:fd:0f:b9:ca:b9:71: c0:29:0d:62:ed:87:9d:88:c2:c4:67:a0:10:67:e2:f3:37:39: f9:6b:83:dd:c4:bc:bb:18:4d:51:8e:49:60:b1:66:ad:3c:db: b8:66:8c:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RDPQSeevkvzi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ZjQ5NjA5YzQtMWU1Mi00NjA1LThjODYtYTBhMmIxZThlM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnn9VzaUGKtw80lkS3rSdQB91jR+BFXlB7as J/VV/O6gxfXaTfESNx14x5e0FojawIr5KrGW7Sv5eWs7Hy4mz9Out8LsLGpWJy+k 9zngSONTcGpDEEZ0Kw4Yw/1GfnVOjkH/oKZp0nH9GSRW7i+75LhodbXIZPK4bmOg jOnVP9T/tYiZ8SDR001yr6fxEg/YGQE0Qlf0OyNNx484lFYF7Qi7zCnJdcOxlfYC 7AILcYJC0g+pUbT3/IZbB48rgUNB4bfdilPs+4CzZI2TBv/6kcGfBw3pGdtKmymX NEVowPIt+WHgBPmdhDG/srRCZ/mZR+GWQPsDcyDHpOxyNx0iWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMqIwPozSMUbWchayt7KarqYEKYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGQ2YzkyNjEtMTRmMi0z Mzc5LTllZjQtNzFmMGY3MzJhYmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4GmsRhCPq3d1O5cg8QbASKsK5tkSp0DYXlDEZmklJHVOQppTU2xvyw rppPFnb+cF9P9ZE9xEJWeCFOHMhFvth7JjdSbti98A6uFVHxtnoXUmUP07jWHl9Z jEy3F9CUzQNgG0uRcozPT8gU/X+Y3IYd0UbFzEAtVnv3GGirb8AxrBxTmFav1c02 j49wlg2vcDm1tr/plvYQ0lJ07BHL5qSgtFxs2q445inJ46BhbpcxDnFo6NIlx8rB W5r43y9ahhsQ0tDR90Bja5DNAxQjEIEVvf0Pucq5ccApDWLth52IwsRnoBBn4vM3 Oflrg93EvLsYTVGOSWCxZq0827hmjNU= -----END CERTIFICATE-----Generated at Fri Apr 17 15:36:07 2026 by rpki-client