$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16181e35-7528-364a-bbb5-57306a21ee81.roa File: 16181e35-7528-364a-bbb5-57306a21ee81.roa (raw, json) Hash identifier: eREXtThWppH7Q7T3kbbA0HR2B/GVof99R5aZ6zNyn14= Subject key identifier: A9:59:30:E7:2F:1A:A0:94:8D:D9:7F:68:1B:2A:1D:A0:28:2F:3C:B9 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F4950273A7E7AD446100 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16181e35-7528-364a-bbb5-57306a21ee81.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f4:95:02:73:a7:e7:ad:44:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=85ef3d5f-8f78-43fe-b7c1-b03d3df9da7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:d0:fa:66:1d:ae:e4:7b:94:7f:f6:62:e3: 1b:43:9c:3f:97:11:30:5e:dc:77:cf:83:a5:cf:07: 69:49:ae:04:9b:a0:a6:6e:4f:99:10:f4:4c:fb:5a: 39:7f:d3:45:12:b4:50:2b:98:a0:36:16:8b:24:1c: ab:90:75:a0:51:21:d6:7f:f5:06:45:68:7a:fb:32: 1a:e9:97:8e:1a:8a:a7:1c:28:dc:31:7f:a4:58:5b: 30:72:65:a3:a5:59:3a:a0:ee:e7:0c:65:2c:ca:57: 5a:6d:25:fc:62:1b:b8:59:8c:12:7d:ba:e9:9e:a8: fe:69:58:a0:ce:10:3d:7a:56:63:b0:5e:23:f1:40: d2:e8:5f:35:e2:69:fb:a4:a1:4c:e5:7a:5d:e7:63: 81:ba:f3:e1:c6:36:55:ed:f6:1c:0d:46:4a:7e:2e: 30:47:fa:b5:e9:09:83:f7:16:8e:fc:6a:a5:be:01: 69:3d:94:f1:57:90:78:97:f4:3d:6d:88:9c:48:ad: 4e:26:19:04:d5:cc:7c:4e:49:1a:0d:9c:e4:fe:28: 0d:2c:e1:3e:f8:60:a8:8a:27:b6:a1:2d:0c:0c:ce: 92:af:32:41:a6:78:91:85:8e:6e:92:39:96:ca:8a: b3:af:00:25:b1:65:59:ae:72:91:ac:9c:58:8f:4b: ff:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:59:30:E7:2F:1A:A0:94:8D:D9:7F:68:1B:2A:1D:A0:28:2F:3C:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/16181e35-7528-364a-bbb5-57306a21ee81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a5:40:38:3b:ca:e2:c1:83:b7:48:c4:e4:96:6d:b9:92:88: f3:62:b9:11:67:70:3e:15:3f:a1:8a:64:95:2f:03:9d:d7:da: 75:72:49:81:e5:1f:0f:36:d0:a9:39:e4:83:51:12:8c:82:48: 7d:7a:af:18:a5:87:bf:3c:1f:46:4c:ea:0a:b6:7e:e4:c6:2b: 72:6e:ab:5e:0d:cd:b6:91:72:b8:50:4e:dd:85:d2:c9:f6:61: cc:77:88:37:35:20:95:25:ca:66:21:27:7e:10:06:fe:42:04: 6c:96:a3:1a:f8:6f:0d:d0:75:5a:1d:e2:59:b3:80:90:e6:68: 8c:ac:75:87:d3:39:01:f7:9f:d0:bb:30:33:ae:d7:38:24:3a: 54:2d:1b:18:b4:c4:90:27:b4:21:64:f2:de:17:7f:6d:ed:04: a7:2e:d2:31:7f:25:8a:ed:05:49:c4:da:a1:73:03:40:42:fe: cb:7b:a5:b5:75:e6:17:37:91:34:ce:fa:ed:99:cd:a2:2c:55: a2:a5:f1:1b:b3:1e:78:ae:53:e1:85:68:c2:65:60:62:e3:55: ab:63:dc:47:a6:74:fe:e5:2d:a0:7e:da:a5:d7:ac:a6:09:7c: c9:43:30:a7:c6:56:39:7a:b6:75:be:48:82:09:90:dd:09:8d: 28:79:60:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvSVAnOn561EYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODVlZjNkNWYtOGY3OC00M2ZlLWI3YzEtYjAzZDNkZjlkYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40HQ+mYdruR7lH/2YuMbQ5w/lxEwXtx3z4Ol zwdpSa4Em6Cmbk+ZEPRM+1o5f9NFErRQK5igNhaLJByrkHWgUSHWf/UGRWh6+zIa 6ZeOGoqnHCjcMX+kWFswcmWjpVk6oO7nDGUsyldabSX8Yhu4WYwSfbrpnqj+aVig zhA9elZjsF4j8UDS6F814mn7pKFM5Xpd52OBuvPhxjZV7fYcDUZKfi4wR/q16QmD 9xaO/GqlvgFpPZTxV5B4l/Q9bYicSK1OJhkE1cx8TkkaDZzk/igNLOE++GCoiie2 oS0MDM6SrzJBpniRhY5ukjmWyoqzrwAlsWVZrnKRrJxYj0v/wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlZMOcvGqCUjdl/aBsqHaAoLzy5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTYxODFlMzUtNzUyOC0z NjRhLWJiYjUtNTczMDZhMjFlZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWlQDg7yuLBg7dIxOSWbbmSiPNiuRFncD4VP6GKZJUvA53X2nVySYHl Hw820Kk55INREoyCSH16rxilh788H0ZM6gq2fuTGK3Juq14NzbaRcrhQTt2F0sn2 Ycx3iDc1IJUlymYhJ34QBv5CBGyWoxr4bw3QdVod4lmzgJDmaIysdYfTOQH3n9C7 MDOu1zgkOlQtGxi0xJAntCFk8t4Xf23tBKcu0jF/JYrtBUnE2qFzA0BC/st7pbV1 5hc3kTTO+u2ZzaIsVaKl8RuzHniuU+GFaMJlYGLjVatj3EemdP7lLaB+2qXXrKYJ fMlDMKfGVjl6tnW+SIIJkN0JjSh5YFo= -----END CERTIFICATE-----Generated at Sun Mar 1 21:06:23 2026 by rpki-client