$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa File: 1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa (raw, json) Hash identifier: FCKSYT3nFnC3fEtGtbrbuNhEpGIm29RNYri2mZlD8Sc= Subject key identifier: 2E:A5:38:3E:46:ED:01:60:10:7B:A7:D7:82:1C:C3:DF:45:0F:B4:5A Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E513275EC3824C4DF0EB00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 198.40.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:13:27:5e:c3:82:4c:4d:f0:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=1a0fbc49-ec85-48c8-9a55-9d79fba8c62b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:5f:d9:97:3b:c4:d9:52:81:62:57:49:cb: 1a:87:d2:92:d4:17:05:b6:6f:33:bb:f9:69:0d:87: 65:a1:ec:3a:8e:63:06:ae:ae:8a:f9:0c:07:9a:55: ae:fd:f1:fb:2f:95:c6:2f:4d:79:a5:73:5d:66:d1: e9:56:17:ed:f1:67:c6:f4:fd:33:39:15:da:5c:67: 3b:08:67:93:9a:7f:d2:70:1a:5d:69:a8:a0:29:33: c2:5b:79:06:2f:a8:d9:ab:b4:75:dd:dc:d2:61:65: 6f:dd:cf:a6:86:f5:25:ca:bc:0b:8f:31:39:7a:a6: 28:e1:bb:1a:23:75:a7:ca:f6:f5:5d:f8:a4:da:94: 9b:ad:51:29:e2:85:45:84:ae:bc:82:be:53:c7:b3: c7:ea:6e:9f:4f:93:31:3b:eb:5d:2a:bb:59:14:1a: 6d:3c:c1:43:3c:ac:92:5f:03:e2:4d:ab:91:e9:b9: 1b:f0:29:87:74:54:a2:e9:b5:3b:42:ac:72:c3:1a: 59:b9:1a:7c:5d:1b:73:e3:79:d9:a0:2b:61:dd:2b: e1:f1:17:4d:fd:e7:1e:e5:32:89:25:20:90:0f:ba: ef:92:20:10:0b:d6:e9:e2:6e:88:e4:84:1d:10:a5: c5:b1:58:19:81:9a:c5:ba:0c:99:b4:22:26:d7:dc: 4d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A5:38:3E:46:ED:01:60:10:7B:A7:D7:82:1C:C3:DF:45:0F:B4:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:a7:d7:a0:e4:d4:1b:fa:60:e2:69:d2:e7:9c:11:ab:9b:a1: 04:72:24:83:85:ab:14:ab:f2:73:9c:d4:f4:7c:19:3f:e2:80: 65:62:78:4a:68:02:56:da:1f:b8:c7:ba:65:6d:d8:4f:f5:58: 2f:f0:95:db:82:45:2d:0e:b5:dd:45:53:ce:e6:6c:de:84:25: ad:67:3f:df:0b:58:e4:f3:9b:c8:86:cb:19:42:b1:b9:7e:1e: bc:db:e5:af:f6:5d:09:c6:ef:f1:fb:32:47:f9:21:82:bf:53: 1d:31:b4:b4:02:a2:9e:a3:63:df:be:97:40:91:3b:b6:1e:12: 55:bd:63:d3:05:94:cd:f7:57:d0:36:cd:f5:6f:a6:fe:a3:4c: 82:69:ff:91:bc:e7:de:66:a6:65:38:fd:d7:b0:47:ef:1b:dc: e3:1d:8f:a6:a8:80:9f:b4:ce:d9:4b:29:81:4f:14:e4:fb:6f: 94:bf:b6:72:a1:89:7e:1a:11:da:3c:54:13:7a:f8:98:05:bf: f1:06:5e:97:6c:96:23:39:32:7d:72:a8:89:46:73:17:d9:fb: 44:77:d0:be:f3:34:c4:09:08:e9:d7:e9:42:1d:5e:eb:49:43: 1e:fa:52:2d:4e:e2:7e:94:a4:b8:6b:54:43:ce:5f:49:99:89: 6a:46:5b:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RMnXsOCTE3w6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MWEwZmJjNDktZWM4NS00OGM4LTlhNTUtOWQ3OWZiYThjNjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwONf2Zc7xNlSgWJXScsah9KS1BcFtm8zu/lp DYdloew6jmMGrq6K+QwHmlWu/fH7L5XGL015pXNdZtHpVhft8WfG9P0zORXaXGc7 CGeTmn/ScBpdaaigKTPCW3kGL6jZq7R13dzSYWVv3c+mhvUlyrwLjzE5eqYo4bsa I3Wnyvb1Xfik2pSbrVEp4oVFhK68gr5Tx7PH6m6fT5MxO+tdKrtZFBptPMFDPKyS XwPiTauR6bkb8CmHdFSi6bU7QqxywxpZuRp8XRtz43nZoCth3Svh8RdN/ece5TKJ JSCQD7rvkiAQC9bp4m6I5IQdEKXFsVgZgZrFugyZtCIm19xN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6lOD5G7QFgEHun14Icw99FD7RaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWE1ZDlkMGEtM2Q0Yi0z YTA5LWE0NjYtYWFhMTQxZThiMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKSn16Dk1Bv6YOJp0uecEauboQRyJIOFqxSr8nOc1PR8GT/igGVieEpo AlbaH7jHumVt2E/1WC/wlduCRS0Otd1FU87mbN6EJa1nP98LWOTzm8iGyxlCsbl+ Hrzb5a/2XQnG7/H7Mkf5IYK/Ux0xtLQCop6jY9++l0CRO7YeElW9Y9MFlM33V9A2 zfVvpv6jTIJp/5G8595mpmU4/dewR+8b3OMdj6aogJ+0ztlLKYFPFOT7b5S/tnKh iX4aEdo8VBN6+JgFv/EGXpdsliM5Mn1yqIlGcxfZ+0R30L7zNMQJCOnX6UIdXutJ Qx76Ui1O4n6UpLhrVEPOX0mZiWpGWxE= -----END CERTIFICATE-----Generated at Fri Apr 17 17:08:00 2026 by rpki-client