$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa File: 1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa (raw, json) Hash identifier: 4IgsxObgS/uM06kvuLMWND2SfyQIw2Kls9OEHEjy0QM= Subject key identifier: 37:E0:7A:A6:A8:7B:61:62:4F:15:8C:77:2F:04:F0:F6:FB:2C:E1:CE Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F50422F294573502F3D0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f5:04:22:f2:94:57:35:02:f3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=7142038d-f3fe-48aa-9278-adb127e85a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:6d:28:d4:17:7f:27:df:55:28:04:74:80: 34:3e:0c:b3:be:a3:05:a4:92:c5:dc:84:3b:62:68: f2:5b:ae:5a:ee:5a:3a:d6:e9:5c:8a:8e:67:97:5b: 78:2c:47:3c:76:a7:b5:b2:97:00:ed:2d:77:08:6c: 28:52:21:f0:7a:8e:e0:ac:c2:09:fc:1d:4b:07:64: 21:67:c8:a7:86:2c:df:eb:6c:a8:ed:e0:f0:f5:e9: f1:be:05:27:b8:b6:3c:97:a6:d1:41:59:7a:66:62: 2b:55:cf:e8:46:27:04:50:5b:5b:15:b1:88:bd:2e: 94:64:8f:3c:7f:4a:b7:26:48:a7:7d:16:dd:8a:67: 42:58:07:58:bc:b6:54:ac:66:88:50:0b:2b:41:16: a1:b4:47:f4:1f:9f:b4:ef:ba:91:25:71:84:78:17: cf:82:31:3a:57:5b:29:66:cd:cd:9d:76:b6:ac:25: 40:9c:c5:ed:6b:2e:ed:9b:63:bd:3b:9e:9c:31:cd: 6b:31:f2:5c:ba:c4:d8:2c:0e:18:d7:51:be:9b:f3: d9:71:f8:a4:be:38:5c:8f:57:12:1a:e1:58:98:cb: d5:44:ed:99:52:9a:4d:17:f8:3a:68:8a:87:a2:0b: d3:a5:84:14:f1:ac:ac:5a:c7:8e:0d:67:2f:88:26: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:E0:7A:A6:A8:7B:61:62:4F:15:8C:77:2F:04:F0:F6:FB:2C:E1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1a5d9d0a-3d4b-3a09-a466-aaa141e8b213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:28:02:99:2a:6f:94:c6:5d:f6:3d:11:c8:f5:96:ba:4b:07: a8:ff:d4:bc:be:8e:4e:b1:97:af:19:0f:76:29:43:3d:03:48: 6e:e3:89:22:35:97:21:5c:58:5a:d7:7d:72:4b:38:02:00:8c: 5a:86:5a:db:59:a4:51:bb:82:c2:5e:ed:dd:fa:0c:59:75:de: 5f:ba:ab:d3:f0:26:e4:86:d3:26:3c:3b:3e:29:37:9a:9d:cc: 94:4c:e2:06:66:45:58:b5:6b:0b:b8:6a:08:d9:17:57:89:19: 43:8e:b6:85:4d:83:76:33:93:92:fe:0b:1c:24:f2:3a:e6:48: 6c:cc:17:a4:62:18:24:d9:0b:5a:0e:3b:e4:5f:1c:4a:f8:67: 03:e2:81:1e:74:8d:6f:19:0a:1c:7d:c0:12:2b:f5:f4:d9:a7: 74:2d:95:11:8b:62:bd:23:53:86:66:01:9e:fe:6f:26:3a:be: 6a:a1:2e:25:30:2a:4a:93:ab:99:a1:c2:71:45:57:76:00:4d: c2:33:a4:25:f4:b0:52:f1:a3:ce:f5:9e:a8:64:1d:a2:df:01: 06:65:f7:c4:60:fe:14:c1:3b:4d:04:25:df:d2:63:a8:68:31: 92:3a:58:19:84:91:60:09:9e:80:9f:c1:68:f5:1e:4c:ef:49: e5:47:31:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvUEIvKUVzUC89AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NzE0MjAzOGQtZjNmZS00OGFhLTkyNzgtYWRiMTI3ZTg1YTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJJtKNQXfyffVSgEdIA0PgyzvqMFpJLF3IQ7 YmjyW65a7lo61ulcio5nl1t4LEc8dqe1spcA7S13CGwoUiHweo7grMIJ/B1LB2Qh Z8inhizf62yo7eDw9enxvgUnuLY8l6bRQVl6ZmIrVc/oRicEUFtbFbGIvS6UZI88 f0q3JkinfRbdimdCWAdYvLZUrGaIUAsrQRahtEf0H5+077qRJXGEeBfPgjE6V1sp Zs3NnXa2rCVAnMXtay7tm2O9O56cMc1rMfJcusTYLA4Y11G+m/PZcfikvjhcj1cS GuFYmMvVRO2ZUppNF/g6aIqHogvTpYQU8aysWseODWcviCYMlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDfgeqaoe2FiTxWMdy8E8Pb7LOHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWE1ZDlkMGEtM2Q0Yi0z YTA5LWE0NjYtYWFhMTQxZThiMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHooApkqb5TGXfY9Ecj1lrpLB6j/1Ly+jk6xl68ZD3YpQz0DSG7jiSI1 lyFcWFrXfXJLOAIAjFqGWttZpFG7gsJe7d36DFl13l+6q9PwJuSG0yY8Oz4pN5qd zJRM4gZmRVi1awu4agjZF1eJGUOOtoVNg3Yzk5L+Cxwk8jrmSGzMF6RiGCTZC1oO O+RfHEr4ZwPigR50jW8ZChx9wBIr9fTZp3QtlRGLYr0jU4ZmAZ7+byY6vmqhLiUw KkqTq5mhwnFFV3YATcIzpCX0sFLxo871nqhkHaLfAQZl98Rg/hTBO00EJd/SY6ho MZI6WBmEkWAJnoCfwWj1HkzvSeVHMcU= -----END CERTIFICATE-----Generated at Sun Mar 1 20:45:56 2026 by rpki-client