$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa File: 2b46d545-80ed-316a-9f61-25e9d1763c81.roa (raw, json) Hash identifier: TRsOfGTjZTl6prraG9s6HCnuzOC4EnnVeKf1dJpkaAY= Subject key identifier: 4E:BF:D5:E1:8E:A0:E8:7A:4D:1E:70:0C:5E:65:82:75:B3:C8:D0:09 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E4F08B491F901471EFD800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 198.40.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f0:8b:49:1f:90:14:71:ef:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=5a8c0633-e402-492d-89ca-554226a33c61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f3:94:f8:48:91:7e:74:a9:be:5b:e8:1d:aa: 16:68:ed:ee:c0:f7:37:34:52:76:90:61:4f:a1:a2: 93:81:39:94:8d:24:86:7a:02:32:78:f8:b6:72:bc: 44:c6:ff:84:c3:36:99:fb:05:f4:dd:35:f9:4c:3f: 56:e6:e2:b9:39:45:70:e2:75:4e:ba:78:75:c9:b4: 6c:c2:6c:0a:56:ad:3e:b8:a3:38:fa:47:fd:6b:73: 32:73:88:6b:d0:7b:f7:ba:5e:d8:ae:02:6b:97:ae: 20:f9:05:41:29:36:b4:45:11:82:37:ec:1b:4b:c7: f2:5f:49:51:44:90:84:0b:82:ab:3f:2e:d3:84:9b: ab:66:ca:e0:41:44:0c:02:b5:4b:be:37:41:ce:c9: 10:ef:20:97:14:46:af:a8:3b:e4:2a:57:f4:e7:14: fb:bb:2c:2b:77:78:1a:29:f9:38:f5:f5:f6:ee:00: a3:ef:71:5d:86:bf:49:cf:e7:95:ca:1e:73:d2:9c: 5f:fe:d9:4e:c5:5f:ef:f9:b6:dc:6b:b8:5e:f5:0f: 30:66:5d:5b:56:32:44:2a:5f:b7:70:32:6b:bd:4c: 65:66:61:47:98:10:74:0c:4d:af:a9:04:86:c2:56: ad:cd:fc:d8:41:0a:ff:52:9a:7a:1b:93:5c:77:68: 85:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:D5:E1:8E:A0:E8:7A:4D:1E:70:0C:5E:65:82:75:B3:C8:D0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:06:ef:70:01:9d:ad:1f:b6:2c:1b:42:e4:94:0a:04:96:b1: 12:1a:da:2f:37:6f:28:bb:03:fe:67:7f:d9:e5:52:d9:1c:8a: f4:a3:e7:77:75:73:06:7d:4b:ba:19:ad:dd:59:c0:3e:38:27: 10:c4:89:b7:a6:de:ae:b6:7e:d5:46:8c:4e:63:81:6e:26:06: 07:2a:8e:98:45:2c:74:b2:41:86:c8:52:cc:30:ca:b4:b0:84: 03:21:41:6d:3a:f9:7a:46:1a:a0:e2:9d:be:f6:de:28:11:d5: 78:17:79:c0:40:53:b9:8d:aa:aa:c3:0d:99:6a:9c:00:03:a9: 1f:4d:be:a3:8e:b8:8f:15:1d:c9:e7:cb:84:79:bf:71:2b:a9: 3a:db:63:35:75:1b:ab:56:c4:ae:00:a3:a3:09:aa:27:94:ca: bf:4a:50:fb:b4:53:6a:15:fa:48:fc:2d:34:44:01:17:88:7b: b7:5b:ca:60:e2:7f:61:66:39:08:25:a9:97:8b:b6:ec:b7:a6: 48:f7:bf:5c:0f:a8:6a:5b:ba:31:cb:85:10:5e:10:6e:e7:e1: 4b:6b:62:cc:ec:36:8a:00:e7:76:f6:a7:f3:98:58:34:ad:64: c8:90:a1:f4:d7:10:5c:0c:d4:21:9d:2c:8d:31:86:d1:05:6a: c5:a6:5a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PCLSR+QFHHv2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk NWE4YzA2MzMtZTQwMi00OTJkLTg5Y2EtNTU0MjI2YTMzYzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvOU+EiRfnSpvlvoHaoWaO3uwPc3NFJ2kGFP oaKTgTmUjSSGegIyePi2crxExv+EwzaZ+wX03TX5TD9W5uK5OUVw4nVOunh1ybRs wmwKVq0+uKM4+kf9a3Myc4hr0Hv3ul7YrgJrl64g+QVBKTa0RRGCN+wbS8fyX0lR RJCEC4KrPy7ThJurZsrgQUQMArVLvjdBzskQ7yCXFEavqDvkKlf05xT7uywrd3ga Kfk49fX27gCj73Fdhr9Jz+eVyh5z0pxf/tlOxV/v+bbca7he9Q8wZl1bVjJEKl+3 cDJrvUxlZmFHmBB0DE2vqQSGwlatzfzYQQr/Upp6G5Ncd2iFHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6/1eGOoOh6TR5wDF5lgnWzyNAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmI0NmQ1NDUtODBlZC0z MTZhLTlmNjEtMjVlOWQxNzYzYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEG73ABna0ftiwbQuSUCgSWsRIa2i83byi7A/5nf9nlUtkcivSj53d1 cwZ9S7oZrd1ZwD44JxDEibem3q62ftVGjE5jgW4mBgcqjphFLHSyQYbIUswwyrSw hAMhQW06+XpGGqDinb723igR1XgXecBAU7mNqqrDDZlqnAADqR9NvqOOuI8VHcnn y4R5v3ErqTrbYzV1G6tWxK4Ao6MJqieUyr9KUPu0U2oV+kj8LTREAReIe7dbymDi f2FmOQglqZeLtuy3pkj3v1wPqGpbujHLhRBeEG7n4UtrYszsNooA53b2p/OYWDSt ZMiQofTXEFwM1CGdLI0xhtEFasWmWjc= -----END CERTIFICATE-----Generated at Fri Apr 17 18:05:13 2026 by rpki-client