$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa File: 2b46d545-80ed-316a-9f61-25e9d1763c81.roa (raw, json) Hash identifier: fpINdSpO/4XQgq9b8iTByOK4IhUzCUdIhxhHTj6XUPc= Subject key identifier: BE:73:77:5E:E3:10:0B:3F:0B:06:AD:4B:6B:8D:21:4E:1E:36:E3:0B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C8BD61748B4C9E276780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c8:bd:61:74:8b:4c:9e:27:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=6c7b1d67-91f6-42bb-9f53-082b6134833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:e1:fd:4d:f6:99:51:75:8e:b2:82:a0:2f: 71:17:87:fb:58:cd:e9:89:3a:61:0c:32:1a:85:42: 8f:f7:26:68:5b:9c:e9:b8:c7:ad:b5:3f:31:e4:8a: 7c:b8:f9:7b:9a:cd:8a:6a:ce:5b:f0:2c:57:af:21: f8:57:b7:9a:04:d1:72:13:04:d0:d7:0d:98:5a:1e: ec:76:12:a3:60:2d:6a:a3:c7:4a:50:0b:11:9b:18: 2a:89:83:97:11:bc:c5:8b:89:5a:97:2e:a9:b5:d3: e7:56:13:98:1c:1f:f0:13:14:eb:bc:9f:b9:33:f2: 3e:22:7c:91:8f:2e:67:7e:1d:c5:44:9b:d2:b6:b1: ff:e5:5e:4f:53:5b:f3:8b:9f:52:91:42:88:f3:ee: a4:f7:be:42:16:f5:bf:e1:a1:c7:e5:ea:1a:24:a1: 50:df:f8:79:f7:86:07:7f:88:42:90:b1:2e:47:96: 03:0c:1c:1c:da:02:46:eb:d2:b9:96:c2:6f:69:76: 1a:c0:d0:c4:1c:2d:13:ff:4a:df:e8:96:79:d8:00: 19:8d:06:df:27:13:82:e7:c1:04:d6:56:3e:e0:05: 65:81:6d:12:e2:32:78:fe:5d:41:f8:8e:dd:09:a6: ca:7d:6e:88:a7:af:67:d9:ce:0a:f1:c8:f9:84:7f: 88:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:73:77:5E:E3:10:0B:3F:0B:06:AD:4B:6B:8D:21:4E:1E:36:E3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2b46d545-80ed-316a-9f61-25e9d1763c81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:36:fd:c9:38:63:76:20:6c:2a:ee:00:51:09:32:79:ed:8d: 97:da:24:35:09:01:6a:4a:19:eb:6e:3a:60:00:d1:6a:19:a3: 5d:c4:cf:9d:b4:02:87:09:ee:df:69:0d:ce:21:53:f9:47:89: e0:b4:93:78:5c:39:1d:ad:81:99:e5:86:ac:ca:f4:32:be:38: 85:8f:4e:46:87:50:f3:1f:0d:ec:ba:d1:32:2e:34:6d:61:28: 29:6f:34:80:df:e2:2e:d3:df:94:5e:51:17:01:97:a9:ac:3b: 36:c8:e0:6e:8d:dd:95:c1:ab:4e:f5:38:46:38:4e:40:fa:79: d0:25:ac:9e:09:07:9d:0c:bc:97:9d:22:bf:eb:b5:f0:24:2f: 5e:51:0c:4d:96:d6:e3:c2:a3:8e:0a:a0:f0:b3:46:cb:cc:b7: 3d:e2:c9:5d:88:bd:51:41:e8:8b:d1:24:35:f2:4c:0a:b1:e1: 14:1e:a2:7f:8b:fd:fa:1d:89:74:5c:86:a4:c4:f8:7f:22:c5: 07:28:11:ba:fb:e5:d0:16:3d:ec:a9:1e:d6:2c:34:00:52:a8: e0:c5:66:17:c1:6a:cc:72:e3:28:74:ea:74:0c:ed:4b:75:77: 66:5f:a0:c1:57:ac:42:3d:f9:3e:85:09:5e:b2:41:6b:28:54: 38:5b:d7:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsi9YXSLTJ4nZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NmM3YjFkNjctOTFmNi00MmJiLTlmNTMtMDgyYjYxMzQ4MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAHh/U32mVF1jrKCoC9xF4f7WM3piTphDDIa hUKP9yZoW5zpuMettT8x5Ip8uPl7ms2Kas5b8CxXryH4V7eaBNFyEwTQ1w2YWh7s dhKjYC1qo8dKUAsRmxgqiYOXEbzFi4laly6ptdPnVhOYHB/wExTrvJ+5M/I+InyR jy5nfh3FRJvStrH/5V5PU1vzi59SkUKI8+6k975CFvW/4aHH5eoaJKFQ3/h594YH f4hCkLEuR5YDDBwc2gJG69K5lsJvaXYawNDEHC0T/0rf6JZ52AAZjQbfJxOC58EE 1lY+4AVlgW0S4jJ4/l1B+I7dCabKfW6Ip69n2c4K8cj5hH+IJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5zd17jEAs/CwatS2uNIU4eNuMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmI0NmQ1NDUtODBlZC0z MTZhLTlmNjEtMjVlOWQxNzYzYzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw2/ck4Y3YgbCruAFEJMnntjZfaJDUJAWpKGetuOmAA0WoZo13Ez520 AocJ7t9pDc4hU/lHieC0k3hcOR2tgZnlhqzK9DK+OIWPTkaHUPMfDey60TIuNG1h KClvNIDf4i7T35ReURcBl6msOzbI4G6N3ZXBq071OEY4TkD6edAlrJ4JB50MvJed Ir/rtfAkL15RDE2W1uPCo44KoPCzRsvMtz3iyV2IvVFB6IvRJDXyTAqx4RQeon+L /fodiXRchqTE+H8ixQcoEbr75dAWPeypHtYsNABSqODFZhfBasxy4yh06nQM7Ut1 d2ZfoMFXrEI9+T6FCV6yQWsoVDhb17k= -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:30 2026 by rpki-client