$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa File: 35db1a21-9d13-36a4-92ff-c93c50255a11.roa (raw, json) Hash identifier: rWn5tIgZG2WJ24EI2KfHft1djkgbOfErAIl0I2oWEZA= Subject key identifier: 7D:C7:2F:C6:3C:AB:62:08:C3:DF:E0:A9:13:61:C0:F8:88:2F:47:0E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046DD0A7D9FA5322B458800 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:dd:0a:7d:9f:a5:32:2b:45:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=cb96589d-2cec-4078-9ae3-f73c3752b39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:03:ee:91:55:a0:63:75:12:dd:a9:5f:a4:93: bd:ed:e4:91:72:e7:cf:1e:0e:5f:9c:b2:06:64:53: 4a:ef:ab:37:82:e0:0a:7d:51:c0:2e:cf:c3:42:8d: e5:c8:4f:78:c7:26:0d:52:f7:a8:cf:a7:32:f1:03: 8a:22:79:d8:49:ab:8b:9a:63:c1:89:50:9d:9c:31: 4f:d4:18:d1:89:1f:78:b0:28:6e:6b:d1:18:8e:5a: 6c:04:c0:a5:15:b3:e0:c7:1d:69:47:b4:70:dd:89: 16:f1:a4:88:28:24:a9:81:e4:05:ba:fb:b7:df:7e: e7:3e:58:ba:6e:cc:dc:53:de:08:94:75:8b:3f:01: b6:b2:d4:d3:08:88:45:46:b1:54:28:e9:dd:4c:9e: 08:b0:56:1d:53:ba:ca:40:33:d8:25:da:67:29:61: df:09:cc:e5:69:81:ab:69:27:d5:1c:36:99:05:d6: f0:72:25:41:9c:9f:ff:e3:86:e7:53:c7:47:a2:ab: 78:b9:4f:0c:5a:cb:45:15:0f:c0:53:5e:58:2e:c3: 5e:d8:f7:08:f5:2b:ae:d4:84:c7:2b:da:37:cd:f6: fd:b8:02:d3:ed:74:23:e0:a5:cf:ea:ff:0d:30:ba: 57:4d:4f:31:b8:46:d0:d1:c7:a2:fe:19:23:4a:f5: 5c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C7:2F:C6:3C:AB:62:08:C3:DF:E0:A9:13:61:C0:F8:88:2F:47:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/35db1a21-9d13-36a4-92ff-c93c50255a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:08:49:a2:ca:98:ad:19:46:02:96:eb:4d:5d:e6:9e:6f:c0: ce:50:c1:26:b3:70:11:12:4d:73:66:68:b0:98:35:b2:a5:2c: 8b:0e:bf:b4:ff:42:a1:e6:ad:64:40:2b:1b:98:9e:7c:5d:32: 7b:22:87:60:98:74:09:89:79:ad:cd:ce:fa:30:8b:ca:64:3c: fd:ce:16:88:64:04:18:18:65:9a:c3:24:65:06:5d:cc:31:6d: 0c:e3:bc:a1:30:ba:fd:33:3a:c2:fe:e2:c7:d0:54:b8:04:c6: 18:78:22:e6:f6:16:61:dc:c4:9b:5d:74:d1:51:80:ea:13:0f: 03:e2:90:1b:9d:4a:ee:70:55:35:a5:65:9f:50:7b:01:f9:16: 23:78:79:08:cf:db:e6:fa:dd:0e:42:31:58:7f:b2:10:38:c5: dc:5b:05:3f:6e:5c:ed:e0:46:89:fe:e9:40:ba:b9:33:aa:b6: 9c:bd:1a:6e:9f:18:73:ac:96:89:94:ba:3a:b0:02:fd:14:e5: 52:30:1a:ad:44:4c:d6:98:49:78:34:33:9f:76:92:98:ea:5f: 2e:0a:35:c2:70:99:80:a7:86:e6:7a:17:47:d2:ad:b6:76:78: 63:73:32:3d:be:16:ae:bf:bf:6e:ca:b3:49:fb:ba:66:a6:e3: 09:a0:a6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARt0KfZ+lMitFiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk Y2I5NjU4OWQtMmNlYy00MDc4LTlhZTMtZjczYzM3NTJiMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QPukVWgY3US3alfpJO97eSRcufPHg5fnLIG ZFNK76s3guAKfVHALs/DQo3lyE94xyYNUveoz6cy8QOKInnYSauLmmPBiVCdnDFP 1BjRiR94sChua9EYjlpsBMClFbPgxx1pR7Rw3YkW8aSIKCSpgeQFuvu3337nPli6 bszcU94IlHWLPwG2stTTCIhFRrFUKOndTJ4IsFYdU7rKQDPYJdpnKWHfCczlaYGr aSfVHDaZBdbwciVBnJ//44bnU8dHoqt4uU8MWstFFQ/AU15YLsNe2PcI9Suu1ITH K9o3zfb9uALT7XQj4KXP6v8NMLpXTU8xuEbQ0cei/hkjSvVcjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3HL8Y8q2IIw9/gqRNhwPiIL0cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMzVkYjFhMjEtOWQxMy0z NmE0LTkyZmYtYzkzYzUwMjU1YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAoISaLKmK0ZRgKW601d5p5vwM5QwSazcBESTXNmaLCYNbKlLIsOv7T/ QqHmrWRAKxuYnnxdMnsih2CYdAmJea3Nzvowi8pkPP3OFohkBBgYZZrDJGUGXcwx bQzjvKEwuv0zOsL+4sfQVLgExhh4Iub2FmHcxJtddNFRgOoTDwPikBudSu5wVTWl ZZ9QewH5FiN4eQjP2+b63Q5CMVh/shA4xdxbBT9uXO3gRon+6UC6uTOqtpy9Gm6f GHOslomUujqwAv0U5VIwGq1ETNaYSXg0M592kpjqXy4KNcJwmYCnhuZ6F0fSrbZ2 eGNzMj2+Fq6/v27Ks0n7umam4wmgpj0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:03:28 2026 by rpki-client