$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa File: 42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa (raw, json) Hash identifier: CaBAwxSWgOc7EfRLkAqMNNTW/oflFEvBM5nEoVwRA9A= Subject key identifier: B6:02:44:15:D8:66:47:91:8B:3F:36:37:CB:E3:57:6C:AD:4B:83:1C Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F3ABE8D70691AB83B5A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f3:ab:e8:d7:06:91:ab:83:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=3cddbb23-7e15-428f-b879-762659703cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fe:d1:c0:f2:6f:96:30:ee:cf:ee:77:22:ce: 23:e6:3b:0d:43:29:16:cf:69:87:e3:61:60:74:a2: ae:a1:46:8b:d7:2a:c8:ca:10:da:55:3e:06:3c:f7: 42:b0:68:33:fc:bd:ed:73:32:86:b6:f7:f9:ce:39: 9f:41:0c:3a:3e:a4:6c:9c:4e:dd:93:a1:16:e9:fb: a2:c3:c4:b4:41:3a:1f:61:78:91:08:b0:d5:c2:a9: 11:94:05:73:e8:e1:31:de:0e:12:8b:06:a2:38:ab: a7:ff:09:6a:b8:bc:77:6a:48:60:96:5f:d5:e7:1e: 4b:52:18:ef:ce:83:61:86:d2:94:30:36:52:68:81: ad:00:31:13:9c:26:1b:67:c4:3c:fe:74:0e:b8:0b: ee:5b:11:5d:8c:85:94:66:c8:39:33:63:11:ad:5c: 27:58:9a:54:2c:78:60:4d:cb:b7:c9:2b:a7:6d:db: 49:99:78:2e:78:7a:17:54:40:66:a5:aa:4d:63:32: c0:45:ca:c9:68:93:b5:c6:ee:78:af:21:06:90:49: 18:f3:b3:20:16:04:4e:4a:f2:38:c4:3e:26:f1:a5: 34:c1:9d:45:af:72:af:2e:c2:eb:cf:66:63:b6:75: 39:93:20:d5:e5:57:9c:e8:9e:a8:4b:f5:df:fe:a5: 2d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:44:15:D8:66:47:91:8B:3F:36:37:CB:E3:57:6C:AD:4B:83:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/42d643b6-7fd5-3929-a38d-307f3b6fd86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:96:8c:f5:34:40:07:89:1a:10:38:d3:84:30:3e:5c:ec:73: b7:03:a1:1b:b2:a8:c2:11:6a:7c:32:fe:25:d9:f0:c8:51:8d: 4f:d8:a5:c0:c0:de:8f:53:52:f4:82:bc:83:4f:87:c1:10:be: 79:3c:69:11:83:a2:85:93:e8:83:0c:9f:7a:47:f5:b8:d6:d9: c5:39:51:27:f8:3e:41:3b:80:a7:86:6d:15:15:63:72:b6:4e: a2:ab:bf:17:4a:1a:18:6f:ba:f5:36:d4:94:21:b0:cb:1c:f3: e0:d0:f8:ca:9b:b8:4d:26:c6:fa:0e:f2:2d:0f:68:2e:ba:02: c1:da:fd:a0:f1:82:49:40:4b:af:8e:9b:28:0f:83:d1:00:66: 66:d9:4b:ff:ce:cd:f6:49:d0:24:fe:26:89:3f:bd:59:c6:79: 78:08:41:44:7f:f5:27:4a:82:58:c5:eb:61:1f:05:b1:4a:46: 8f:eb:db:69:5b:0b:a7:f0:a6:a3:3d:3f:7e:7f:8a:79:6b:e8: e8:69:0b:a3:8e:cf:11:11:ce:3a:89:28:7b:4e:3d:f0:bb:a1: 2d:29:45:c4:3b:f8:31:e7:f6:e3:da:04:82:c4:5d:a5:74:53: e9:82:5a:05:98:33:2c:55:05:7d:74:11:be:a9:ee:f8:75:42: 87:e7:3f:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvOr6NcGkauDtaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk M2NkZGJiMjMtN2UxNS00MjhmLWI4NzktNzYyNjU5NzAzY2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/7RwPJvljDuz+53Is4j5jsNQykWz2mH42Fg dKKuoUaL1yrIyhDaVT4GPPdCsGgz/L3tczKGtvf5zjmfQQw6PqRsnE7dk6EW6fui w8S0QTofYXiRCLDVwqkRlAVz6OEx3g4SiwaiOKun/wlquLx3akhgll/V5x5LUhjv zoNhhtKUMDZSaIGtADETnCYbZ8Q8/nQOuAvuWxFdjIWUZsg5M2MRrVwnWJpULHhg Tcu3ySunbdtJmXgueHoXVEBmpapNYzLARcrJaJO1xu54ryEGkEkY87MgFgROSvI4 xD4m8aU0wZ1Fr3KvLsLrz2ZjtnU5kyDV5Vec6J6oS/Xf/qUtxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYCRBXYZkeRiz82N8vjV2ytS4McMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDJkNjQzYjYtN2ZkNS0z OTI5LWEzOGQtMzA3ZjNiNmZkODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWWjPU0QAeJGhA404QwPlzsc7cDoRuyqMIRanwy/iXZ8MhRjU/YpcDA 3o9TUvSCvINPh8EQvnk8aRGDooWT6IMMn3pH9bjW2cU5USf4PkE7gKeGbRUVY3K2 TqKrvxdKGhhvuvU21JQhsMsc8+DQ+MqbuE0mxvoO8i0PaC66AsHa/aDxgklAS6+O mygPg9EAZmbZS//OzfZJ0CT+Jok/vVnGeXgIQUR/9SdKgljF62EfBbFKRo/r22lb C6fwpqM9P35/inlr6OhpC6OOzxERzjqJKHtOPfC7oS0pRcQ7+DHn9uPaBILEXaV0 U+mCWgWYMyxVBX10Eb6p7vh1QofnP44= -----END CERTIFICATE-----Generated at Mon Mar 2 01:17:29 2026 by rpki-client