$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cd32540-60ea-34b6-b742-283e95f88a7c.roa File: 4cd32540-60ea-34b6-b742-283e95f88a7c.roa (raw, json) Hash identifier: 8QuHDi82WSVb9lPGQQAlXSjHQbflwpKtsLKEKkMPvTE= Subject key identifier: 3D:06:41:46:5A:0C:DB:65:06:BC:95:D3:B9:CD:F2:5B:69:F4:A7:F5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F3C9BE967EBF6A500140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cd32540-60ea-34b6-b742-283e95f88a7c.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f3:c9:be:96:7e:bf:6a:50:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=45c540b2-d2c1-4241-883a-0a6d9c459f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7b:76:fb:8e:0c:49:d5:e0:ac:20:2c:72:c9: b5:bb:dd:4c:44:44:0b:2f:82:f6:a8:8f:81:fb:8a: f9:69:94:e3:93:a6:a9:49:dc:f5:8f:fb:75:4f:fc: 15:9b:5f:78:91:0e:f1:93:48:a9:2d:4c:50:f0:f6: 72:39:8f:94:37:f2:69:15:b1:f4:31:bb:ed:fc:3c: ec:6a:4d:6c:41:61:f6:ea:d0:13:72:a7:af:12:c9: dd:40:51:ee:b5:58:18:81:73:b9:92:e2:34:46:4a: c7:35:f9:d0:53:9a:67:56:a0:9e:a1:f2:cd:c2:4b: f2:45:19:ea:96:d3:88:56:26:d2:cd:cb:99:c6:f2: a7:ba:d7:7a:8c:1b:8b:ff:77:53:e4:cf:b9:13:58: 47:20:8f:14:58:ad:a0:f6:d1:27:e1:1d:f1:96:fd: f5:7f:d0:ae:f6:6a:cf:79:55:2d:d2:29:8d:2c:15: 54:1c:d9:0a:00:e2:59:b8:af:3c:8e:3f:9c:18:7e: e5:74:fb:e2:98:7c:dd:1e:be:e8:97:c4:2b:41:53: e2:ba:96:be:77:4e:20:f7:ed:2f:18:86:31:3a:4f: 7f:53:ed:89:bf:ca:b8:2e:0c:df:1e:6b:96:40:24: 03:1c:e7:5a:25:dd:eb:bc:89:c0:61:a8:1b:89:7f: 0a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:06:41:46:5A:0C:DB:65:06:BC:95:D3:B9:CD:F2:5B:69:F4:A7:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4cd32540-60ea-34b6-b742-283e95f88a7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d8:97:ec:29:75:cb:f4:eb:80:22:bb:54:db:a0:5e:d4:ac: 13:2a:11:f9:7b:02:e5:1d:df:65:24:d3:5e:ea:19:72:3f:95: 13:e3:23:f7:3e:bc:ea:be:9b:ac:ad:1c:60:ac:32:3e:16:45: 05:35:80:e0:be:e9:57:c9:00:d5:64:28:67:e2:ca:d8:0b:bb: 88:4d:39:61:4c:e9:04:41:ee:f6:ea:bc:ec:e6:ea:db:27:5b: 00:6c:f6:2e:a7:cb:7f:f5:23:16:db:0f:cf:58:af:4e:1b:8b: ac:7e:72:a1:d9:ff:74:f7:06:e7:a1:cd:03:5c:a1:47:6d:03: fc:7c:84:23:00:90:fd:59:f7:61:bb:c0:cb:5d:1e:77:36:bc: ff:97:41:6b:cc:07:b9:fc:44:25:2e:b1:f6:eb:86:1b:c3:c6: 57:61:d3:0d:f7:19:2c:fa:7e:cb:42:d6:72:b8:2d:5a:76:35: a3:7e:2f:09:88:07:c5:5b:85:8e:f4:b7:9f:e0:50:d5:c6:f5: ff:15:02:27:4d:0b:4b:ab:5b:30:5f:6a:5c:dc:e5:22:5c:f2: 74:1a:07:cd:16:2d:43:6c:96:7a:1a:31:8c:d2:e4:b3:59:a5: b4:24:9e:fe:75:4e:9d:fc:61:ae:2a:2e:79:c2:d1:5b:b6:be: 13:8f:05:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvPJvpZ+v2pQAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDVjNTQwYjItZDJjMS00MjQxLTg4M2EtMGE2ZDljNDU5ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHt2+44MSdXgrCAscsm1u91MREQLL4L2qI+B +4r5aZTjk6apSdz1j/t1T/wVm194kQ7xk0ipLUxQ8PZyOY+UN/JpFbH0Mbvt/Dzs ak1sQWH26tATcqevEsndQFHutVgYgXO5kuI0RkrHNfnQU5pnVqCeofLNwkvyRRnq ltOIVibSzcuZxvKnutd6jBuL/3dT5M+5E1hHII8UWK2g9tEn4R3xlv31f9Cu9mrP eVUt0imNLBVUHNkKAOJZuK88jj+cGH7ldPvimHzdHr7ol8QrQVPiupa+d04g9+0v GIYxOk9/U+2Jv8q4LgzfHmuWQCQDHOdaJd3rvInAYagbiX8KlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0GQUZaDNtlBryV07nN8ltp9Kf1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNGNkMzI1NDAtNjBlYS0z NGI2LWI3NDItMjgzZTk1Zjg4YTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/Yl+wpdcv064Aiu1TboF7UrBMqEfl7AuUd32Uk017qGXI/lRPjI/c+ vOq+m6ytHGCsMj4WRQU1gOC+6VfJANVkKGfiytgLu4hNOWFM6QRB7vbqvOzm6tsn WwBs9i6ny3/1IxbbD89Yr04bi6x+cqHZ/3T3BuehzQNcoUdtA/x8hCMAkP1Z92G7 wMtdHnc2vP+XQWvMB7n8RCUusfbrhhvDxldh0w33GSz6fstC1nK4LVp2NaN+LwmI B8VbhY70t5/gUNXG9f8VAidNC0urWzBfalzc5SJc8nQaB80WLUNslnoaMYzS5LNZ pbQknv51Tp38Ya4qLnnC0Vu2vhOPBco= -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:51 2026 by rpki-client