$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa File: 5aa838e4-76b0-398e-bf6c-87040c977a3a.roa (raw, json) Hash identifier: Z8eV2XWiJ+M2r4eHpPQJE79x2hoGJJVqR6YS6IZic1Y= Subject key identifier: F1:A4:89:5B:A3:6B:FA:42:5D:4C:B3:D8:BA:66:9F:06:C6:15:79:AB Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E4ED1E2B91E67F4AB9B080 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 198.40.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:ed:1e:2b:91:e6:7f:4a:b9:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=1512466c-c8be-460d-a850-858c2decf384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:61:9d:2a:dd:45:d2:71:72:ea:13:21:03: 48:29:8f:15:d3:13:49:e2:31:c6:d1:ef:dd:c8:57: 39:c4:3e:14:fa:d8:7d:7c:ea:40:c9:b0:e6:7f:d2: 85:ff:c5:ed:5b:06:78:1a:30:84:29:bd:39:32:22: b4:d5:1c:8d:a8:48:bc:9e:ea:ff:aa:41:20:0d:08: af:20:ff:66:36:8d:82:44:fc:ac:ec:3f:60:9d:90: b2:e6:2b:3c:91:a8:43:d3:20:7d:7e:29:1a:f2:ad: ce:71:95:67:95:d2:6b:e6:d6:f3:1c:7b:d1:7e:28: f8:64:64:16:4c:7e:7c:34:17:e5:1b:7b:19:a0:35: dc:f9:90:06:7a:f3:1e:a5:56:bf:32:d1:1c:05:ed: 78:1e:e0:4f:89:dd:f0:5c:22:8c:b6:db:d6:b1:cb: 85:8f:5a:2f:3e:e7:ee:94:85:55:9c:5a:85:62:b0: 1d:a1:4d:8a:24:a2:25:8b:43:6d:b2:64:32:c8:8b: 89:58:26:69:ae:fb:bb:2a:00:54:55:eb:54:ef:72: 3b:e2:50:a1:fb:5e:7a:14:df:3b:09:32:6e:1f:1a: 49:8a:39:64:b2:24:fa:c8:84:e6:d5:72:86:2b:79: a2:f3:c5:bb:be:3e:09:51:54:37:83:b4:78:4c:4e: ca:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A4:89:5B:A3:6B:FA:42:5D:4C:B3:D8:BA:66:9F:06:C6:15:79:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5aa838e4-76b0-398e-bf6c-87040c977a3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:27:ae:d3:e2:a6:14:5f:7e:11:ce:da:70:2e:fb:e9:69:0b: 51:d1:e4:ce:d4:f2:9f:f8:62:1f:9b:9d:d7:36:f1:a7:6d:8c: da:52:19:fb:ac:36:c5:ef:76:89:8c:e1:65:ea:fe:92:48:b6: 55:3e:4b:0f:e7:16:ce:de:ba:1a:bf:19:3b:0c:f3:ca:fa:57: 2d:66:1d:04:e3:d8:e5:17:5b:32:16:c8:fc:0a:a6:f0:12:d0: fa:d4:15:b9:12:46:1c:9b:73:5e:2c:04:c4:5c:1d:62:cd:27: 69:31:36:a3:8b:25:d5:6c:40:ad:a8:7c:27:c6:b0:03:55:6f: 77:ff:da:15:e0:41:07:29:26:bf:6f:db:c1:23:f1:d8:09:9b: 6b:17:03:4d:8a:7b:02:b9:5f:25:ea:f9:b1:5e:bd:fc:12:35: 81:fb:f9:20:3d:22:02:bd:a1:d5:90:2c:b8:4d:0e:9c:66:2b: 1a:da:0b:83:46:1d:04:19:de:ba:e4:d1:db:01:06:ec:cf:34: 72:97:57:c8:20:f0:c4:b2:c7:49:9b:e2:e3:03:9b:cc:0d:cc: 5e:14:29:37:d2:d1:f3:8c:ac:72:f3:27:8b:9f:20:da:03:7d: 57:85:e9:bd:ef:c0:1e:5e:e6:90:dc:7f:e6:31:57:a3:7d:7a: 68:a2:12:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5O0eK5Hmf0q5sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk MTUxMjQ2NmMtYzhiZS00NjBkLWE4NTAtODU4YzJkZWNmMzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9RhnSrdRdJxcuoTIQNIKY8V0xNJ4jHG0e/d yFc5xD4U+th9fOpAybDmf9KF/8XtWwZ4GjCEKb05MiK01RyNqEi8nur/qkEgDQiv IP9mNo2CRPys7D9gnZCy5is8kahD0yB9fika8q3OcZVnldJr5tbzHHvRfij4ZGQW TH58NBflG3sZoDXc+ZAGevMepVa/MtEcBe14HuBPid3wXCKMttvWscuFj1ovPufu lIVVnFqFYrAdoU2KJKIli0NtsmQyyIuJWCZprvu7KgBUVetU73I74lCh+156FN87 CTJuHxpJijlksiT6yITm1XKGK3mi88W7vj4JUVQ3g7R4TE7KkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGkiVuja/pCXUyz2LpmnwbGFXmrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNWFhODM4ZTQtNzZiMC0z OThlLWJmNmMtODcwNDBjOTc3YTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMnrtPiphRffhHO2nAu++lpC1HR5M7U8p/4Yh+bndc28adtjNpSGfus NsXvdomM4WXq/pJItlU+Sw/nFs7euhq/GTsM88r6Vy1mHQTj2OUXWzIWyPwKpvAS 0PrUFbkSRhybc14sBMRcHWLNJ2kxNqOLJdVsQK2ofCfGsANVb3f/2hXgQQcpJr9v 28Ej8dgJm2sXA02KewK5XyXq+bFevfwSNYH7+SA9IgK9odWQLLhNDpxmKxraC4NG HQQZ3rrk0dsBBuzPNHKXV8gg8MSyx0mb4uMDm8wNzF4UKTfS0fOMrHLzJ4ufINoD fVeF6b3vwB5e5pDcf+YxV6N9emiiEkU= -----END CERTIFICATE-----Generated at Fri Apr 17 17:38:26 2026 by rpki-client