$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a2c7a40-f679-3deb-aad8-3d5e356f092b.roa File: 6a2c7a40-f679-3deb-aad8-3d5e356f092b.roa (raw, json) Hash identifier: 1DRyg5XMbmwo4EBxWlw8/ugdIa6j0fIC+f1lc+1NxsI= Subject key identifier: 58:70:27:FE:A8:EE:22:79:E4:FC:F1:4E:F7:87:7F:98:41:9F:94:53 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046DE6347C7C6A9DBB36E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a2c7a40-f679-3deb-aad8-3d5e356f092b.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:de:63:47:c7:c6:a9:db:b3:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=848e5710-b7a0-4419-b9da-1b0c8ae64f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:58:e9:ca:ce:b6:f6:0d:f7:21:c0:7c:4c: 76:e7:e4:fb:43:88:4d:15:43:aa:28:f7:3b:d0:f5: 32:35:de:0a:70:6e:49:4a:41:71:d9:1e:15:90:b9: 3f:18:0d:e9:90:27:d7:fe:e5:85:95:e2:b2:fb:d4: c2:12:93:7c:6b:2e:62:93:24:85:97:26:af:4b:52: cc:b6:e0:dd:47:1f:46:8c:7f:a9:5d:a3:9a:ab:18: 87:fe:3e:b9:d2:f2:5c:74:4a:db:4f:28:c1:34:97: e6:2c:52:28:8e:3a:ce:72:e5:a4:0b:57:98:cc:a0: 1d:ce:93:7d:13:c6:8c:ee:03:6a:7c:3c:1c:ba:66: 56:8f:73:46:77:ff:5b:3d:ea:4d:e8:f5:a7:0b:89: 92:4c:e4:3b:03:0a:55:4d:72:c8:10:d7:f4:4d:03: 3a:bc:86:5c:33:4f:bb:b9:a6:03:43:6c:97:5b:11: 46:78:3e:a2:a5:72:13:b9:ca:bd:59:88:b2:20:99: 8c:19:f4:a7:55:34:b6:e6:2d:1f:21:54:b7:e4:d2: 42:cc:70:f5:5a:b1:8a:fb:a4:1f:4f:75:20:06:c3: 25:a8:73:93:61:aa:67:dc:cd:b2:89:3b:43:e7:7d: dc:e3:fd:f1:20:aa:da:17:f8:ab:f2:0d:ff:61:ec: f1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:27:FE:A8:EE:22:79:E4:FC:F1:4E:F7:87:7F:98:41:9F:94:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6a2c7a40-f679-3deb-aad8-3d5e356f092b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f5:43:5f:56:7e:d5:1d:f4:0d:32:03:b2:8f:60:59:e7:31: 99:48:5d:78:9c:b2:21:1f:ee:40:3d:09:57:c2:36:de:07:8c: 1e:ed:22:39:07:35:a3:dc:79:44:66:97:5e:bd:29:93:3e:a4: 4e:ac:6c:bb:0e:6d:af:87:16:83:a3:38:49:df:f1:a6:74:37: 8d:96:8c:1a:64:1c:45:ba:3c:3d:57:e8:84:83:84:63:c2:19: fc:3c:c0:63:14:0b:16:35:89:97:d4:98:55:69:e7:7d:41:77: 1b:3c:db:f9:cf:d8:5b:41:e3:bb:e4:e3:6a:87:9a:31:6e:4b: eb:49:c7:25:7e:7a:51:b2:4a:f9:c5:48:df:b2:1a:72:96:65: a2:14:3b:4c:aa:76:36:1b:2d:d3:07:2c:4d:8c:66:f2:4b:94: b6:1f:cd:cb:2f:67:c9:fb:9b:c1:77:d3:98:e5:34:60:76:4b: cf:49:77:2d:ae:6c:e0:f5:bf:9f:66:31:08:04:fb:3f:db:c8: a8:82:10:c8:39:6b:86:89:e4:c2:20:9d:3d:b3:67:9a:71:da: 61:ca:cc:ba:2f:4c:b9:8a:8b:6e:37:a8:49:e3:b7:06:95:05: a9:79:9a:e3:09:e7:49:10:54:df:c4:5f:73:fc:04:20:4b:aa: ea:10:23:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARt5jR8fGqduzboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODQ4ZTU3MTAtYjdhMC00NDE5LWI5ZGEtMWIwYzhhZTY0ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOVY6crOtvYN9yHAfEx25+T7Q4hNFUOqKPc7 0PUyNd4KcG5JSkFx2R4VkLk/GA3pkCfX/uWFleKy+9TCEpN8ay5ikySFlyavS1LM tuDdRx9GjH+pXaOaqxiH/j650vJcdErbTyjBNJfmLFIojjrOcuWkC1eYzKAdzpN9 E8aM7gNqfDwcumZWj3NGd/9bPepN6PWnC4mSTOQ7AwpVTXLIENf0TQM6vIZcM0+7 uaYDQ2yXWxFGeD6ipXITucq9WYiyIJmMGfSnVTS25i0fIVS35NJCzHD1WrGK+6Qf T3UgBsMlqHOTYapn3M2yiTtD533c4/3xIKraF/ir8g3/YezxrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhwJ/6o7iJ55PzxTveHf5hBn5RTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNmEyYzdhNDAtZjY3OS0z ZGViLWFhZDgtM2Q1ZTM1NmYwOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv1Q19WftUd9A0yA7KPYFnnMZlIXXicsiEf7kA9CVfCNt4HjB7tIjkH NaPceURml169KZM+pE6sbLsOba+HFoOjOEnf8aZ0N42WjBpkHEW6PD1X6ISDhGPC Gfw8wGMUCxY1iZfUmFVp531Bdxs82/nP2FtB47vk42qHmjFuS+tJxyV+elGySvnF SN+yGnKWZaIUO0yqdjYbLdMHLE2MZvJLlLYfzcsvZ8n7m8F305jlNGB2S89Jdy2u bOD1v59mMQgE+z/byKiCEMg5a4aJ5MIgnT2zZ5px2mHKzLovTLmKi243qEnjtwaV Bal5muMJ50kQVN/EX3P8BCBLquoQI/0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:01:38 2026 by rpki-client