$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa File: 72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa (raw, json) Hash identifier: Vf9gcJFqMs1712FCEjejKrRqZWO2/zIkmZ4lQbeoMy8= Subject key identifier: 39:11:2B:BB:5F:89:95:81:AE:3B:36:0D:54:18:E0:21:D2:FB:77:C4 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046E08FFB73AA6C3701D610 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:e0:8f:fb:73:aa:6c:37:01:d6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=d2a43218-08d5-4270-8802-f97f6303ffb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:03:ee:e1:8b:16:6f:2d:a1:88:59:b1:05: aa:56:e0:03:e4:11:58:9d:5d:d0:27:a3:0d:6c:b7: 3e:46:23:94:39:f9:fa:ae:22:d7:e6:ea:a0:56:88: de:69:bd:1f:27:03:5e:98:a6:4c:e7:2e:fa:ba:fc: af:f5:be:01:f8:2b:b2:d1:0d:8b:b9:fc:71:09:e6: 6d:a9:1f:e5:0a:a0:a1:63:b7:31:b0:98:76:5e:33: 66:86:a5:a1:34:ae:1b:00:fb:54:c5:39:a9:9d:05: 33:a1:fe:31:81:bf:cb:1e:c4:f2:aa:ca:7e:6e:f6: 72:42:0b:d8:bb:e7:e6:79:7f:e0:2b:76:f7:28:1b: 5a:3e:d4:c9:17:21:75:5d:bf:f4:8d:86:f5:4b:a9: 7f:5f:e0:d5:f6:ca:0e:f2:09:45:e2:68:8c:be:29: 24:0c:ef:72:e1:7d:fe:c1:ff:18:aa:d9:ee:23:a8: dd:77:7c:f3:3e:00:ae:bd:a3:70:4a:5c:f6:1c:a2: 4c:7d:a7:91:67:a0:40:ae:30:cb:00:3b:99:6e:47: 75:e8:d4:1e:8a:3f:6f:0d:45:04:6a:04:cb:e4:c9: c4:21:5f:12:69:5b:cd:ce:33:36:08:57:be:b4:6a: 61:92:c6:cf:f2:f3:89:a7:3e:1e:c2:97:e7:7f:68: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:11:2B:BB:5F:89:95:81:AE:3B:36:0D:54:18:E0:21:D2:FB:77:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/72a7d50b-f1e7-3ebf-95fe-1269828a3d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3a:f7:cb:5b:d0:0e:02:0b:28:26:d7:1c:cc:d2:68:2c:2b: dd:5c:07:a7:70:18:e4:85:ee:c9:ba:36:45:de:40:98:36:7e: ba:0e:83:9e:96:1c:e6:ad:0f:3a:bf:6c:7c:15:e1:94:87:24: 1f:36:8a:f1:6e:b5:28:52:ec:ef:cf:df:a5:4e:be:3b:8e:dc: 3c:10:58:9f:7d:94:59:65:de:de:68:6e:a3:7e:cb:03:2c:a6: 55:64:6b:aa:e1:7a:9a:b9:40:24:f4:b9:b1:12:46:02:43:14: e3:cc:4e:35:b5:30:d1:4f:c9:a8:18:61:92:d7:ad:de:ee:21: a5:2a:88:95:fc:5f:b8:23:d3:fe:07:96:d1:f4:1a:a6:ae:ea: cd:ed:8b:82:f8:7a:1c:e4:6e:ea:8e:48:74:43:76:c7:f5:a5: 15:83:85:c8:01:07:2a:0b:2a:16:74:1a:f6:7a:7d:bd:a2:3f: 1f:a7:49:fb:2e:dc:ac:54:07:cd:67:80:a1:75:ba:46:63:89: ad:4e:89:22:8c:62:1e:2e:a9:11:d8:c0:05:30:c5:be:0f:da: 99:3b:45:65:30:3c:90:78:8b:fe:81:0f:95:40:dc:f8:22:c7: 4f:0c:d1:ad:b8:dc:5a:5e:4d:bc:4a:eb:51:66:8f:3e:1e:da: cf:ce:0a:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARuCP+3OqbDcB1hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk ZDJhNDMyMTgtMDhkNS00MjcwLTg4MDItZjk3ZjYzMDNmZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4QD7uGLFm8toYhZsQWqVuAD5BFYnV3QJ6MN bLc+RiOUOfn6riLX5uqgVojeab0fJwNemKZM5y76uvyv9b4B+Cuy0Q2LufxxCeZt qR/lCqChY7cxsJh2XjNmhqWhNK4bAPtUxTmpnQUzof4xgb/LHsTyqsp+bvZyQgvY u+fmeX/gK3b3KBtaPtTJFyF1Xb/0jYb1S6l/X+DV9soO8glF4miMvikkDO9y4X3+ wf8YqtnuI6jdd3zzPgCuvaNwSlz2HKJMfaeRZ6BArjDLADuZbkd16NQeij9vDUUE agTL5MnEIV8SaVvNzjM2CFe+tGphksbP8vOJpz4ewpfnf2hIdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkRK7tfiZWBrjs2DVQY4CHS+3fEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNzJhN2Q1MGItZjFlNy0z ZWJmLTk1ZmUtMTI2OTgyOGEzZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0698tb0A4CCygm1xzM0mgsK91cB6dwGOSF7sm6NkXeQJg2froOg56W HOatDzq/bHwV4ZSHJB82ivFutShS7O/P36VOvjuO3DwQWJ99lFll3t5obqN+ywMs plVka6rhepq5QCT0ubESRgJDFOPMTjW1MNFPyagYYZLXrd7uIaUqiJX8X7gj0/4H ltH0Gqau6s3ti4L4ehzkbuqOSHRDdsf1pRWDhcgBByoLKhZ0GvZ6fb2iPx+nSfsu 3KxUB81ngKF1ukZjia1OiSKMYh4uqRHYwAUwxb4P2pk7RWUwPJB4i/6BD5VA3Pgi x08M0a243FpeTbxK61Fmjz4e2s/OCiY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:10 2026 by rpki-client