$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7fa8dbec-6553-32e3-bb65-78cd360f890d.roa File: 7fa8dbec-6553-32e3-bb65-78cd360f890d.roa (raw, json) Hash identifier: z5wZsovaWGTGXmVaiwuIUaEKKblS0KBXj57VjBBjxqo= Subject key identifier: 65:5E:8C:8E:6D:C3:1C:E4:1D:9B:90:97:9F:37:05:38:28:2B:C7:0E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F3541BC46E9B19F5B840 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7fa8dbec-6553-32e3-bb65-78cd360f890d.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f3:54:1b:c4:6e:9b:19:f5:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=9d66ab36-513b-4a05-b809-dfee4a30d5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:73:8e:35:66:e5:0e:dd:88:95:c2:ce:43: e3:b6:59:b0:98:7b:dc:ae:fa:b3:9e:91:1f:a0:3e: 1f:cb:c2:d6:23:c6:17:d9:5d:dd:b5:42:0f:d6:b9: 59:10:55:49:25:ac:ba:f0:28:e1:58:ab:cd:03:97: d2:b3:4d:89:1f:ad:e1:e8:70:98:3d:a5:a6:51:a9: b0:fb:8d:8a:ae:d2:24:2e:7b:09:e0:86:95:ff:d1: 71:fe:0c:b2:54:a8:9c:ef:9a:02:7f:b8:b3:21:5b: be:ae:b9:3e:4e:4d:3b:ba:95:d7:51:82:5f:b3:8e: c9:b6:f0:01:20:a8:e4:d3:5d:43:2f:9f:8e:cd:7d: 94:01:2a:9a:b2:54:7f:b9:e3:75:94:f4:b0:f7:a6: ae:74:e1:b1:5c:e6:4f:75:9b:01:2f:37:72:ff:5c: 28:16:3c:98:3b:1c:c7:ce:91:db:f7:d8:9a:f9:67: c6:9f:19:dd:19:1d:da:a1:c0:a4:fa:e1:fc:b9:64: a4:18:1e:26:d1:08:51:83:24:35:e8:9c:99:bf:6a: 20:7e:c9:68:d2:c5:3d:4a:13:c2:5a:7c:73:d2:f5: c7:2f:97:57:ce:bf:6b:35:9d:1e:3c:19:9b:71:37: de:2d:75:71:f5:2a:e1:16:39:6b:95:93:65:d9:65: 3f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:5E:8C:8E:6D:C3:1C:E4:1D:9B:90:97:9F:37:05:38:28:2B:C7:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/7fa8dbec-6553-32e3-bb65-78cd360f890d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d6:59:9f:ce:9f:37:38:8e:b0:53:7d:af:2d:aa:96:d9:74: ca:fe:92:88:75:6d:dc:b4:5f:49:2b:9f:09:6b:49:da:e5:8d: 9c:0c:51:b6:73:ff:5f:65:67:48:58:6a:34:18:db:b7:23:39: ce:c7:7e:30:aa:ae:c5:d5:17:3b:89:32:08:5e:2b:f6:4c:8f: 12:bb:61:ad:38:d6:e6:40:c6:f8:fa:3d:f5:90:60:70:e4:12: d9:b7:a5:dc:23:c7:19:3b:db:b9:ae:28:45:77:f1:74:80:c1: 31:ea:73:62:e6:39:22:c9:ae:5f:ba:49:7f:6d:b7:44:39:f0: 58:96:68:03:a2:1b:8c:66:40:84:2f:20:07:b2:8f:2e:e4:81: e2:ff:09:31:e6:c9:8b:90:9c:83:f1:aa:2b:ea:db:3a:5c:40: 2e:e6:86:e7:35:e3:47:d5:dc:e4:52:07:e9:cc:27:9c:db:7e: f1:f9:37:da:86:3a:7a:d8:13:8a:e0:d3:c7:98:06:ae:f2:b2: cf:60:fc:ca:be:75:12:6d:4f:7d:ac:92:b3:1e:20:31:ab:6c: 33:09:f4:e6:74:f0:3e:00:c7:3e:b9:b1:38:fc:a3:33:56:b4: 67:49:09:61:58:41:ca:73:17:f4:d8:fe:d2:3d:2e:32:35:aa: 8a:77:58:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvNUG8Rumxn1uEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk OWQ2NmFiMzYtNTEzYi00YTA1LWI4MDktZGZlZTRhMzBkNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjclzjjVm5Q7diJXCzkPjtlmwmHvcrvqznpEf oD4fy8LWI8YX2V3dtUIP1rlZEFVJJay68CjhWKvNA5fSs02JH63h6HCYPaWmUamw +42KrtIkLnsJ4IaV/9Fx/gyyVKic75oCf7izIVu+rrk+Tk07upXXUYJfs47JtvAB IKjk011DL5+OzX2UASqaslR/ueN1lPSw96audOGxXOZPdZsBLzdy/1woFjyYOxzH zpHb99ia+WfGnxndGR3aocCk+uH8uWSkGB4m0QhRgyQ16JyZv2ogfslo0sU9ShPC Wnxz0vXHL5dXzr9rNZ0ePBmbcTfeLXVx9SrhFjlrlZNl2WU/CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGVejI5twxzkHZuQl583BTgoK8cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvN2ZhOGRiZWMtNjU1My0z MmUzLWJiNjUtNzhjZDM2MGY4OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDWWZ/Onzc4jrBTfa8tqpbZdMr+koh1bdy0X0krnwlrSdrljZwMUbZz /19lZ0hYajQY27cjOc7HfjCqrsXVFzuJMgheK/ZMjxK7Ya041uZAxvj6PfWQYHDk Etm3pdwjxxk727muKEV38XSAwTHqc2LmOSLJrl+6SX9tt0Q58FiWaAOiG4xmQIQv IAeyjy7kgeL/CTHmyYuQnIPxqivq2zpcQC7mhuc140fV3ORSB+nMJ5zbfvH5N9qG OnrYE4rg08eYBq7yss9g/Mq+dRJtT32skrMeIDGrbDMJ9OZ08D4Axz65sTj8ozNW tGdJCWFYQcpzF/TY/tI9LjI1qop3WGI= -----END CERTIFICATE-----Generated at Sun Mar 1 20:39:54 2026 by rpki-client