$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88f0b0ed-660e-3ff6-9849-8294068f6c62.roa File: 88f0b0ed-660e-3ff6-9849-8294068f6c62.roa (raw, json) Hash identifier: hAjRFgTNzdAedSqb2nF13cA5JJVBMzZRaLWlLXR/2Io= Subject key identifier: 8D:86:DC:20:35:85:27:6F:B6:11:38:9D:AC:A6:62:35:A0:20:EF:9E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C563BDF793226D24D7D0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88f0b0ed-660e-3ff6-9849-8294068f6c62.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c5:63:bd:f7:93:22:6d:24:d7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=483b960b-984f-43b5-b17c-7ffa13eb9864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:93:dc:3e:5b:c9:ed:ba:79:ba:51:75:44:90: 1a:b5:6a:b6:6b:0c:27:7b:29:fe:c5:39:35:57:00: 95:35:aa:22:54:71:cd:05:02:43:53:2b:33:d5:af: 6e:99:e3:2a:59:c6:e9:7b:7a:4a:c3:3c:5f:e5:05: 2f:c6:6b:71:e8:e2:ac:98:8e:40:f0:f9:8c:c2:d8: bd:67:9d:3e:e7:c8:fa:17:0f:79:29:1a:44:83:a9: ec:02:f1:56:d6:bd:bf:63:9d:38:52:69:35:ba:92: ec:c6:f9:6b:eb:37:09:87:39:be:3f:a0:9b:98:51: 2b:58:61:1d:5a:6a:54:34:d8:3b:48:d2:10:c8:1f: 30:0e:c0:65:ba:1f:b3:87:33:8d:ae:50:bd:be:fa: b3:ac:3a:41:2b:69:47:47:04:df:33:0b:c0:d2:9f: 15:b2:41:d7:4c:f4:20:8d:f7:ce:99:f4:91:4e:80: ac:cb:ee:6d:54:8b:79:d3:1e:86:7d:9b:aa:f3:e6: 82:29:fd:23:7a:5c:c4:15:2d:d5:2f:27:66:eb:30: 4d:c6:87:7a:0d:3f:2d:5f:9c:12:9c:e0:78:3c:f4: d8:59:31:30:85:97:8d:53:d8:e3:67:68:07:d6:57: f2:93:87:27:85:8f:c1:9d:cd:6d:08:97:96:97:21: ce:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:DC:20:35:85:27:6F:B6:11:38:9D:AC:A6:62:35:A0:20:EF:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/88f0b0ed-660e-3ff6-9849-8294068f6c62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:be:91:0c:44:c6:d0:79:8d:60:c9:44:44:e1:52:86:87:e7: 31:11:a5:86:4c:47:17:d7:08:55:bf:59:fa:41:bd:d5:49:8c: 26:ef:75:4a:32:40:c5:eb:7c:1c:54:e5:5b:c5:de:d9:d6:4b: 25:56:97:40:61:cb:3b:13:34:4d:bf:b8:ca:24:cb:a8:93:79: d9:66:63:da:dc:c0:2e:1a:ff:bb:6e:b3:f0:9a:9a:a6:5a:66: 6c:34:34:de:27:40:b5:30:2e:86:8e:90:fe:9d:91:11:ad:97: 57:2e:9c:ee:a9:f0:d2:76:71:8c:e9:93:43:6d:1c:33:fa:ea: b8:5f:58:69:7a:50:3e:ed:c1:0c:b8:01:ba:ae:dc:75:4e:94: a7:41:2f:eb:40:d5:51:2b:88:3f:81:98:41:d4:cd:e1:e1:ec: ee:ef:72:80:27:96:82:5a:ab:6a:59:5c:28:f0:cf:62:db:ef: 57:e5:72:95:f8:c8:09:9f:14:4d:07:65:d3:22:96:4f:3e:b8: aa:ed:c2:89:cf:01:c2:f8:7e:78:11:f1:db:a9:79:cb:af:8a: 58:c4:27:60:d4:92:34:f0:08:29:39:44:6f:cf:3e:54:b4:58: c7:00:a7:9a:eb:cb:92:62:83:8f:91:26:c7:84:c9:df:94:d4: d8:a5:5c:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsVjvfeTIm0k19AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDgzYjk2MGItOTg0Zi00M2I1LWIxN2MtN2ZmYTEzZWI5ODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpPcPlvJ7bp5ulF1RJAatWq2awwneyn+xTk1 VwCVNaoiVHHNBQJDUysz1a9umeMqWcbpe3pKwzxf5QUvxmtx6OKsmI5A8PmMwti9 Z50+58j6Fw95KRpEg6nsAvFW1r2/Y504Umk1upLsxvlr6zcJhzm+P6CbmFErWGEd WmpUNNg7SNIQyB8wDsBluh+zhzONrlC9vvqzrDpBK2lHRwTfMwvA0p8VskHXTPQg jffOmfSRToCsy+5tVIt50x6GfZuq8+aCKf0jelzEFS3VLydm6zBNxod6DT8tX5wS nOB4PPTYWTEwhZeNU9jjZ2gH1lfyk4cnhY/Bnc1tCJeWlyHOJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2G3CA1hSdvthE4naymYjWgIO+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODhmMGIwZWQtNjYwZS0z ZmY2LTk4NDktODI5NDA2OGY2YzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa+kQxExtB5jWDJREThUoaH5zERpYZMRxfXCFW/WfpBvdVJjCbvdUoy QMXrfBxU5VvF3tnWSyVWl0BhyzsTNE2/uMoky6iTedlmY9rcwC4a/7tus/CamqZa Zmw0NN4nQLUwLoaOkP6dkRGtl1cunO6p8NJ2cYzpk0NtHDP66rhfWGl6UD7twQy4 Abqu3HVOlKdBL+tA1VEriD+BmEHUzeHh7O7vcoAnloJaq2pZXCjwz2Lb71flcpX4 yAmfFE0HZdMilk8+uKrtwonPAcL4fngR8dupecuviljEJ2DUkjTwCCk5RG/PPlS0 WMcAp5rry5Jig4+RJseEyd+U1NilXI0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:14 2026 by rpki-client