$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa File: 8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa (raw, json) Hash identifier: v3n3hczI8XglkxSwXvgi/XDi55AOwXLQuCxxWm+1I14= Subject key identifier: 42:DF:5D:0D:6C:FB:56:1B:C8:E7:55:4D:4D:BC:D4:6C:44:E7:3E:E7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C875CF0131472BD75FC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c8:75:cf:01:31:47:2b:d7:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=06304df7-aaaf-47b6-b6cd-50fa59f76ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:ad:2b:e8:56:78:fc:30:b7:a4:b9:ed:57: 0f:9e:b1:52:2c:33:7c:6d:74:81:69:f6:a9:c6:0e: 9d:65:bd:61:89:d6:1d:8c:5c:78:45:32:ef:10:4f: 50:b2:ca:5e:27:36:01:9b:4f:c7:08:f6:07:8c:92: 05:1f:7d:8e:25:34:4b:c3:c8:37:13:83:1a:14:d8: fd:0c:f1:44:59:4b:44:03:27:61:60:12:b7:f2:b1: fc:37:93:e2:45:89:94:d2:b9:65:4e:ac:76:07:16: 88:30:e3:e6:68:c0:5e:42:15:7e:94:6c:c7:84:8b: d4:3e:25:b7:af:1b:53:c2:ea:a3:ef:49:18:6b:cd: e9:72:d7:9e:07:33:fa:12:fb:41:90:8d:5d:13:55: c8:f7:0f:84:6b:e3:46:3f:cb:3f:30:61:33:95:8c: e6:07:9c:88:73:16:5c:23:41:35:4c:70:ed:c4:c9: c4:2e:e8:9c:35:97:ae:02:45:2d:e9:52:49:4b:08: 38:2b:99:e7:31:17:16:f7:0a:31:fd:de:c4:58:fd: be:a3:c7:82:a1:e8:8d:74:6c:e8:cf:57:c6:b0:f4: e0:78:80:b6:46:cf:f3:c6:e9:82:e6:1a:01:2f:c7: b1:41:b3:ad:b7:b7:2e:40:26:cb:a4:e0:60:8b:13: 48:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DF:5D:0D:6C:FB:56:1B:C8:E7:55:4D:4D:BC:D4:6C:44:E7:3E:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c6862c7-9ea1-37f4-b829-ff6fde68d01c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b5:26:f5:d4:5b:21:e4:8d:2f:13:b8:b7:01:f7:90:b4:c9: e7:fb:16:f0:91:7f:45:38:d4:1c:05:d8:7d:f8:1a:db:4c:c2: ac:1a:54:c6:83:bc:ac:d0:3a:5f:ce:81:62:fb:6c:b6:f3:45: 0f:85:54:3e:87:9e:77:88:c1:be:7d:38:9c:c1:2e:1e:f9:b0: 12:ad:8e:98:1d:c3:e6:1a:14:b8:6a:04:13:6a:a4:c8:dc:3c: ce:0d:e0:53:5c:cc:fa:f0:9f:8e:5f:fd:27:ae:a6:e8:58:54: 5c:fb:64:39:08:ff:06:eb:00:d5:ee:5e:43:08:6c:c4:1e:0a: 01:34:6c:c7:2d:46:6e:34:0d:3d:67:c9:2c:9b:e5:62:51:8b: 80:c7:af:bc:86:6c:46:b5:b3:16:f6:85:1e:53:d2:20:ba:19: 6f:6b:1d:8b:4f:fa:1f:e2:50:d1:da:9a:82:e6:16:3d:77:c6: 04:cd:48:77:1e:99:67:a3:5e:72:09:31:ed:41:25:84:78:f2: 5f:3c:b6:f2:2c:2b:23:9f:ab:c8:cb:9b:fe:5f:72:06:da:2e: 3f:28:73:02:de:b9:a3:51:a5:d6:2d:b7:f8:75:a2:da:ea:ec: 5d:d8:55:8b:2c:fd:42:5e:d6:8b:6d:f2:90:f3:80:61:94:c2: 07:55:8c:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsh1zwExRyvXX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk MDYzMDRkZjctYWFhZi00N2I2LWI2Y2QtNTBmYTU5Zjc2ZmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTOtK+hWePwwt6S57VcPnrFSLDN8bXSBafap xg6dZb1hidYdjFx4RTLvEE9QsspeJzYBm0/HCPYHjJIFH32OJTRLw8g3E4MaFNj9 DPFEWUtEAydhYBK38rH8N5PiRYmU0rllTqx2BxaIMOPmaMBeQhV+lGzHhIvUPiW3 rxtTwuqj70kYa83pcteeBzP6EvtBkI1dE1XI9w+Ea+NGP8s/MGEzlYzmB5yIcxZc I0E1THDtxMnELuicNZeuAkUt6VJJSwg4K5nnMRcW9wox/d7EWP2+o8eCoeiNdGzo z1fGsPTgeIC2Rs/zxumC5hoBL8exQbOtt7cuQCbLpOBgixNIpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELfXQ1s+1YbyOdVTU281GxE5z7nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGM2ODYyYzctOWVhMS0z N2Y0LWI4MjktZmY2ZmRlNjhkMDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHe1JvXUWyHkjS8TuLcB95C0yef7FvCRf0U41BwF2H34GttMwqwaVMaD vKzQOl/OgWL7bLbzRQ+FVD6HnneIwb59OJzBLh75sBKtjpgdw+YaFLhqBBNqpMjc PM4N4FNczPrwn45f/SeupuhYVFz7ZDkI/wbrANXuXkMIbMQeCgE0bMctRm40DT1n ySyb5WJRi4DHr7yGbEa1sxb2hR5T0iC6GW9rHYtP+h/iUNHamoLmFj13xgTNSHce mWejXnIJMe1BJYR48l88tvIsKyOfq8jLm/5fcgbaLj8ocwLeuaNRpdYtt/h1otrq 7F3YVYss/UJe1ott8pDzgGGUwgdVjFs= -----END CERTIFICATE-----Generated at Sun Mar 1 20:48:11 2026 by rpki-client