$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c695e61-36f4-313e-a0c9-718f9ca56579.roa File: 8c695e61-36f4-313e-a0c9-718f9ca56579.roa (raw, json) Hash identifier: 3wh15INW1i2zVCnroR+Fvsbl55Qvjh9oLJent7tA73g= Subject key identifier: 1F:1F:B1:D0:21:CB:95:76:54:E6:E9:57:7E:46:50:AE:7F:E9:B5:61 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C740D4FE6000B0020780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c695e61-36f4-313e-a0c9-718f9ca56579.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c7:40:d4:fe:60:00:b0:02:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=51253b14-c551-49de-83c5-34a4d72d4bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:49:83:a6:b8:71:66:ef:ac:9e:59:af:a3: 16:69:b8:c6:80:7d:c4:51:dd:32:bb:cb:32:d4:36: e4:14:82:c7:e0:eb:ea:c9:02:b8:eb:17:b7:ef:e7: d4:65:dc:12:90:65:75:da:a6:d4:5e:ab:22:79:6d: 43:75:6c:b3:af:e5:37:a9:82:fd:e8:3a:18:b4:1f: 4d:25:af:d1:c4:19:32:67:93:14:4e:7f:6d:68:22: 1d:85:57:07:75:d4:9d:f2:db:d3:bc:98:6e:f3:a3: a4:4d:88:68:1b:64:78:9e:51:c8:76:05:20:32:68: 58:44:92:4a:23:d2:7d:32:c5:8b:cd:aa:6f:40:59: 0d:78:42:43:8a:c5:d4:32:bd:8a:25:a9:b6:7a:73: 2e:34:99:dc:21:f8:55:80:b8:24:a0:d3:a9:9a:02: fd:c7:40:84:1a:84:6a:ab:70:fc:ef:de:81:02:75: 0c:34:74:b4:1b:a3:70:c8:0f:ed:d0:ab:d7:14:05: d4:86:d8:45:fc:80:0b:2e:d4:7f:12:99:d7:6e:eb: bd:ca:35:e2:97:c0:b5:15:ec:c8:d5:08:30:61:9a: ac:a3:c2:0e:35:e4:43:12:19:d6:7d:5c:1f:5b:5d: 82:ff:fe:86:80:2e:0b:40:ef:12:36:a2:68:2d:5c: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1F:B1:D0:21:CB:95:76:54:E6:E9:57:7E:46:50:AE:7F:E9:B5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8c695e61-36f4-313e-a0c9-718f9ca56579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:45:9d:87:5b:fa:cc:95:37:fd:02:1e:69:5a:e3:7f:10:3d: 95:47:2d:82:59:84:2c:fa:56:b8:f2:ae:be:62:43:c7:bd:c3: 1b:b8:a7:77:0f:11:1c:b1:3e:94:ea:0b:34:0b:b6:32:fd:cd: 5d:b5:45:59:28:42:34:7e:d3:3e:4a:4c:8b:e9:e1:9a:ea:d6: 00:87:65:4d:87:7c:1f:87:77:ca:37:42:62:d2:bd:57:b0:9a: f1:ce:d0:0b:ca:e5:7c:3a:ed:50:98:a3:e7:9b:e6:99:90:46: cd:20:4a:58:7f:30:4f:c4:97:1f:e7:18:5a:0b:f3:17:b2:d4: 9b:f2:1a:77:9b:6a:36:ed:f3:12:c6:a1:3e:3d:f2:e9:ee:23: 21:1e:04:42:7e:40:dd:82:61:d1:35:f8:34:0f:e5:b3:0c:e5: de:f9:ea:19:70:f1:de:b6:94:74:86:9b:0a:e2:9b:a6:75:56: be:d0:6b:50:6b:3f:ef:40:22:50:45:71:b6:98:6e:15:5e:9a: c6:ac:a4:a6:3a:04:73:e2:41:64:bb:88:1c:d9:f5:5a:39:56: 9b:c9:1e:6b:c5:a7:0c:f7:5e:a0:9d:b9:ee:00:01:bb:f4:31: 64:9e:ba:2d:a0:34:29:2a:d9:80:2f:a8:bb:e2:45:f7:58:0a: f8:c8:56:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsdA1P5gALACB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NTEyNTNiMTQtYzU1MS00OWRlLTgzYzUtMzRhNGQ3MmQ0YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gpJg6a4cWbvrJ5Zr6MWabjGgH3EUd0yu8sy 1DbkFILH4OvqyQK46xe37+fUZdwSkGV12qbUXqsieW1DdWyzr+U3qYL96DoYtB9N Ja/RxBkyZ5MUTn9taCIdhVcHddSd8tvTvJhu86OkTYhoG2R4nlHIdgUgMmhYRJJK I9J9MsWLzapvQFkNeEJDisXUMr2KJam2enMuNJncIfhVgLgkoNOpmgL9x0CEGoRq q3D8796BAnUMNHS0G6NwyA/t0KvXFAXUhthF/IALLtR/EpnXbuu9yjXil8C1FezI 1QgwYZqso8IONeRDEhnWfVwfW12C//6GgC4LQO8SNqJoLVw16QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8fsdAhy5V2VObpV35GUK5/6bVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGM2OTVlNjEtMzZmNC0z MTNlLWEwYzktNzE4ZjljYTU2NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVFnYdb+syVN/0CHmla438QPZVHLYJZhCz6Vrjyrr5iQ8e9wxu4p3cP ERyxPpTqCzQLtjL9zV21RVkoQjR+0z5KTIvp4Zrq1gCHZU2HfB+Hd8o3QmLSvVew mvHO0AvK5Xw67VCYo+eb5pmQRs0gSlh/ME/Elx/nGFoL8xey1JvyGnebajbt8xLG oT498unuIyEeBEJ+QN2CYdE1+DQP5bMM5d756hlw8d62lHSGmwrim6Z1Vr7Qa1Br P+9AIlBFcbaYbhVemsaspKY6BHPiQWS7iBzZ9Vo5VpvJHmvFpwz3XqCdue4AAbv0 MWSeui2gNCkq2YAvqLviRfdYCvjIVp0= -----END CERTIFICATE-----Generated at Sun Mar 1 21:01:11 2026 by rpki-client