$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa File: 8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa (raw, json) Hash identifier: ysdFd/6UP2tLknDTfdfMcooxFNriU5r2oNBRexHc7Ic= Subject key identifier: 66:14:E3:5A:13:A6:55:ED:03:09:50:78:D5:F6:68:30:AB:1F:E9:FD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E4F19FBADE9ABE0AF9F4A0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 198.40.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f1:9f:ba:de:9a:be:0a:f9:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=dbeadd85-48a1-4020-8295-0e983c005acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e1:21:f5:2e:21:96:38:35:fc:14:06:ad:a1: 83:b9:3a:ac:90:34:32:2b:74:74:2c:45:03:5e:aa: f7:9c:8f:a9:c2:40:a5:1e:cf:c9:9f:bd:e4:47:27: fc:84:9c:73:af:72:58:1f:6a:8d:3e:11:b8:81:75: 52:51:0f:1b:8e:14:88:a2:b9:20:a0:db:6d:07:8f: b4:ae:98:57:b7:97:c5:9e:ee:5b:01:bb:41:28:4e: 80:90:9b:cd:ff:90:65:0a:ff:8d:db:25:de:20:7d: 18:7f:b4:36:ec:94:97:86:4f:ba:c6:a9:5f:86:54: 08:f7:67:fc:0a:e5:5b:fc:e4:a6:9f:17:07:28:79: df:1e:c9:2d:e9:06:a9:8a:dd:bc:73:69:9c:fa:e8: 1e:0e:53:84:49:ff:db:da:09:75:49:d4:a2:ee:44: 3e:78:c9:8b:68:fc:ba:59:82:fc:2f:88:90:c7:28: d6:cf:30:86:1f:11:f2:82:b6:3b:db:4f:1f:91:ef: 83:bd:09:77:16:72:c9:f2:3a:4e:17:87:39:d0:5a: 79:05:e6:24:f6:11:57:f9:1c:a9:86:42:36:92:ab: 23:cb:d3:48:84:04:95:83:17:42:6f:6d:82:76:34: 4e:b2:2f:d7:37:5c:02:41:fe:34:6e:03:63:01:21: ce:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:14:E3:5A:13:A6:55:ED:03:09:50:78:D5:F6:68:30:AB:1F:E9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:22:29:a9:04:e6:c3:ad:03:47:d6:c9:34:3b:47:df:65:71: 02:fd:0f:9a:48:1b:5e:41:92:68:e0:47:24:e6:44:74:34:b8: b4:dc:4c:cf:ed:45:e0:d4:50:58:d5:78:c3:6b:a9:de:92:54: 94:42:80:ad:27:8c:79:49:9e:6c:eb:4d:62:0a:69:fc:b8:8f: 0c:a2:c4:95:99:be:9d:65:73:c4:94:87:ff:6a:99:09:11:0a: 24:6b:b1:72:f1:e0:5e:aa:1c:f7:c8:d6:39:74:bb:bb:7f:7b: da:45:b1:98:f4:ef:0e:70:5a:35:73:dc:10:29:04:71:f0:15: 61:de:02:b0:43:42:3e:6e:2e:ce:08:9e:05:71:f6:1e:2b:3b: 82:03:6a:90:c7:46:e8:3d:20:4d:65:01:4b:7f:14:3c:e4:be: 30:43:42:b1:3c:cc:47:38:80:7f:2d:1d:24:ff:74:ba:fe:6e: 28:ed:91:fe:c8:91:20:f2:9f:bc:58:69:0f:74:a2:a9:1e:d1: fa:d9:a9:a7:cd:d1:d2:d8:0b:31:79:5b:a7:5f:36:40:f1:87: f6:dc:aa:ce:d4:ac:90:1f:d1:b8:94:bb:9b:ee:f7:8b:27:ea: 79:2b:90:cc:2b:a8:10:3e:fc:ac:f1:2c:f6:1a:69:39:82:4c: 9e:66:77:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PGfut6avgr59KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ZGJlYWRkODUtNDhhMS00MDIwLTgyOTUtMGU5ODNjMDA1YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+Eh9S4hljg1/BQGraGDuTqskDQyK3R0LEUD Xqr3nI+pwkClHs/Jn73kRyf8hJxzr3JYH2qNPhG4gXVSUQ8bjhSIorkgoNttB4+0 rphXt5fFnu5bAbtBKE6AkJvN/5BlCv+N2yXeIH0Yf7Q27JSXhk+6xqlfhlQI92f8 CuVb/OSmnxcHKHnfHskt6Qapit28c2mc+ugeDlOESf/b2gl1SdSi7kQ+eMmLaPy6 WYL8L4iQxyjWzzCGHxHygrY7208fke+DvQl3FnLJ8jpOF4c50Fp5BeYk9hFX+Ryp hkI2kqsjy9NIhASVgxdCb22CdjROsi/XN1wCQf40bgNjASHOXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYU41oTplXtAwlQeNX2aDCrH+n9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGZmNGU4NjEtNmEyYi0z ZGY2LWE1YzItNzgwYTQ2ODBlOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0iKakE5sOtA0fWyTQ7R99lcQL9D5pIG15BkmjgRyTmRHQ0uLTcTM/t ReDUUFjVeMNrqd6SVJRCgK0njHlJnmzrTWIKafy4jwyixJWZvp1lc8SUh/9qmQkR CiRrsXLx4F6qHPfI1jl0u7t/e9pFsZj07w5wWjVz3BApBHHwFWHeArBDQj5uLs4I ngVx9h4rO4IDapDHRug9IE1lAUt/FDzkvjBDQrE8zEc4gH8tHST/dLr+bijtkf7I kSDyn7xYaQ90oqke0frZqafN0dLYCzF5W6dfNkDxh/bcqs7UrJAf0biUu5vu94sn 6nkrkMwrqBA+/KzxLPYaaTmCTJ5md/w= -----END CERTIFICATE-----Generated at Fri Apr 17 11:34:06 2026 by rpki-client