$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa File: 8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa (raw, json) Hash identifier: GW9ECSdanyxq1o2949cPd5pMde1z4JhrkRS0HjEmlhY= Subject key identifier: F5:D3:96:86:E7:30:1D:89:76:29:64:9C:BB:E9:86:13:88:B4:BB:6E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C9D14AE07C634A0384C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c9:d1:4a:e0:7c:63:4a:03:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=4c992f1c-62eb-4694-adeb-248f99daca00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9c:da:95:0d:63:c0:63:7b:07:9e:c0:a7:84: c7:95:8f:e7:e1:5a:3c:d5:fa:97:ce:f9:6a:ec:db: db:81:4c:b3:0b:c9:e9:52:7c:15:8a:38:da:d3:b8: 42:9e:28:76:e0:13:8e:5b:ef:bc:4b:3f:8e:d3:5b: cf:68:12:72:c4:d8:25:5e:cf:e5:79:8e:bf:75:eb: 48:97:b5:4b:43:10:46:fb:b6:f8:1f:55:bc:e2:b4: c8:00:0b:d3:5d:83:ef:4d:7f:bc:c4:ff:d3:52:14: 3f:8a:33:02:0d:cf:fd:fe:cc:34:0b:e6:29:e5:77: 18:b7:85:ee:84:d2:8b:c1:24:a4:50:c1:0e:15:bf: b3:22:a7:85:d5:0b:29:35:89:1d:26:4b:92:24:d0: 16:c9:0f:aa:e2:9c:59:72:6b:d9:9f:6a:39:63:fb: f4:b4:6e:8b:aa:13:f8:8c:9d:be:af:17:48:15:82: ac:e6:83:11:6c:bb:e0:31:4f:f7:d2:8d:83:bc:84: 5e:9e:c6:c1:df:8c:7e:49:38:31:9f:8f:b4:ab:ca: e3:a2:94:ff:9e:8b:4f:c8:75:fa:fc:4c:0a:30:1c: fa:3c:fb:03:87:bd:27:7e:1c:ed:e4:9f:23:c0:f1: 00:ae:15:e7:a0:47:7c:10:90:e5:68:3c:69:20:3c: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D3:96:86:E7:30:1D:89:76:29:64:9C:BB:E9:86:13:88:B4:BB:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/8ff4e861-6a2b-3df6-a5c2-780a4680e8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ca:e6:28:16:c9:3b:63:ce:18:dc:47:36:13:e0:18:46:5a: c5:62:87:95:30:46:d9:fd:48:3f:0c:af:6f:5b:97:4a:45:b4: bf:d0:03:06:6d:9c:6f:01:6d:fe:3f:54:24:49:52:1c:ce:b0: 21:4a:3f:4f:f4:d0:80:1d:54:9b:fe:14:db:50:16:fd:52:66: 9e:1c:5d:4a:56:46:95:7e:15:d3:d1:2e:67:38:79:78:a2:94: 84:08:82:02:58:3d:e9:59:c1:71:d9:40:b5:03:4a:81:f2:5a: 44:b9:c0:05:fc:cd:bd:07:c5:41:0f:71:e7:4b:0e:c4:1f:7a: 58:d2:69:ad:ca:b8:09:84:1c:e6:4f:8c:8c:73:ee:2d:ff:8e: 4c:8d:24:18:10:17:87:24:a2:81:a2:33:2c:29:5f:2d:d1:d2: 27:2f:d6:20:c3:18:8d:9e:ac:57:95:f7:c3:c7:ed:4f:72:87: 3e:6d:aa:d8:55:c9:ec:9b:5c:5d:2a:38:79:2a:b4:ec:1c:56: 1d:d8:c8:3b:8a:5c:8e:bc:ef:7b:27:00:6d:e0:5a:f9:dc:c6: 69:59:1a:b3:64:c3:74:16:e9:84:c2:df:90:90:06:f8:6e:32: b3:36:48:ff:d2:c8:ec:ad:5a:23:ca:ee:34:99:4e:cb:23:ed: 7a:da:03:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsnRSuB8Y0oDhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NGM5OTJmMWMtNjJlYi00Njk0LWFkZWItMjQ4Zjk5ZGFjYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5zalQ1jwGN7B57Ap4THlY/n4Vo81fqXzvlq 7NvbgUyzC8npUnwVijja07hCnih24BOOW++8Sz+O01vPaBJyxNglXs/leY6/detI l7VLQxBG+7b4H1W84rTIAAvTXYPvTX+8xP/TUhQ/ijMCDc/9/sw0C+Yp5XcYt4Xu hNKLwSSkUMEOFb+zIqeF1QspNYkdJkuSJNAWyQ+q4pxZcmvZn2o5Y/v0tG6LqhP4 jJ2+rxdIFYKs5oMRbLvgMU/30o2DvIRensbB34x+STgxn4+0q8rjopT/notPyHX6 /EwKMBz6PPsDh70nfhzt5J8jwPEArhXnoEd8EJDlaDxpIDwxzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPXTlobnMB2JdilknLvphhOItLtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOGZmNGU4NjEtNmEyYi0z ZGY2LWE1YzItNzgwYTQ2ODBlOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDK5igWyTtjzhjcRzYT4BhGWsVih5UwRtn9SD8Mr29bl0pFtL/QAwZt nG8Bbf4/VCRJUhzOsCFKP0/00IAdVJv+FNtQFv1SZp4cXUpWRpV+FdPRLmc4eXii lIQIggJYPelZwXHZQLUDSoHyWkS5wAX8zb0HxUEPcedLDsQfeljSaa3KuAmEHOZP jIxz7i3/jkyNJBgQF4ckooGiMywpXy3R0icv1iDDGI2erFeV98PH7U9yhz5tqthV yeybXF0qOHkqtOwcVh3YyDuKXI6873snAG3gWvncxmlZGrNkw3QW6YTC35CQBvhu MrM2SP/SyOytWiPK7jSZTssj7XraA7E= -----END CERTIFICATE-----Generated at Sun Mar 1 20:37:25 2026 by rpki-client