$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa File: 9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa (raw, json) Hash identifier: QCjLmYhGu76hAledIZDNBWzx2rRTfeTea+IqcC6CGbM= Subject key identifier: CD:13:FE:F0:A2:AC:0B:14:D2:DA:E9:EC:0B:3C:79:A9:D0:57:0E:4E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C931F0A262EC50B86680 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c9:31:f0:a2:62:ec:50:b8:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=2420d4b9-7f09-4824-b71f-bf106cc3dd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:35:96:8d:87:a9:b0:54:14:ed:26:27:55: 7a:f7:e1:78:4f:33:b7:21:46:e8:d3:8a:08:0f:4e: d5:b7:f4:58:f6:0c:c6:12:fc:27:6a:4a:4e:f7:50: 94:e2:12:e4:4d:16:4d:d1:bf:e1:1c:75:7a:ba:c4: 5a:38:aa:2e:14:06:74:50:38:25:02:f8:56:6b:a7: 91:ba:74:ed:fb:07:e0:22:e1:b2:e3:b4:6a:6a:03: 8a:b3:f1:95:8e:6a:77:aa:ae:0f:2e:a5:f6:7b:16: 6a:b1:90:af:5d:69:5f:1f:ec:0e:ad:99:17:65:51: 6f:3b:eb:1f:fa:3c:2e:7d:38:15:3c:d0:13:4d:fe: e8:98:7b:77:9d:1b:fe:95:42:00:96:95:10:52:49: 7f:09:c2:d4:b3:d7:b6:53:dc:5a:d5:81:9e:d2:b6: 5a:3d:0c:3b:34:a4:41:01:f9:e2:0c:3d:df:4a:04: 34:37:7c:c3:8f:6d:0a:68:56:02:01:e3:47:10:bd: 32:61:90:39:e4:63:80:76:78:c2:d9:2f:f4:11:82: f4:41:65:c6:37:b9:a7:54:dc:e5:d0:44:30:b8:c4: e7:62:79:67:c5:48:ab:a9:d7:6a:76:e5:c3:6a:d1: 4e:60:c6:51:bb:61:68:8d:08:50:ce:8f:2c:7c:8a: d0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:13:FE:F0:A2:AC:0B:14:D2:DA:E9:EC:0B:3C:79:A9:D0:57:0E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9be7d739-065a-3fd7-93e3-b9a5d07f2f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a7:3b:76:5c:6b:80:87:de:33:e1:66:e4:70:18:fd:b4:92: 8f:50:fd:a5:5f:e7:69:39:3b:21:38:c2:44:6c:d4:75:eb:d3: c8:02:20:bd:cf:b0:ff:66:5a:50:87:36:0f:ea:46:ca:6d:ac: 2b:2a:fb:ee:16:05:ed:76:df:e9:62:cf:b9:4e:61:eb:8d:0b: 6d:75:66:bc:36:4a:70:95:11:7f:5c:78:6e:e3:e8:e4:28:c7: 00:ca:76:f2:66:cc:c0:4b:bb:d1:28:53:3f:0c:df:29:fc:ce: 81:5b:20:b0:d8:fa:ac:9d:b4:3b:21:fb:72:a1:e5:57:5d:9d: b9:e6:ef:d7:ca:9b:af:c4:f2:aa:e5:e7:8d:cb:a8:a1:ca:6d: 28:6b:72:f1:aa:54:58:3f:58:77:a8:51:85:9e:55:a9:19:27: c2:af:03:9a:ab:47:c3:af:88:da:dd:d1:f6:05:04:47:61:17: f5:ef:da:fb:d7:f3:98:25:b6:7e:39:03:00:c0:fa:2e:d8:62: 63:89:f7:4e:10:01:a5:5c:02:a6:19:b6:bd:b5:ce:de:64:24: ae:7c:49:ef:0e:a8:56:0d:be:75:cd:12:ee:01:33:a1:50:a0: 50:3e:da:1c:66:10:da:0f:ab:b1:f2:8d:af:62:65:b8:ae:da: 31:7a:2f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARskx8KJi7FC4ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk MjQyMGQ0YjktN2YwOS00ODI0LWI3MWYtYmYxMDZjYzNkZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlQ1lo2HqbBUFO0mJ1V69+F4TzO3IUbo04oI D07Vt/RY9gzGEvwnakpO91CU4hLkTRZN0b/hHHV6usRaOKouFAZ0UDglAvhWa6eR unTt+wfgIuGy47RqagOKs/GVjmp3qq4PLqX2exZqsZCvXWlfH+wOrZkXZVFvO+sf +jwufTgVPNATTf7omHt3nRv+lUIAlpUQUkl/CcLUs9e2U9xa1YGe0rZaPQw7NKRB AfniDD3fSgQ0N3zDj20KaFYCAeNHEL0yYZA55GOAdnjC2S/0EYL0QWXGN7mnVNzl 0EQwuMTnYnlnxUirqddqduXDatFOYMZRu2FojQhQzo8sfIrQTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0T/vCirAsU0trp7As8eanQVw5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvOWJlN2Q3MzktMDY1YS0z ZmQ3LTkzZTMtYjlhNWQwN2YyZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKnO3Zca4CH3jPhZuRwGP20ko9Q/aVf52k5OyE4wkRs1HXr08gCIL3P sP9mWlCHNg/qRsptrCsq++4WBe123+liz7lOYeuNC211Zrw2SnCVEX9ceG7j6OQo xwDKdvJmzMBLu9EoUz8M3yn8zoFbILDY+qydtDsh+3Kh5Vddnbnm79fKm6/E8qrl 543LqKHKbShrcvGqVFg/WHeoUYWeVakZJ8KvA5qrR8OviNrd0fYFBEdhF/Xv2vvX 85gltn45AwDA+i7YYmOJ904QAaVcAqYZtr21zt5kJK58Se8OqFYNvnXNEu4BM6FQ oFA+2hxmENoPq7Hyja9iZbiu2jF6L8k= -----END CERTIFICATE-----Generated at Sun Mar 1 20:43:52 2026 by rpki-client