$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6d39431-9485-353b-a73a-34e63764d706.roa File: a6d39431-9485-353b-a73a-34e63764d706.roa (raw, json) Hash identifier: 8e7wVGk5+/cNLU2RHV28uvhO32HjKRVY2H1e/KR+/7M= Subject key identifier: CB:8D:4A:A6:E2:24:D1:08:F5:89:48:F7:AC:69:B3:7F:18:5F:B0:A7 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F122827DC245B72F6580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6d39431-9485-353b-a73a-34e63764d706.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f1:22:82:7d:c2:45:b7:2f:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=bfd1ff4a-7054-47f1-9491-20c9416647e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:68:26:14:68:4e:08:f5:02:79:ce:90:5f:6f: e2:8d:12:ee:88:d4:c2:56:ee:5a:ce:b6:33:e5:37: 71:38:47:d5:06:b8:39:cf:22:46:c5:c8:49:f9:f4: 99:eb:e4:96:5d:ea:78:a0:e2:dc:40:1c:02:60:56: 49:30:df:8e:69:35:7a:67:83:99:d7:ed:02:c1:63: 76:aa:0e:f2:b4:fb:9a:f3:ab:49:7c:46:6d:02:9a: 65:be:ea:19:0e:f4:87:b8:82:cf:f4:b9:dc:46:ed: 24:f1:27:bf:f5:bc:d3:94:24:b6:12:d4:27:fd:d3: 52:14:fe:4f:b3:88:06:ad:70:b1:9b:94:da:ba:00: 07:d5:21:6f:0f:18:54:66:c7:78:b9:7d:ed:d4:a0: f2:07:b7:e6:31:49:1b:fc:b2:d7:05:59:d6:e5:b5: 5c:1d:db:82:a2:4c:40:09:85:b7:3e:46:43:68:5d: d7:a7:8c:4a:95:3c:f1:74:2f:d7:8c:fa:cf:0d:c7: b7:47:73:76:16:02:f4:c9:0f:63:70:e9:b7:ee:e7: e9:fc:50:8e:08:e5:a1:61:51:07:1a:56:61:01:97: 8d:59:95:1a:a3:7b:8c:6f:ef:50:7f:8b:10:9a:07: 8e:eb:a6:3c:5c:58:32:9c:a6:d9:34:4a:b2:f3:03: bf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8D:4A:A6:E2:24:D1:08:F5:89:48:F7:AC:69:B3:7F:18:5F:B0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a6d39431-9485-353b-a73a-34e63764d706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:09:3a:00:f0:5a:b7:8e:94:7d:93:44:16:fe:ab:e1:4c:25: fc:18:69:d9:f8:b7:50:d2:a8:3d:31:96:ae:06:0a:af:bb:e0: 39:90:15:ce:06:dc:6f:b3:01:c0:85:80:3f:7e:b1:b5:d9:c5: 32:3a:7c:e7:81:e3:5f:f8:75:ca:cb:fb:85:4f:d4:48:4d:de: 78:b1:11:3d:ff:95:82:6a:2a:69:e3:10:e9:19:b1:2d:b1:bd: 3e:59:0b:b2:ff:68:bd:f9:bb:89:51:e5:4e:6b:56:10:7a:f8: 59:be:83:5e:77:bb:bd:a7:66:0a:a9:81:e8:74:73:ef:8a:68: d0:e2:dd:9f:6b:8b:49:95:96:ca:e7:b5:c6:01:80:5d:42:a2: 93:74:f0:31:d4:10:d9:ff:6f:44:d5:05:60:03:8a:fe:c0:48: d7:c8:ac:cf:17:07:4f:7b:1e:6f:a8:2a:b6:6f:7e:ca:ef:72: e2:6c:4e:87:56:16:9e:04:c7:2c:b7:16:18:5b:50:3d:e5:f1: 79:0e:97:db:3e:df:7a:b6:96:59:35:6d:56:b1:68:96:86:0f: 17:c5:ad:42:04:bc:29:16:6e:9c:96:d8:ef:f3:6b:86:64:78: 93:28:6c:71:ef:c7:b2:b8:7a:2b:cd:b8:24:80:0a:ba:c6:cd: 9f:41:d8:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvEign3CRbcvZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk YmZkMWZmNGEtNzA1NC00N2YxLTk0OTEtMjBjOTQxNjY0N2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmgmFGhOCPUCec6QX2/ijRLuiNTCVu5azrYz 5TdxOEfVBrg5zyJGxchJ+fSZ6+SWXep4oOLcQBwCYFZJMN+OaTV6Z4OZ1+0CwWN2 qg7ytPua86tJfEZtApplvuoZDvSHuILP9LncRu0k8Se/9bzTlCS2EtQn/dNSFP5P s4gGrXCxm5TaugAH1SFvDxhUZsd4uX3t1KDyB7fmMUkb/LLXBVnW5bVcHduCokxA CYW3PkZDaF3Xp4xKlTzxdC/XjPrPDce3R3N2FgL0yQ9jcOm37ufp/FCOCOWhYVEH GlZhAZeNWZUao3uMb+9Qf4sQmgeO66Y8XFgynKbZNEqy8wO/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuNSqbiJNEI9YlI96xps38YX7CnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTZkMzk0MzEtOTQ4NS0z NTNiLWE3M2EtMzRlNjM3NjRkNzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8JOgDwWreOlH2TRBb+q+FMJfwYadn4t1DSqD0xlq4GCq+74DmQFc4G 3G+zAcCFgD9+sbXZxTI6fOeB41/4dcrL+4VP1EhN3nixET3/lYJqKmnjEOkZsS2x vT5ZC7L/aL35u4lR5U5rVhB6+Fm+g153u72nZgqpgeh0c++KaNDi3Z9ri0mVlsrn tcYBgF1CopN08DHUENn/b0TVBWADiv7ASNfIrM8XB097Hm+oKrZvfsrvcuJsTodW Fp4Exyy3FhhbUD3l8XkOl9s+33q2llk1bVaxaJaGDxfFrUIEvCkWbpyW2O/za4Zk eJMobHHvx7K4eivNuCSACrrGzZ9B2C8= -----END CERTIFICATE-----Generated at Sun Mar 1 21:02:42 2026 by rpki-client