$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa File: a998f21f-effb-392c-abf8-e55e5270da70.roa (raw, json) Hash identifier: ZdE39lJjAOwcxWoyADP+2VXxTH2tnXpNHKw6c/iwHl8= Subject key identifier: A5:6D:71:44:22:9C:11:87:92:30:E8:52:E9:E5:87:41:76:6D:9C:6E Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046DE43449686AA068BB920 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:de:43:44:96:86:aa:06:8b:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=48705958-c21e-4662-9170-6f59325972b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a0:2c:1a:0b:1b:d3:51:f3:61:e9:2a:c7:d9: 3d:dc:88:c6:e0:90:6d:48:e1:28:67:28:57:0a:18: e0:a8:cd:71:e0:3c:3c:2d:33:fa:11:bb:f7:1c:2c: 38:96:85:bd:07:05:c5:f4:72:6a:67:e4:fe:fb:cd: fe:a3:9d:e6:bc:43:32:5c:1d:78:81:dd:c4:54:a4: 18:7d:65:81:aa:a4:5d:5d:1e:35:ac:48:d0:cf:69: cd:0e:06:d5:e6:f6:d1:b5:84:a9:4d:de:38:4e:81: 5c:e7:02:e7:a2:3a:1d:1e:93:ab:b6:df:65:b2:d5: a1:b2:29:97:a6:00:a3:26:8a:15:8f:c6:91:2e:8a: 7a:b0:70:a9:a6:c6:24:b1:aa:15:46:71:97:37:d2: c4:61:f3:f2:2c:71:88:8c:c0:ce:3e:a7:55:fe:95: f8:b2:12:60:3e:79:8f:af:0e:c1:12:15:55:34:31: 80:fa:c4:af:d4:c2:f3:52:c8:d4:9e:87:1c:83:29: 25:96:3b:6f:e9:5f:33:c0:43:43:c2:e2:f4:d7:d9: f0:48:c9:40:9f:1a:90:96:01:d5:07:08:ce:80:97: ac:e8:87:a7:58:c5:16:57:fd:6b:7c:ae:51:c9:0e: e0:5b:de:7f:05:d7:7c:9d:5d:ed:4a:79:59:0c:91: 86:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6D:71:44:22:9C:11:87:92:30:E8:52:E9:E5:87:41:76:6D:9C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:47:74:23:3e:83:e9:9c:40:5a:e6:ea:b9:2b:cf:b1:3a:76: b3:c5:df:8a:c4:fa:c8:aa:32:37:f8:de:21:af:46:8c:f0:82: 37:33:34:fd:f1:3a:4e:18:fb:70:b6:4f:85:d7:36:46:4a:a6: f5:aa:8d:1d:a2:7a:91:45:44:66:40:69:5b:15:3f:d0:02:4c: 64:36:50:78:52:49:e2:04:a6:57:9f:d6:8b:41:6c:7d:8e:f0: b5:62:28:6c:65:6d:14:5c:a4:fd:a7:56:de:a4:8c:26:bb:9b: 48:06:f0:ac:b4:a2:1f:90:3f:57:b8:a8:d7:eb:2c:39:71:b1: 6b:0d:59:42:3f:18:20:8d:14:10:41:d9:4b:27:f7:8e:59:f3: 42:6d:fa:86:a9:d9:34:97:3a:b4:ca:f4:07:a3:58:ab:e2:d0: a8:3c:36:1b:51:11:1d:99:61:13:0d:a7:4c:b9:e0:9a:13:b1: 2d:93:54:9a:4c:09:f0:a5:02:ea:c5:ea:8a:8a:82:bb:76:22: a5:68:c0:99:e4:35:0b:17:58:b6:ee:d0:d3:19:fc:4b:9e:7e: f4:ef:8c:b7:6a:4b:b7:87:c6:bd:b8:e5:10:ca:5b:ae:0c:93: ce:1a:f4:d0:43:65:64:ba:19:f4:af:58:5c:1d:79:5d:ce:6d: 13:40:97:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARt5DRJaGqgaLuSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk NDg3MDU5NTgtYzIxZS00NjYyLTkxNzAtNmY1OTMyNTk3MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aAsGgsb01HzYekqx9k93IjG4JBtSOEoZyhX ChjgqM1x4Dw8LTP6Ebv3HCw4loW9BwXF9HJqZ+T++83+o53mvEMyXB14gd3EVKQY fWWBqqRdXR41rEjQz2nNDgbV5vbRtYSpTd44ToFc5wLnojodHpOrtt9lstWhsimX pgCjJooVj8aRLop6sHCppsYksaoVRnGXN9LEYfPyLHGIjMDOPqdV/pX4shJgPnmP rw7BEhVVNDGA+sSv1MLzUsjUnoccgyklljtv6V8zwENDwuL019nwSMlAnxqQlgHV BwjOgJes6IenWMUWV/1rfK5RyQ7gW95/Bdd8nV3tSnlZDJGGUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVtcUQinBGHkjDoUunlh0F2bZxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTk5OGYyMWYtZWZmYi0z OTJjLWFiZjgtZTU1ZTUyNzBkYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtHdCM+g+mcQFrm6rkrz7E6drPF34rE+siqMjf43iGvRozwgjczNP3x Ok4Y+3C2T4XXNkZKpvWqjR2iepFFRGZAaVsVP9ACTGQ2UHhSSeIEplef1otBbH2O 8LViKGxlbRRcpP2nVt6kjCa7m0gG8Ky0oh+QP1e4qNfrLDlxsWsNWUI/GCCNFBBB 2Usn945Z80Jt+oap2TSXOrTK9AejWKvi0Kg8NhtRER2ZYRMNp0y54JoTsS2TVJpM CfClAurF6oqKgrt2IqVowJnkNQsXWLbu0NMZ/EuefvTvjLdqS7eHxr245RDKW64M k84a9NBDZWS6GfSvWFwdeV3ObRNAl5M= -----END CERTIFICATE-----Generated at Sun Mar 1 22:58:31 2026 by rpki-client