$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa File: b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa (raw, json) Hash identifier: YElrUcYGhVASFZ5FHbb0BQUnFw+ochs8p4RXo1eLPB4= Subject key identifier: 6C:6D:9C:23:28:14:9C:D6:23:10:42:39:A9:86:C0:1E:BB:79:7E:FC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F40B5998642FD581D400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f4:0b:59:98:64:2f:d5:81:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=ce9ce24a-a42a-44fc-b6e2-32ee22e585e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1d:c3:2b:5b:29:c4:31:83:99:d0:f4:af:3a: d6:ab:0f:b7:f4:78:b5:bd:2f:90:db:79:00:dd:77: ea:2c:a0:51:6d:ec:02:47:78:b3:ca:36:61:4f:fa: 46:f2:84:cd:64:7f:f9:3a:36:c0:9c:8d:7d:45:8c: c7:24:01:14:48:1a:ae:a2:c6:3b:37:9a:ba:30:93: 1a:93:ab:32:21:8a:ea:d5:2b:e5:58:28:62:9f:e1: d3:b5:15:a5:93:82:17:29:cf:3f:d0:ac:b0:04:6b: d4:b1:4a:46:fa:9e:02:71:c4:3a:e0:de:ca:ec:58: f4:cb:65:8f:d0:b1:fe:a5:d2:ab:73:72:87:8d:8b: fe:48:6c:1c:e6:56:59:29:8c:db:8b:b5:5c:3e:9c: 69:f7:02:9c:e7:39:18:03:6f:84:f2:7d:8c:ce:33: 3e:59:48:59:18:19:56:ba:7d:cf:92:21:9d:71:3b: c8:e2:e3:72:e5:36:19:74:48:f4:8d:66:96:09:81: 47:16:af:dc:9c:c4:d9:90:25:0e:4c:cb:73:42:19: ba:fe:85:6c:5c:44:97:66:54:1b:4f:ad:9f:d0:33: 42:e2:b1:cb:38:1c:69:d5:dd:1e:d6:13:fb:b6:43: f3:0c:50:7f:f4:3d:2e:6d:2b:89:46:27:09:d5:28: 20:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:6D:9C:23:28:14:9C:D6:23:10:42:39:A9:86:C0:1E:BB:79:7E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:45:cd:dc:6e:0f:18:ad:c8:f3:86:b6:0b:bf:d8:18:d3:67: 01:b7:92:69:e0:85:99:21:ac:b2:46:2e:ef:6c:a0:b1:46:fc: 5d:17:d7:39:da:17:4d:6b:14:2b:c6:f1:92:00:7d:a6:44:c4: 36:4d:88:d9:7b:77:1d:5a:b6:ad:17:1a:0e:eb:f1:e8:2e:47: 46:bc:ca:9e:d9:d2:dc:84:84:40:4d:00:c0:1d:27:09:e6:a5: c0:f1:3a:83:34:c6:9f:9c:c6:b2:da:52:83:6d:bf:79:b4:bc: cb:8e:32:c9:32:5d:ba:fe:57:ad:70:ff:27:97:bf:44:84:7f: aa:5f:29:16:14:fd:de:24:44:e6:5c:a1:90:d4:ba:95:65:11: 1c:a6:ee:17:1c:72:71:d3:56:bf:c0:fd:de:40:2a:fe:81:84: fc:90:7a:27:8c:a3:bd:d3:2d:b9:75:4f:6a:5d:d4:8b:9f:22: 8f:46:4d:71:02:0f:ce:0a:db:8e:52:ba:a5:d9:54:2e:af:27: 3d:df:48:23:0e:37:ea:bf:91:43:ef:78:74:37:69:02:9c:07: 78:cb:61:70:de:c0:c2:88:e2:12:12:e2:25:56:79:8e:4c:fb: 59:7c:e8:db:2f:10:63:41:25:f1:94:7a:c2:89:fe:4d:e7:8a: c5:0e:1e:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvQLWZhkL9WB1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk Y2U5Y2UyNGEtYTQyYS00NGZjLWI2ZTItMzJlZTIyZTU4NWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB3DK1spxDGDmdD0rzrWqw+39Hi1vS+Q23kA 3XfqLKBRbewCR3izyjZhT/pG8oTNZH/5OjbAnI19RYzHJAEUSBquosY7N5q6MJMa k6syIYrq1SvlWChin+HTtRWlk4IXKc8/0KywBGvUsUpG+p4CccQ64N7K7Fj0y2WP 0LH+pdKrc3KHjYv+SGwc5lZZKYzbi7VcPpxp9wKc5zkYA2+E8n2MzjM+WUhZGBlW un3PkiGdcTvI4uNy5TYZdEj0jWaWCYFHFq/cnMTZkCUOTMtzQhm6/oVsXESXZlQb T62f0DNC4rHLOBxp1d0e1hP7tkPzDFB/9D0ubSuJRicJ1Sgg0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxtnCMoFJzWIxBCOamGwB67eX78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjFjYWYzNzUtNTRlNi0z NzE2LTllYTUtOTZiMGY5ZjY2YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlFzdxuDxityPOGtgu/2BjTZwG3kmnghZkhrLJGLu9soLFG/F0X1zna F01rFCvG8ZIAfaZExDZNiNl7dx1atq0XGg7r8eguR0a8yp7Z0tyEhEBNAMAdJwnm pcDxOoM0xp+cxrLaUoNtv3m0vMuOMskyXbr+V61w/yeXv0SEf6pfKRYU/d4kROZc oZDUupVlERym7hcccnHTVr/A/d5AKv6BhPyQeieMo73TLbl1T2pd1IufIo9GTXEC D84K245SuqXZVC6vJz3fSCMON+q/kUPveHQ3aQKcB3jLYXDewMKI4hIS4iVWeY5M +1l86NsvEGNBJfGUesKJ/k3nisUOHlM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:42 2026 by rpki-client