$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa File: be96b7e5-94af-357e-b42b-06756e4de524.roa (raw, json) Hash identifier: HVa+DOkqTELCYBme5aiKaOSHZIV72Nh38sVes0TAmBc= Subject key identifier: 61:18:75:BE:B9:2B:C5:88:E4:35:FF:41:77:97:34:2F:EF:3C:1E:DD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C9AFADD0420D14A15FC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c9:af:ad:d0:42:0d:14:a1:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=8c2f07a9-eead-4414-89c7-7549efdc3bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:48:6f:d5:64:2a:08:87:bc:65:44:97:0e: 58:25:3d:09:d0:0e:a7:66:ab:b4:ca:1f:2c:99:27: f5:4d:aa:94:9f:5f:38:81:71:5a:cb:aa:fa:2a:fe: 5f:1b:8d:9d:96:0d:20:7f:1c:aa:99:68:3e:ab:df: 7f:fb:7e:f9:fe:cc:7c:f0:7c:2b:90:45:5e:f3:46: e1:9c:0f:44:d9:e6:b2:72:44:40:cf:46:5e:4f:9b: 37:05:cc:a4:28:63:ac:69:33:76:4e:d3:21:91:a7: 44:bf:4b:be:6a:93:ac:51:05:dd:f8:b8:c6:b1:49: 93:b3:37:90:f0:9d:25:e0:47:db:16:51:a2:3b:48: 4f:32:a2:83:60:80:25:2d:b8:66:d5:cf:10:c3:c3: 3e:52:61:76:1d:72:82:79:9b:c3:66:13:3d:77:df: ba:e8:23:ea:db:8d:6e:0d:cb:94:ac:df:e2:3b:b6: 08:1d:b6:81:75:55:a4:2a:e4:7a:36:65:37:52:01: 78:7f:79:4b:27:11:48:55:21:c2:ec:fc:01:09:97: 82:2b:6f:44:8d:67:8c:7c:41:48:11:b1:e4:a9:57: f5:fb:02:f4:4d:25:e9:ca:ad:f3:fe:ca:a2:34:b3: e2:ba:3a:e1:42:03:af:b3:93:54:12:8a:88:d4:53: 6c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:18:75:BE:B9:2B:C5:88:E4:35:FF:41:77:97:34:2F:EF:3C:1E:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:f4:db:43:03:15:75:60:58:a4:18:02:9d:d5:0c:08:50:59: fc:ed:06:29:18:47:1e:5a:1b:6b:10:a6:f6:73:54:7d:4e:ba: 01:e5:14:f1:16:24:03:53:dc:ca:db:1a:13:dc:80:1a:a8:9e: a8:7f:e3:92:06:ca:a0:b9:3b:a3:80:fc:3c:fc:99:b1:0a:bb: 76:41:5f:fc:b8:28:18:b4:d8:e3:4c:59:37:3a:12:d2:bf:30: 6c:69:c8:21:72:a4:91:72:82:01:ff:7a:d1:d1:e3:82:8e:7a: d7:39:4a:ad:9e:32:d6:21:1d:82:58:0b:05:74:36:49:38:c7: 1e:c1:df:79:b4:90:83:0c:75:45:db:2f:06:61:e6:09:cc:ff: 4e:ff:c0:5f:76:ca:ff:91:8b:e0:1d:3c:18:e2:ec:e4:71:e1: c0:4c:95:8c:06:f6:52:f8:6d:82:97:3b:c0:53:b8:fb:17:fc: ff:9d:2e:bd:15:33:cb:20:23:98:11:6d:6d:9e:94:81:bf:1a: ce:d0:3b:d3:2a:ec:c4:17:9d:c4:fc:79:64:5f:b9:95:08:0b: 9c:32:e7:36:8e:24:49:38:af:48:3f:d9:84:04:88:1d:c2:cf: a8:e0:9b:1b:2c:c6:22:f3:62:3d:34:d8:ce:07:02:88:5a:d4: 7b:e1:31:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsmvrdBCDRShX8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk OGMyZjA3YTktZWVhZC00NDE0LTg5YzctNzU0OWVmZGMzYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k1Ib9VkKgiHvGVElw5YJT0J0A6nZqu0yh8s mSf1TaqUn184gXFay6r6Kv5fG42dlg0gfxyqmWg+q99/+375/sx88HwrkEVe80bh nA9E2eayckRAz0ZeT5s3BcykKGOsaTN2TtMhkadEv0u+apOsUQXd+LjGsUmTszeQ 8J0l4EfbFlGiO0hPMqKDYIAlLbhm1c8Qw8M+UmF2HXKCeZvDZhM9d9+66CPq241u DcuUrN/iO7YIHbaBdVWkKuR6NmU3UgF4f3lLJxFIVSHC7PwBCZeCK29EjWeMfEFI EbHkqVf1+wL0TSXpyq3z/sqiNLPiujrhQgOvs5NUEoqI1FNsbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEYdb65K8WI5DX/QXeXNC/vPB7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYmU5NmI3ZTUtOTRhZi0z NTdlLWI0MmItMDY3NTZlNGRlNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/020MDFXVgWKQYAp3VDAhQWfztBikYRx5aG2sQpvZzVH1OugHlFPEW JANT3MrbGhPcgBqonqh/45IGyqC5O6OA/Dz8mbEKu3ZBX/y4KBi02ONMWTc6EtK/ MGxpyCFypJFyggH/etHR44KOetc5Sq2eMtYhHYJYCwV0Nkk4xx7B33m0kIMMdUXb LwZh5gnM/07/wF92yv+Ri+AdPBji7ORx4cBMlYwG9lL4bYKXO8BTuPsX/P+dLr0V M8sgI5gRbW2elIG/Gs7QO9Mq7MQXncT8eWRfuZUIC5wy5zaOJEk4r0g/2YQEiB3C z6jgmxssxiLzYj002M4HAoha1HvhMeY= -----END CERTIFICATE-----Generated at Mon Mar 2 06:25:13 2026 by rpki-client