$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa File: ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa (raw, json) Hash identifier: 3zZxrj1QZKi5GP2GwyEQYHEZUGRXfrlttrqvQiEpHp0= Subject key identifier: 0B:95:0A:58:62:52:3D:00:EE:C3:24:9F:F6:5B:57:E7:E0:D4:37:A2 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046C98E9F43DA13AB82CBC0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:c9:8e:9f:43:da:13:ab:82:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=a355cf8d-9d10-44e2-b157-9b890196b5c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:47:0f:54:82:5d:19:85:0a:5c:94:6b:74:52: 1d:45:4b:f6:2e:25:85:7e:87:8d:db:2d:f5:3a:db: 97:84:d1:fc:49:6b:58:17:2f:74:17:43:8e:63:19: 57:c5:8f:48:0f:c6:12:32:f7:c2:8b:30:fa:dc:10: 94:40:04:31:c8:2e:0b:05:12:3f:5a:05:ad:4b:71: 5f:77:a1:09:0f:b2:e8:96:b5:85:96:33:3a:ba:74: 2e:ce:ec:66:6e:b7:7b:88:83:b0:ce:51:f0:6f:7a: 9f:8c:26:e1:a4:34:75:9a:af:d9:51:c1:e0:16:2b: e7:28:b3:70:a1:77:54:ca:a6:ab:48:e1:b8:6c:df: 1c:07:65:bb:f9:91:af:15:35:16:45:99:30:c4:38: 8c:b6:d3:73:39:c9:40:40:a4:d5:d0:3b:b5:3e:62: e3:cd:83:1a:8e:14:a8:13:ed:35:ac:cf:db:c6:09: 27:ec:94:64:45:c2:5c:93:3d:8c:a4:5b:cd:fc:73: 10:aa:d6:03:72:e8:10:3d:cb:e9:c8:8b:b6:5c:19: 4d:0d:e1:86:ac:12:05:3f:20:11:d2:4c:b1:f5:2e: 3c:c3:2c:67:f3:16:c8:f7:6a:17:ea:19:17:e9:c8: 65:b4:47:d7:2d:16:ec:bd:35:01:79:be:58:4d:8f: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:95:0A:58:62:52:3D:00:EE:C3:24:9F:F6:5B:57:E7:E0:D4:37:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ca50de80-d89e-3cf4-9a44-83b2b99e8972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:b2:7e:7a:33:0f:f7:29:7b:01:93:44:aa:49:56:bb:e1:ee: bf:95:46:ed:7a:e4:d2:57:82:74:5c:b1:23:55:6c:02:e0:f6: 3e:c7:dd:e6:53:ec:d0:ec:e7:4d:ad:4e:04:3a:b1:a1:11:d7: 05:cc:1a:ab:39:96:83:d6:97:12:d8:1a:da:51:c3:28:ea:9b: c2:d0:9e:53:3a:45:fd:f4:3b:60:e3:24:5a:7d:95:48:ba:67: 10:dd:ed:4f:dd:19:8e:96:e2:45:fd:53:1e:98:50:b4:2b:24: b8:97:93:64:36:51:43:7c:8e:89:97:f1:52:3e:a3:2c:e7:4d: 7c:a0:aa:38:48:d4:4b:4f:8b:c3:e0:a0:9d:3e:2b:a5:d6:b5: 43:3d:aa:7b:cc:f8:f4:e0:42:d2:d0:08:f6:ad:e3:dd:8a:6f: 42:07:99:5e:36:f2:1b:74:15:64:35:f3:07:05:c5:6d:0c:b6: c4:34:a8:a1:d1:1f:73:90:dc:52:56:6c:00:7c:28:e8:91:26: 22:11:c6:f4:b8:96:ef:9f:08:75:91:cd:a7:78:ba:0c:e7:ef: 28:36:9b:2d:81:6f:98:75:b2:a3:b9:2c:bc:6d:98:f6:dc:3b: c8:36:4a:df:c2:7b:38:d1:c4:20:f8:34:94:7e:69:59:92:ea: 46:99:73:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARsmOn0PaE6uCy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk YTM1NWNmOGQtOWQxMC00NGUyLWIxNTctOWI4OTAxOTZiNWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUcPVIJdGYUKXJRrdFIdRUv2LiWFfoeN2y31 OtuXhNH8SWtYFy90F0OOYxlXxY9ID8YSMvfCizD63BCUQAQxyC4LBRI/WgWtS3Ff d6EJD7LolrWFljM6unQuzuxmbrd7iIOwzlHwb3qfjCbhpDR1mq/ZUcHgFivnKLNw oXdUyqarSOG4bN8cB2W7+ZGvFTUWRZkwxDiMttNzOclAQKTV0Du1PmLjzYMajhSo E+01rM/bxgkn7JRkRcJckz2MpFvN/HMQqtYDcugQPcvpyIu2XBlNDeGGrBIFPyAR 0kyx9S48wyxn8xbI92oX6hkX6chltEfXLRbsvTUBeb5YTY8J7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuVClhiUj0A7sMkn/ZbV+fg1DeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2E1MGRlODAtZDg5ZS0z Y2Y0LTlhNDQtODNiMmI5OWU4OTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqyfnozD/cpewGTRKpJVrvh7r+VRu165NJXgnRcsSNVbALg9j7H3eZT 7NDs502tTgQ6saER1wXMGqs5loPWlxLYGtpRwyjqm8LQnlM6Rf30O2DjJFp9lUi6 ZxDd7U/dGY6W4kX9Ux6YULQrJLiXk2Q2UUN8jomX8VI+oyznTXygqjhI1EtPi8Pg oJ0+K6XWtUM9qnvM+PTgQtLQCPat492Kb0IHmV428ht0FWQ18wcFxW0MtsQ0qKHR H3OQ3FJWbAB8KOiRJiIRxvS4lu+fCHWRzad4ugzn7yg2my2Bb5h1sqO5LLxtmPbc O8g2St/CezjRxCD4NJR+aVmS6kaZcwg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:48:33 2026 by rpki-client