$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/caf3393e-810f-3342-a8fc-77c82f172cf8.roa File: caf3393e-810f-3342-a8fc-77c82f172cf8.roa (raw, json) Hash identifier: nY3fLgbdql0xvbvvFGrYG/c28iNkAEDc2u/kgnRGnCo= Subject key identifier: E3:FD:57:72:F8:43:54:BC:C0:06:9C:C1:C3:45:5A:32:93:67:79:BA Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F48890DDE45F81BC6E80 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/caf3393e-810f-3342-a8fc-77c82f172cf8.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f4:88:90:dd:e4:5f:81:bc:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=cb538398-6091-4884-aaa7-b5992f66871a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:06:54:fb:36:26:66:47:90:4f:90:f3:da:56: 76:31:2f:92:65:8f:4c:0b:3b:96:37:26:3d:f5:51: 0c:e6:c4:5e:b8:c7:ba:6d:26:3c:dc:0c:c3:76:45: 3d:64:40:6b:2d:6e:2a:f0:06:dd:3e:f7:50:7e:cb: 45:2a:43:1e:c1:c1:57:90:6f:56:bd:94:92:15:b6: 62:17:18:d5:f1:36:4f:89:f0:70:0e:33:e1:95:c1: 5a:c1:59:1b:59:72:55:37:6a:31:a1:5c:e9:0c:44: 8c:bd:8a:45:7a:ad:ff:53:bf:1b:c2:9f:9a:17:12: 44:dd:6a:ca:9d:dd:a7:12:1e:84:96:6d:7d:57:1b: d8:c9:88:6b:32:13:f3:61:9f:14:42:13:43:19:6e: 6d:e6:e4:4f:25:83:a7:48:97:31:b5:16:e3:76:93: e3:e2:a3:af:7b:52:71:c3:50:e5:9e:b8:47:84:cd: 34:e8:ee:11:ba:5a:d9:33:fc:46:ca:49:64:ad:1e: 36:31:3a:83:3c:28:8f:ba:5c:76:ae:4a:d9:1a:ec: 59:90:8f:38:98:d7:0b:46:60:d7:3e:71:f4:4a:d0: 49:d6:8a:40:92:c5:79:1e:cd:10:3b:e8:e9:62:97: 16:ff:15:24:22:5f:ad:14:04:c6:f3:54:d8:9d:13: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FD:57:72:F8:43:54:BC:C0:06:9C:C1:C3:45:5A:32:93:67:79:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/caf3393e-810f-3342-a8fc-77c82f172cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:59:c5:09:ac:6b:2e:67:eb:10:f3:2f:58:cf:aa:27:b2:f3: ef:3f:5f:de:69:90:b7:81:c1:bd:e8:11:6a:75:f2:5a:10:06: 81:88:56:36:4f:db:ad:e8:c3:35:7e:82:a4:57:49:d6:99:f6: a8:81:47:ea:13:2c:a1:95:cf:47:da:60:87:ab:cf:f4:b4:48: 3c:e2:6f:48:f2:ac:71:d7:fb:96:43:56:32:a1:a6:dd:2d:b9: 77:29:6a:8b:53:09:40:68:f7:dd:cd:e8:3e:05:97:ff:4f:f9: bf:67:1f:ad:2c:c8:ec:67:e7:9f:3a:7b:8a:1d:dc:b2:ff:24: 7a:2b:06:d7:2d:22:79:41:3c:91:72:6c:3e:9b:af:2a:4e:6d: 29:8e:a4:ee:eb:cd:bb:76:81:ba:70:33:92:0b:36:37:a7:71: 7a:27:e5:78:b3:32:71:93:76:ad:fb:e0:b9:b4:2d:0e:4b:fd: 04:4f:f5:10:a9:e6:e9:6a:30:22:b9:c8:3e:68:72:81:12:10: a5:22:d6:d4:11:78:97:f2:9d:46:3f:71:76:25:cc:64:37:ba: 92:99:d3:81:cf:5b:45:04:a4:95:7c:23:1c:bf:3e:5c:7b:de: 90:37:e8:8b:26:1b:c1:53:62:ac:bd:aa:bf:b1:bf:46:91:19: 40:77:8f:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvSIkN3kX4G8boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk Y2I1MzgzOTgtNjA5MS00ODg0LWFhYTctYjU5OTJmNjY4NzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAZU+zYmZkeQT5Dz2lZ2MS+SZY9MCzuWNyY9 9VEM5sReuMe6bSY83AzDdkU9ZEBrLW4q8AbdPvdQfstFKkMewcFXkG9WvZSSFbZi FxjV8TZPifBwDjPhlcFawVkbWXJVN2oxoVzpDESMvYpFeq3/U78bwp+aFxJE3WrK nd2nEh6Elm19VxvYyYhrMhPzYZ8UQhNDGW5t5uRPJYOnSJcxtRbjdpPj4qOve1Jx w1DlnrhHhM006O4RulrZM/xGyklkrR42MTqDPCiPulx2rkrZGuxZkI84mNcLRmDX PnH0StBJ1opAksV5Hs0QO+jpYpcW/xUkIl+tFATG81TYnROJBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP9V3L4Q1S8wAacwcNFWjKTZ3m6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvY2FmMzM5M2UtODEwZi0z MzQyLWE4ZmMtNzdjODJmMTcyY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVZxQmsay5n6xDzL1jPqiey8+8/X95pkLeBwb3oEWp18loQBoGIVjZP 263owzV+gqRXSdaZ9qiBR+oTLKGVz0faYIerz/S0SDzib0jyrHHX+5ZDVjKhpt0t uXcpaotTCUBo993N6D4Fl/9P+b9nH60syOxn5586e4od3LL/JHorBtctInlBPJFy bD6brypObSmOpO7rzbt2gbpwM5ILNjencXon5XizMnGTdq374Lm0LQ5L/QRP9RCp 5ulqMCK5yD5ocoESEKUi1tQReJfynUY/cXYlzGQ3upKZ04HPW0UEpJV8Ixy/Plx7 3pA36IsmG8FTYqy9qr+xv0aRGUB3j/I= -----END CERTIFICATE-----Generated at Mon Mar 2 06:05:14 2026 by rpki-client