$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa File: da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa (raw, json) Hash identifier: RgsuOXnMLsCAzXBL4DG2/7S6Cu5HAhKJLduBsSR4RLA= Subject key identifier: 1B:DD:C9:42:FB:1E:EB:CD:C0:EF:B8:56:BF:40:FE:1A:87:97:05:D5 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F3D8EA5BAFC6EE9C2140 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f3:d8:ea:5b:af:c6:ee:9c:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=80eed871-6f39-4a49-b271-4affef8a697d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:df:13:52:71:de:de:71:e3:10:6b:45:f3:56: 07:16:76:be:40:f0:a8:c5:94:d9:a2:38:77:a4:f1: 39:07:57:f7:b5:a7:8c:71:e7:9d:aa:3e:4c:c8:37: 6e:27:29:c8:1c:9b:11:a1:9b:c0:fa:83:1c:05:18: 85:1a:76:75:14:84:ff:bb:40:63:b0:56:8b:77:8f: e0:59:52:7e:54:de:e6:67:ff:dd:78:e3:21:e0:70: a5:61:29:50:a8:63:2c:7c:e0:7a:b5:79:61:6f:13: e3:15:cc:eb:86:7a:86:c3:5c:86:46:1d:61:63:d3: 61:fa:0a:25:49:37:1c:0e:26:db:dc:3f:87:e6:b9: 27:23:31:6e:75:92:21:78:d7:e5:c2:e8:9d:ff:92: f6:ce:bd:83:55:ef:84:41:ff:d7:47:38:42:76:a7: a0:a6:55:d6:fb:5f:ae:7e:7e:9b:34:35:c5:30:cb: 0b:7b:58:61:95:34:86:5e:3b:d8:51:bd:78:d7:dd: 84:58:83:cf:e5:03:0a:1b:27:af:05:10:1c:97:a1: 47:a4:29:e1:93:75:fc:1e:bd:b2:fa:0d:9d:5b:cc: 7f:d2:3d:2a:bf:3f:f2:c0:16:5b:f7:7c:38:3d:7a: 7c:f1:10:dc:c3:b3:ad:43:31:13:ac:1d:91:1f:c9: c7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DD:C9:42:FB:1E:EB:CD:C0:EF:B8:56:BF:40:FE:1A:87:97:05:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/da9ccbbd-b1a9-303b-b29c-829eaaa1ad7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:66:53:24:2c:e4:ac:9f:48:5c:93:5f:76:12:6c:82:b1:d3: 37:46:bb:42:59:4f:60:b4:d1:fa:d8:3e:03:06:d1:1a:e9:85: 51:7f:0c:f9:dd:80:a4:9d:3b:21:ef:91:ee:3d:2a:9d:66:15: 1d:78:4e:08:94:9c:3d:86:6d:6b:64:36:73:41:7e:33:cb:96: bc:ad:0c:e8:2e:30:f5:3d:19:1c:21:b5:f0:eb:19:06:68:3e: cf:9f:36:c9:29:4f:b2:27:a6:d6:86:bf:c8:28:41:cc:de:e2: 90:23:9e:47:60:81:22:97:26:de:37:e6:a1:ba:86:74:1c:f0: 75:b3:40:74:b5:fb:53:32:57:31:b3:03:5d:12:65:08:13:ce: d3:cf:e3:81:fd:62:d3:bd:59:02:a7:79:b7:75:36:4d:c5:80: 10:84:0f:66:a0:6a:e1:a3:a4:5d:26:29:6a:cf:d4:bc:c2:d9: c7:ff:19:ca:93:74:2a:7e:cf:c8:2c:f8:84:f8:bd:79:7b:2d: ed:78:a3:f6:94:29:50:61:35:84:41:2d:c5:49:6c:03:74:b1: 20:15:d2:f3:7a:9f:ed:eb:0a:b4:04:b0:c2:c0:2a:4c:6f:47: 4d:a8:86:41:34:11:c2:95:0f:78:c3:95:54:89:38:62:45:9d: 97:9b:fe:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvPY6luvxu6cIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk ODBlZWQ4NzEtNmYzOS00YTQ5LWIyNzEtNGFmZmVmOGE2OTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi98TUnHe3nHjEGtF81YHFna+QPCoxZTZojh3 pPE5B1f3taeMceedqj5MyDduJynIHJsRoZvA+oMcBRiFGnZ1FIT/u0BjsFaLd4/g WVJ+VN7mZ//deOMh4HClYSlQqGMsfOB6tXlhbxPjFczrhnqGw1yGRh1hY9Nh+gol STccDibb3D+H5rknIzFudZIheNflwuid/5L2zr2DVe+EQf/XRzhCdqegplXW+1+u fn6bNDXFMMsLe1hhlTSGXjvYUb14192EWIPP5QMKGyevBRAcl6FHpCnhk3X8Hr2y +g2dW8x/0j0qvz/ywBZb93w4PXp88RDcw7OtQzETrB2RH8nH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvdyUL7HuvNwO+4Vr9A/hqHlwXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZGE5Y2NiYmQtYjFhOS0z MDNiLWIyOWMtODI5ZWFhYTFhZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRmUyQs5KyfSFyTX3YSbIKx0zdGu0JZT2C00frYPgMG0RrphVF/DPnd gKSdOyHvke49Kp1mFR14TgiUnD2GbWtkNnNBfjPLlrytDOguMPU9GRwhtfDrGQZo Ps+fNskpT7InptaGv8goQcze4pAjnkdggSKXJt435qG6hnQc8HWzQHS1+1MyVzGz A10SZQgTztPP44H9YtO9WQKnebd1Nk3FgBCED2agauGjpF0mKWrP1LzC2cf/GcqT dCp+z8gs+IT4vXl7Le14o/aUKVBhNYRBLcVJbAN0sSAV0vN6n+3rCrQEsMLAKkxv R02ohkE0EcKVD3jDlVSJOGJFnZeb/pA= -----END CERTIFICATE-----Generated at Mon Mar 2 00:40:11 2026 by rpki-client