$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa File: ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa (raw, json) Hash identifier: 1SwKjVRhfLcEfomPY+nvie6/+sIM5E/WpSf5njSI+Jk= Subject key identifier: 8D:4D:09:D7:DD:85:68:2E:10:B3:75:62:E9:7E:B9:D0:FE:86:9E:92 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584C8046F3BCB4996E146C51BE98 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa Signing time: Mon 12 Jan 2026 14:00:40 +0000 ROA not before: Mon 12 Jan 2026 14:00:40 +0000 ROA not after: Sun 12 Apr 2026 13:00:40 +0000 asID: 30036 IP address blocks: 198.40.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:46:f3:bc:b4:99:6e:14:6c:51:be:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jan 12 14:00:40 2026 GMT Not After : Apr 12 13:00:40 2026 GMT Subject: CN=3e1cf364-3a51-400f-8ea5-1be966a7ca20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0a:54:73:c9:2c:cd:16:2a:e8:8e:17:65:c1: cd:f8:09:4f:bd:7a:8f:09:8a:eb:d2:cc:20:df:17: bc:51:12:36:d8:c9:a2:20:f9:7d:da:c3:0d:3b:c1: e9:0c:3b:82:fb:36:f2:ca:82:0a:66:13:a0:ed:e3: c1:48:74:b0:bb:9e:92:31:50:66:dd:a5:1f:a7:4b: ae:15:46:e2:93:56:8f:00:cc:fe:ad:ea:ba:cc:9e: 07:cc:ca:76:4f:d8:86:fe:7e:a7:07:9d:bc:a9:6a: c8:d1:74:36:28:a4:97:36:8d:6a:97:31:23:ca:37: 70:b5:8b:29:20:ad:d0:76:fc:8a:cb:61:ac:5e:f5: a3:60:44:8d:7a:ba:c2:c9:d9:93:b1:8f:4f:28:f0: ea:a6:2c:c6:b5:e4:12:17:97:58:a0:c2:80:01:2d: d2:17:3b:58:60:7b:8c:09:86:05:14:ba:60:08:44: 57:06:81:a5:87:da:27:27:09:e1:81:01:e5:1d:73: f5:2f:42:c8:7d:61:2e:e8:38:b6:00:8e:1d:01:77: 39:6d:51:27:be:90:d0:3d:93:36:b6:b6:99:e4:60: 8e:6e:15:b8:ba:2e:fb:b0:3e:db:7c:6b:46:6b:05: 59:17:fd:90:7c:33:c6:6d:b0:67:5b:83:44:83:52: b4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:09:D7:DD:85:68:2E:10:B3:75:62:E9:7E:B9:D0:FE:86:9E:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ee8c5f83-df8f-3d20-92b1-f7e8a2113ea8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e8:19:11:fd:4a:63:f4:fc:00:72:22:79:5f:67:66:21:e3: 7f:bc:5d:84:9e:9a:93:c8:7f:1e:69:68:f7:66:c7:8f:48:f0: df:ad:4d:46:b1:20:43:58:9f:7b:e0:80:a1:6f:43:3f:db:76: d8:21:64:24:e3:23:42:4e:23:17:22:90:c7:2a:45:fa:ca:50: f9:b1:7b:2f:01:d8:7f:b3:2d:37:20:9f:3c:5c:07:07:c3:2c: 48:27:8f:2a:17:5b:be:ad:ae:a5:75:58:66:29:90:fd:97:6c: f4:ef:71:dd:ab:f0:c1:f8:1d:12:a7:25:6b:76:d5:bf:23:bd: e4:f2:d3:ee:cb:8f:d6:e3:a8:d6:b0:53:77:bb:1d:99:00:a2: eb:92:22:67:5e:d6:da:d7:a4:16:0d:1e:59:c0:e7:7c:ba:fa: 18:b1:fb:e9:4b:54:f4:f1:a1:73:69:f7:9a:fd:09:10:0c:36: 3d:58:33:9a:fa:85:aa:d2:2c:07:ee:32:90:b1:7d:17:54:9e: da:14:51:25:5c:7b:b9:fc:e3:91:08:71:e0:11:2c:d3:57:a5: 07:1a:65:d7:2d:66:b3:90:ec:d5:c8:2a:57:f7:71:aa:8d:c5: 9d:05:32:0c:f3:e4:70:6b:b7:0a:63:5e:4d:6d:16:0d:15:44: 4f:6f:df:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyARvO8tJluFGxRvpgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDExMjE0MDA0MFoXDTI2MDQxMjEzMDA0MFowLzEtMCsGA1UEAxMk M2UxY2YzNjQtM2E1MS00MDBmLThlYTUtMWJlOTY2YTdjYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhApUc8kszRYq6I4XZcHN+AlPvXqPCYrr0swg 3xe8URI22MmiIPl92sMNO8HpDDuC+zbyyoIKZhOg7ePBSHSwu56SMVBm3aUfp0uu FUbik1aPAMz+req6zJ4HzMp2T9iG/n6nB528qWrI0XQ2KKSXNo1qlzEjyjdwtYsp IK3QdvyKy2GsXvWjYESNerrCydmTsY9PKPDqpizGteQSF5dYoMKAAS3SFztYYHuM CYYFFLpgCERXBoGlh9onJwnhgQHlHXP1L0LIfWEu6Di2AI4dAXc5bVEnvpDQPZM2 traZ5GCObhW4ui77sD7bfGtGawVZF/2QfDPGbbBnW4NEg1K0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1NCdfdhWguELN1Yul+udD+hp6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZWU4YzVmODMtZGY4Zi0z ZDIwLTkyYjEtZjdlOGEyMTEzZWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFroGRH9SmP0/AByInlfZ2Yh43+8XYSempPIfx5paPdmx49I8N+tTUax IENYn3vggKFvQz/bdtghZCTjI0JOIxcikMcqRfrKUPmxey8B2H+zLTcgnzxcBwfD LEgnjyoXW76trqV1WGYpkP2XbPTvcd2r8MH4HRKnJWt21b8jveTy0+7Lj9bjqNaw U3e7HZkAouuSImde1trXpBYNHlnA53y6+hix++lLVPTxoXNp95r9CRAMNj1YM5r6 harSLAfuMpCxfRdUntoUUSVce7n845EIceARLNNXpQcaZdctZrOQ7NXIKlf3caqN xZ0FMgzz5HBrtwpjXk1tFg0VRE9v3xE= -----END CERTIFICATE-----Generated at Sun Mar 1 23:16:46 2026 by rpki-client