$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/0e60e648-d0ee-310e-865a-eb808c283eda.roa File: 0e60e648-d0ee-310e-865a-eb808c283eda.roa (raw, json) Hash identifier: rRcxzAFW6l7TaJOOGqYjs6t0GyYf9aH0R1YddqnJ9cY= Subject key identifier: 21:9F:7A:88:A9:4F:E3:6B:04:76:8C:CA:1D:39:85:EF:85:0A:DB:C9 Certificate issuer: /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Certificate serial: 010D0C9F4328584C9EFC64874AA4CACE51FA9940 Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/0e60e648-d0ee-310e-865a-eb808c283eda.roa Signing time: Fri 23 Jan 2026 14:00:38 +0000 ROA not before: Fri 23 Jan 2026 14:00:38 +0000 ROA not after: Thu 23 Apr 2026 13:00:38 +0000 asID: 26395 IP address blocks: 159.222.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:fc:64:87:4a:a4:ca:ce:51:fa:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3 Validity Not Before: Jan 23 14:00:38 2026 GMT Not After : Apr 23 13:00:38 2026 GMT Subject: CN=20e808ce-5122-45d5-9ab3-6d290a0e7443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:32:fd:03:96:8b:ab:30:14:b4:b5:0c:fb:50: 63:17:38:ce:18:1b:2d:e4:c6:90:52:b1:47:85:9a: 52:7f:e0:1f:3f:ab:72:08:3d:ff:e6:ec:8b:44:2f: 6b:b3:e7:61:4c:c7:b5:cb:ff:6f:68:76:6e:65:f6: 79:1b:5b:81:23:b9:94:eb:f5:17:fd:10:99:21:47: f1:86:7c:fb:32:0c:a3:57:d3:36:f4:da:2a:1c:a3: 02:47:3a:07:9f:e3:ba:3f:6e:26:f8:80:ce:39:a2: d3:55:bf:93:e2:2c:ae:02:62:e0:e7:66:1a:f9:ad: 20:77:5f:2b:69:fb:e4:3e:44:87:5f:65:15:4b:58: 96:89:e0:93:15:56:90:20:df:49:fa:80:cc:00:da: 11:14:1f:a1:1e:da:e6:f6:12:00:a8:17:a0:6a:6c: 55:7f:a7:23:0d:1b:86:04:59:cd:b9:28:2e:ca:14: 5f:03:b0:e7:d5:cc:4e:00:e9:9c:bb:a3:31:d5:cf: 23:17:b0:ac:f9:cf:73:08:d2:df:c1:c1:74:2f:b0: 68:91:f6:1f:13:a7:0c:90:29:91:9c:dc:f7:1b:49: 85:d8:32:50:16:a3:e0:79:06:0f:e4:04:87:c7:d5: a4:97:51:96:f5:00:f5:66:59:08:ba:0e:b4:ae:f2: 8e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:7A:88:A9:4F:E3:6B:04:76:8C:CA:1D:39:85:EF:85:0A:DB:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/0e60e648-d0ee-310e-865a-eb808c283eda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl X509v3 Authority Key Identifier: keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer sbgp-ipAddrBlock: critical IPv4: 159.222.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fc:0e:3f:c8:35:72:a6:0a:67:39:98:c8:a9:f3:56:c1:2d: 60:47:ab:3e:d3:bf:7d:f8:72:17:14:6a:05:c4:66:19:95:8c: a7:f9:ea:1f:7f:d6:48:96:d8:b8:34:d2:f7:0a:e0:3c:6a:30: 0f:ac:00:af:c4:16:e2:82:a9:73:85:55:ec:b0:c8:7e:d9:00: 2f:f4:0a:0f:5d:5c:a1:1a:c6:ef:a5:af:e6:f9:66:7c:e5:90: 07:56:d4:24:85:cc:46:36:13:2e:e8:06:7d:1a:16:56:8c:a7: c1:1b:29:5b:4e:55:e8:af:d3:39:94:30:e1:84:44:19:c5:3a: 5a:89:6d:60:dd:2f:c7:85:5e:39:cd:28:5d:43:61:75:db:46: e5:2b:2d:aa:56:42:b0:a2:73:0d:9c:aa:59:00:cd:5b:b7:0c: 4d:e2:00:87:f6:a4:68:e0:1d:12:d0:68:21:e0:47:e4:16:3c: 53:f2:78:46:69:46:4a:74:3d:36:57:27:15:9a:5f:b6:31:89: e6:4b:60:39:7e:dc:3f:b4:6a:3d:99:dd:a0:5a:47:1c:5d:94: 22:5f:2a:29:2d:b5:48:b9:bd:a8:a9:87:2b:a7:2c:8c:28:56: 85:5b:c5:d1:e9:d5:93:81:cd:9e:b3:69:b5:c0:7a:07:d7:60: 89:ab:20:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEye/GSHSqTKzlH6mUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWNlZTU2OGQtZWIwMC00NzhjLWI0ODYtZGIzZjVkNjJj YmYzMB4XDTI2MDEyMzE0MDAzOFoXDTI2MDQyMzEzMDAzOFowLzEtMCsGA1UEAxMk MjBlODA4Y2UtNTEyMi00NWQ1LTlhYjMtNmQyOTBhMGU3NDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijL9A5aLqzAUtLUM+1BjFzjOGBst5MaQUrFH hZpSf+AfP6tyCD3/5uyLRC9rs+dhTMe1y/9vaHZuZfZ5G1uBI7mU6/UX/RCZIUfx hnz7MgyjV9M29NoqHKMCRzoHn+O6P24m+IDOOaLTVb+T4iyuAmLg52Ya+a0gd18r afvkPkSHX2UVS1iWieCTFVaQIN9J+oDMANoRFB+hHtrm9hIAqBegamxVf6cjDRuG BFnNuSguyhRfA7Dn1cxOAOmcu6Mx1c8jF7Cs+c9zCNLfwcF0L7BokfYfE6cMkCmR nNz3G0mF2DJQFqPgeQYP5ASHx9Wkl1GW9QD1ZlkIug60rvKOpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGfeoipT+NrBHaMyh05he+FCtvJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lY2Vl NTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNmNWQ2MmNiZjMvMGU2MGU2NDgtZDBlZS0z MTBlLTg2NWEtZWI4MDhjMjgzZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZWNlZTU2OGQtZWIwMC00NzhjLWI0 ODYtZGIzZjVkNjJjYmYzL2VjZWU1NjhkLWViMDAtNDc4Yy1iNDg2LWRiM2Y1ZDYy Y2JmMy5jcmwwHwYDVR0jBBgwFoAU3ezBYmsWKE4/m1LGgwTF1nWApUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9lY2VlNTY4ZC1lYjAwLTQ3OGMtYjQ4Ni1kYjNm NWQ2MmNiZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn965MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn8Dj/INXKmCmc5mMip81bBLWBHqz7Tv334chcUagXEZhmVjKf56h9/ 1kiW2Lg00vcK4DxqMA+sAK/EFuKCqXOFVeywyH7ZAC/0Cg9dXKEaxu+lr+b5Znzl kAdW1CSFzEY2Ey7oBn0aFlaMp8EbKVtOVeiv0zmUMOGERBnFOlqJbWDdL8eFXjnN KF1DYXXbRuUrLapWQrCicw2cqlkAzVu3DE3iAIf2pGjgHRLQaCHgR+QWPFPyeEZp Rkp0PTZXJxWaX7YxieZLYDl+3D+0aj2Z3aBaRxxdlCJfKikttUi5vaiphyunLIwo VoVbxdHp1ZOBzZ6zabXAegfXYImrIHY= -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:07 2026 by rpki-client