$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/49a90168-59b1-3191-9f07-1a15beea9c24.roa File: 49a90168-59b1-3191-9f07-1a15beea9c24.roa (raw, json) Hash identifier: r2qtBU7f3t9IYJzJwjQyJgfLcmvnWe3dXMXrcgC0M+U= Subject key identifier: 2F:08:73:41:10:C2:0C:02:F4:FF:A6:97:17:31:E2:1D:DE:41:2F:AD Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D300A28F4A04D5D7DE8375400 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/49a90168-59b1-3191-9f07-1a15beea9c24.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 19905 IP address blocks: 198.40.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:28:f4:a0:4d:5d:7d:e8:37:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=ac669e95-8c2f-4717-93a6-40d065896ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:53:ea:94:c5:a0:7b:de:62:ce:f4:ff:05:c3: 9a:44:76:3f:af:5b:00:97:3b:4b:0b:fe:0b:c8:66: 8a:09:5c:db:c3:56:cf:81:8e:a0:d6:43:f2:3d:93: c3:3e:a2:e3:23:81:a7:38:9b:f0:54:7d:51:de:c2: fc:92:e1:68:1d:73:94:4e:ea:f5:fe:31:81:fa:31: a4:ce:67:05:e2:71:dc:79:c9:66:24:6b:ca:9d:da: 33:d9:22:80:0c:18:e1:de:ad:48:c3:fd:ff:79:fa: b5:0a:a5:f2:b0:a5:0c:0e:af:64:e6:63:95:2e:37: e2:ca:1d:e8:0d:40:ca:82:6d:68:28:70:6b:a1:f5: 23:98:ea:11:44:4f:3f:ef:54:e6:9d:71:19:74:55: b7:2b:69:6b:9a:a9:60:50:3a:d5:7c:05:78:05:61: 18:f1:bb:d1:d3:4e:c8:b5:86:16:5f:b2:c2:ed:67: 45:fe:9b:f0:2d:94:c4:c3:68:48:af:7c:e8:9a:12: 29:f0:e0:5b:13:ed:af:71:6e:36:59:58:3e:56:6d: b0:a7:82:9d:c5:66:27:bc:fd:0a:1f:ab:f2:d0:ce: 0c:1c:af:74:65:0b:63:c0:8c:9c:19:73:29:db:d5: 71:d7:80:2e:75:0e:9a:52:02:c4:5d:1b:5a:4d:39: f6:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:08:73:41:10:C2:0C:02:F4:FF:A6:97:17:31:E2:1D:DE:41:2F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/49a90168-59b1-3191-9f07-1a15beea9c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:03:b2:22:2b:5e:d0:a4:ed:a7:35:e9:9c:f7:ff:9f:72:65: 41:0e:3b:22:69:43:c8:d3:3c:4f:a6:b1:bf:da:b8:2a:22:2b: f1:0b:d6:85:cd:ba:b3:34:0c:85:29:48:12:6e:8f:53:c3:12: 27:86:23:ce:d2:5f:9d:58:90:76:44:4d:e8:89:77:e6:8e:7c: ad:01:ff:43:a4:9c:0b:55:3d:f6:55:89:a5:89:3d:94:f8:60: c9:db:37:f2:4c:e2:57:a4:26:17:55:2f:94:0d:9b:69:54:24: 14:a4:03:52:a9:a4:9b:26:6c:16:11:f4:81:83:26:d7:96:89: 08:74:28:c0:7f:3e:1d:0a:33:c5:87:95:86:2b:84:37:d8:6a: 49:6a:3a:29:f5:be:4e:09:d5:e4:9e:22:e1:01:71:59:62:f6: e6:f1:ff:7f:53:8b:74:08:17:97:94:b2:37:d0:e8:a9:66:e6: d3:8c:52:37:95:4b:c6:7c:e6:ff:71:af:82:71:9a:84:a2:83: 62:0c:9f:44:a5:76:19:7f:6f:fb:72:d4:2f:8b:85:af:ad:a3: fe:30:c8:2a:f6:da:20:4e:54:e6:e4:29:20:7b:04:20:4f:b6: c3:42:ec:55:98:6f:70:ff:bf:53:da:5c:3f:cd:54:14:8e:29: 45:8b:66:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCij0oE1dfeg3VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YWM2NjllOTUtOGMyZi00NzE3LTkzYTYtNDBkMDY1ODk2ZGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlPqlMWge95izvT/BcOaRHY/r1sAlztLC/4L yGaKCVzbw1bPgY6g1kPyPZPDPqLjI4GnOJvwVH1R3sL8kuFoHXOUTur1/jGB+jGk zmcF4nHceclmJGvKndoz2SKADBjh3q1Iw/3/efq1CqXysKUMDq9k5mOVLjfiyh3o DUDKgm1oKHBrofUjmOoRRE8/71TmnXEZdFW3K2lrmqlgUDrVfAV4BWEY8bvR007I tYYWX7LC7WdF/pvwLZTEw2hIr3zomhIp8OBbE+2vcW42WVg+Vm2wp4KdxWYnvP0K H6vy0M4MHK90ZQtjwIycGXMp29Vx14AudQ6aUgLEXRtaTTn20QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8Ic0EQwgwC9P+mlxcx4h3eQS+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDlhOTAxNjgtNTliMS0z MTkxLTlmMDctMWExNWJlZWE5YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxijgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoDsiIrXtCk7ac16Zz3/59yZUEOOyJpQ8jTPE+msb/auCoiK/EL1oXN urM0DIUpSBJuj1PDEieGI87SX51YkHZETeiJd+aOfK0B/0OknAtVPfZViaWJPZT4 YMnbN/JM4lekJhdVL5QNm2lUJBSkA1KppJsmbBYR9IGDJteWiQh0KMB/Ph0KM8WH lYYrhDfYaklqOin1vk4J1eSeIuEBcVli9ubx/39Ti3QIF5eUsjfQ6Klm5tOMUjeV S8Z85v9xr4JxmoSig2IMn0Sldhl/b/ty1C+Lha+to/4wyCr22iBOVObkKSB7BCBP tsNC7FWYb3D/v1PaXD/NVBSOKUWLZmM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:58 2026 by rpki-client