$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa File: abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa (raw, json) Hash identifier: kMCTaTgUl8ufweoOVMwcvDLSlLgTlYwRa3G/4S50ZOw= Subject key identifier: 38:85:F5:24:8C:55:C5:E9:8F:8B:D5:01:9F:0B:AF:80:F6:82:4F:A8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D3B34D5419AB778BFFB68F780 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 30036 IP address blocks: 192.119.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:d5:41:9a:b7:78:bf:fb:68:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=d2d26f03-5410-4d2c-b1db-a06eb1871863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1a:c0:24:0c:d4:b0:a1:d7:75:fd:f5:6e:d4: f1:db:fa:7e:a8:65:de:18:dc:da:a2:96:2b:12:01: 35:ec:bb:97:2b:ac:17:52:43:ea:dd:3e:ea:de:b9: 1a:82:89:35:96:06:b8:b7:0c:36:1d:cb:1e:93:40: dc:91:69:8b:e5:3a:16:fd:25:01:55:73:a4:62:95: f2:4d:6c:ca:8c:bc:4a:91:24:65:2d:f2:09:80:d6: 43:e8:23:95:1f:7a:63:e9:05:77:1c:12:15:4c:d8: c3:44:14:6b:1e:b7:93:40:f0:2f:e2:a4:d9:12:08: da:66:19:6f:5a:4a:dd:53:48:2d:61:65:99:b0:7d: 71:58:bc:9a:59:a2:38:e0:94:d4:d3:4d:25:16:f4: da:79:87:be:a4:d8:fb:61:81:6c:28:16:14:ee:f3: 38:41:2a:81:ff:8e:c9:ff:f5:11:e7:74:1a:e4:a9: 79:6d:c3:a9:e6:cc:f2:72:07:1f:3a:74:05:3f:4b: b1:b3:d8:da:3a:fb:5e:cb:5c:bd:fa:a4:a1:21:e7: 65:34:9b:75:2e:25:4e:f8:ee:37:43:e3:11:f1:16: 9d:5b:5b:3f:f0:47:98:17:26:9b:3e:65:50:0b:88: 42:3e:c0:92:27:30:78:0e:e5:c3:0a:eb:38:49:1f: 35:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:85:F5:24:8C:55:C5:E9:8F:8B:D5:01:9F:0B:AF:80:F6:82:4F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/abc08a0d-fdbe-39bb-8eb0-75e76293422e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:60:39:4c:cb:9f:8b:02:88:16:34:2a:86:fa:4b:9e:76:06: ba:73:54:49:31:3a:b1:fe:c0:55:3c:c1:5c:71:e6:2c:25:7d: fa:c3:7c:ac:85:a9:e1:c3:06:54:5f:2a:6b:2e:56:b4:9c:4e: 73:e5:e6:73:1c:06:3f:96:e2:50:8e:80:7a:ba:18:de:b1:04: ee:25:b2:02:ca:ac:2f:a6:3b:d6:da:ae:bf:dd:84:14:65:d7: f9:88:ee:1d:58:2f:2d:73:0b:ff:61:0b:57:2a:e5:d8:be:9e: 06:ca:7b:d5:73:d9:c2:15:ec:02:ed:94:ab:41:bd:5e:58:db: 4b:3b:86:44:04:cf:b6:54:39:97:1c:a5:a7:37:2b:2a:fd:9d: 8b:f5:88:46:06:b9:04:d3:02:a1:0c:f5:68:fd:39:d0:25:f5: e4:a4:23:e7:47:44:2f:76:74:b4:47:37:b4:76:89:40:e6:8c: 9d:ee:61:0c:ca:fb:c9:d5:8a:27:5a:ca:7c:16:02:65:e1:85: 56:40:21:4b:99:4a:44:5c:04:a1:11:31:07:f7:84:50:ab:76: 37:57:6b:66:9b:39:a9:83:70:8c:69:b6:a4:8f:32:f0:e2:31: 06:c7:43:3b:66:d7:fb:4a:30:ef:e7:79:9d:65:e6:e4:c4:1d: 85:53:e2:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNVBmrd4v/to94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk ZDJkMjZmMDMtNTQxMC00ZDJjLWIxZGItYTA2ZWIxODcxODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBrAJAzUsKHXdf31btTx2/p+qGXeGNzaopYr EgE17LuXK6wXUkPq3T7q3rkagok1lga4tww2Hcsek0DckWmL5ToW/SUBVXOkYpXy TWzKjLxKkSRlLfIJgNZD6COVH3pj6QV3HBIVTNjDRBRrHreTQPAv4qTZEgjaZhlv WkrdU0gtYWWZsH1xWLyaWaI44JTU000lFvTaeYe+pNj7YYFsKBYU7vM4QSqB/47J //UR53Qa5Kl5bcOp5szycgcfOnQFP0uxs9jaOvtey1y9+qShIedlNJt1LiVO+O43 Q+MR8RadW1s/8EeYFyabPmVQC4hCPsCSJzB4DuXDCus4SR81EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiF9SSMVcXpj4vVAZ8Lr4D2gk+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWJjMDhhMGQtZmRiZS0z OWJiLThlYjAtNzVlNzYyOTM0MjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtgOUzLn4sCiBY0Kob6S552BrpzVEkxOrH+wFU8wVxx5iwlffrDfKyF qeHDBlRfKmsuVrScTnPl5nMcBj+W4lCOgHq6GN6xBO4lsgLKrC+mO9barr/dhBRl 1/mI7h1YLy1zC/9hC1cq5di+ngbKe9Vz2cIV7ALtlKtBvV5Y20s7hkQEz7ZUOZcc pac3Kyr9nYv1iEYGuQTTAqEM9Wj9OdAl9eSkI+dHRC92dLRHN7R2iUDmjJ3uYQzK +8nViidaynwWAmXhhVZAIUuZSkRcBKERMQf3hFCrdjdXa2abOamDcIxptqSPMvDi MQbHQztm1/tKMO/neZ1l5uTEHYVT4kE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:23:52 2026 by rpki-client