$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa File: 2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa (raw, json) Hash identifier: bK1qHpj5YH/i+Ssl7R8DPDCB31hm9WVaOsY9G9O7YKw= Subject key identifier: F4:12:08:82:46:E0:E2:30:CF:94:DB:10:B9:7F:11:D0:65:5F:A3:5B Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EE38CB37AC902CA48CAE61D00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 30036 IP address blocks: 192.119.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:b3:7a:c9:02:ca:48:ca:e6:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=28966cb4-949e-4d1d-98cc-a0557a9ab10e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:70:ff:af:62:50:f7:7e:f3:47:c9:da:b2:39: ee:a6:5b:51:93:af:53:fb:04:c4:d8:f3:df:95:e0: 7b:6b:4f:32:ac:d7:80:94:ee:11:24:c0:91:c4:1e: f3:b1:ac:34:d0:45:45:f0:73:7f:11:7c:45:87:1a: ad:2d:18:dc:20:cd:c8:7d:9d:a9:ff:c6:81:f0:5b: c9:c3:78:9d:d7:09:c1:36:3d:82:28:fa:fa:61:c9: 60:c3:3a:c9:0e:32:b9:29:24:62:e8:4b:68:e1:3d: 91:2b:26:98:5c:9a:4d:af:80:12:b2:81:ff:8a:00: 62:71:00:d5:9b:5c:75:67:ac:04:d5:fa:d7:44:9a: 62:68:4b:c1:bd:dd:00:52:40:27:6a:f2:bc:4c:ab: 7a:03:51:fb:44:c8:1c:1b:26:10:27:e1:b6:10:6c: 2a:28:db:85:9f:57:8c:a5:05:1b:02:7a:f6:63:cb: 57:52:e7:e6:db:62:eb:6b:a1:d7:d5:ff:bc:f1:38: 71:e1:20:f2:99:56:6d:ab:64:4d:8f:b1:9a:07:24: 6a:34:a9:0b:d9:20:d9:70:52:95:12:7b:11:31:c1: 6b:7c:d1:50:f0:41:8a:10:be:3e:bf:04:e5:81:94: 9e:a8:12:27:c3:b8:df:e7:73:6d:f9:90:54:cc:9b: 72:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:12:08:82:46:E0:E2:30:CF:94:DB:10:B9:7F:11:D0:65:5F:A3:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/2ab1cf8d-f830-3662-bc4e-829110dd00d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f6:71:f6:28:36:16:d2:1e:09:54:d8:0e:58:71:f5:9d:72: 1e:f0:7f:f3:eb:6e:3e:07:98:b7:0f:fd:c0:c2:14:ef:cc:6a: 6c:26:f0:81:94:05:34:1a:a9:cb:d7:40:9a:c9:ab:03:a3:1d: 50:c1:20:74:bf:5b:c2:c9:1b:4f:c9:8d:1e:97:0a:76:22:bf: 77:68:79:7d:78:b4:c3:32:cc:51:25:cd:89:d8:e3:01:87:f4: 67:e3:6b:dc:84:ea:41:ee:86:ce:e6:40:2f:63:0a:af:31:d3: c7:41:91:77:ea:10:b8:d7:b6:fa:68:3c:18:62:8e:4e:bf:d0: 3f:b6:9b:30:6a:3a:1c:19:20:59:b5:e4:d7:6e:bc:98:6d:88: 9c:54:40:f0:6d:a4:89:ee:1d:55:24:e4:aa:fa:d6:98:e9:cb: 78:39:6f:33:fd:53:d2:ac:5f:ab:c2:08:2f:fc:86:68:f5:0a: e5:e1:0b:7d:51:85:9d:5f:14:bd:91:48:b5:af:9b:d3:4d:79: 20:c9:90:12:96:e9:c5:f2:ac:6b:cc:70:ce:58:c9:03:97:a5: 19:8c:6b:93:ef:d8:cc:82:ef:b1:6c:4f:99:a2:95:6e:dd:fb: 67:3b:28:91:db:6b:f3:71:e7:73:7e:d2:df:9a:e5:a7:16:55: ba:9e:b8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjLN6yQLKSMrmHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk Mjg5NjZjYjQtOTQ5ZS00ZDFkLTk4Y2MtYTA1NTdhOWFiMTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XD/r2JQ937zR8nasjnupltRk69T+wTE2PPf leB7a08yrNeAlO4RJMCRxB7zsaw00EVF8HN/EXxFhxqtLRjcIM3IfZ2p/8aB8FvJ w3id1wnBNj2CKPr6YclgwzrJDjK5KSRi6Eto4T2RKyaYXJpNr4ASsoH/igBicQDV m1x1Z6wE1frXRJpiaEvBvd0AUkAnavK8TKt6A1H7RMgcGyYQJ+G2EGwqKNuFn1eM pQUbAnr2Y8tXUufm22Lra6HX1f+88Thx4SDymVZtq2RNj7GaByRqNKkL2SDZcFKV EnsRMcFrfNFQ8EGKEL4+vwTlgZSeqBInw7jf53Nt+ZBUzJty0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQSCIJG4OIwz5TbELl/EdBlX6NbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMmFiMWNmOGQtZjgzMC0z NjYyLWJjNGUtODI5MTEwZGQwMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv2cfYoNhbSHglU2A5YcfWdch7wf/Prbj4HmLcP/cDCFO/Mamwm8IGU BTQaqcvXQJrJqwOjHVDBIHS/W8LJG0/JjR6XCnYiv3doeX14tMMyzFElzYnY4wGH 9Gfja9yE6kHuhs7mQC9jCq8x08dBkXfqELjXtvpoPBhijk6/0D+2mzBqOhwZIFm1 5NduvJhtiJxUQPBtpInuHVUk5Kr61pjpy3g5bzP9U9KsX6vCCC/8hmj1CuXhC31R hZ1fFL2RSLWvm9NNeSDJkBKW6cXyrGvMcM5YyQOXpRmMa5Pv2MyC77FsT5milW7d +2c7KJHba/Nx53N+0t+a5acWVbqeuJs= -----END CERTIFICATE-----Generated at Fri Aug 21 01:45:41 2026 by rpki-client