$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa File: a998f21f-effb-392c-abf8-e55e5270da70.roa (raw, json) Hash identifier: FgX1SD3Pe0isGmVq+bEzOLz4eqRWtI7Oi1wRBZVhmLo= Subject key identifier: 7F:85:48:EE:60:1C:26:B8:58:9F:F5:55:2C:BF:E8:50:1A:D4:A5:E0 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584E4129D5F03757D33C65960D60 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa Signing time: Mon 22 Jun 2026 09:00:11 +0000 ROA not before: Mon 22 Jun 2026 09:00:11 +0000 ROA not after: Sun 20 Sep 2026 09:00:11 +0000 asID: 30036 IP address blocks: 198.40.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 25 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:41:29:d5:f0:37:57:d3:3c:65:96:0d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Jun 22 09:00:11 2026 GMT Not After : Sep 20 09:00:11 2026 GMT Subject: CN=331af6c9-6658-49bf-887a-5f0b30247beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:86:75:54:00:49:4b:17:0e:80:56:28:0c:44: dc:f3:6d:58:8b:48:20:9e:6e:59:69:4b:32:a2:fd: e1:e7:3d:59:85:d4:c9:07:09:77:7c:bb:f5:9d:d8: 1b:f7:1c:07:8d:05:95:34:8f:21:0c:7f:b6:ea:7b: 74:08:a7:be:90:fc:be:60:cb:7f:97:4b:97:c2:8a: cc:57:04:f0:66:b2:b2:e1:dd:ff:17:68:5a:99:1a: b2:e4:17:37:b1:fb:ad:49:9c:d8:99:6e:86:38:59: 65:9e:9b:3d:06:80:23:a9:4b:41:b4:9a:0d:56:b4: 56:0d:4e:69:46:77:78:41:68:6e:e9:6c:7f:9b:65: 7a:21:bb:41:33:15:84:a1:3c:d0:85:be:31:e6:47: 6e:8c:90:ce:89:16:b1:bd:61:78:8b:63:9a:e3:a6: 2b:62:0a:74:af:89:1c:41:b9:c0:5a:26:1d:13:2d: a7:c3:ab:a3:d6:a9:e2:e6:9e:62:d3:b5:af:d3:6e: ed:86:7e:8c:4a:bd:ae:aa:4f:65:9b:95:74:bb:1a: 17:23:aa:4c:cf:b8:18:db:1c:47:e9:78:0c:9b:4e: 03:27:cd:ba:1f:63:7d:03:ce:78:e1:80:9e:58:95: 0c:7a:02:5f:f3:4d:6e:b5:ea:70:e9:72:02:80:3f: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:85:48:EE:60:1C:26:B8:58:9F:F5:55:2C:BF:E8:50:1A:D4:A5:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/a998f21f-effb-392c-abf8-e55e5270da70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:74:ee:8f:68:67:60:de:3a:65:15:e3:5a:e3:52:d0:21:db: c4:97:89:b9:a3:e2:78:e9:bb:86:51:f5:63:52:eb:42:6f:04: 1b:38:f8:55:21:3a:3c:fd:25:85:9a:98:06:4d:54:71:b8:95: 34:08:86:ff:22:32:e7:01:fe:d4:0a:47:44:05:34:d0:db:3c: bf:2d:ed:ea:72:45:09:94:81:26:3d:46:01:2a:c5:02:d7:2d: e0:7a:e8:07:45:1a:60:27:7f:9c:68:39:04:f2:39:65:a9:61: 64:12:d3:a5:e0:ba:53:8d:74:77:19:15:4b:55:18:af:fc:bd: e2:c4:5a:92:19:30:ff:12:9c:e6:51:fc:16:8b:25:80:80:37: e0:22:77:01:86:36:9e:0d:d4:e9:25:9d:2a:d1:9b:47:4b:f7: 58:73:5b:b2:5a:00:04:e8:9f:2c:4c:bf:05:96:1c:db:af:23: 59:df:a5:33:8f:5b:26:24:9b:1c:3e:53:45:0d:fc:dd:60:d2: fd:dd:2c:49:95:76:78:b6:5c:64:62:48:f6:6f:ef:62:14:a4: 79:46:4c:2f:7b:92:62:7b:2d:12:57:cb:1d:d6:18:7a:be:29: 52:71:4c:2f:de:c5:ab:4b:a6:c6:c0:4c:f1:fc:79:c5:b4:27: c8:74:20:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5BKdXwN1fTPGWWDWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDYyMjA5MDAxMVoXDTI2MDkyMDA5MDAxMVowLzEtMCsGA1UEAxMk MzMxYWY2YzktNjY1OC00OWJmLTg4N2EtNWYwYjMwMjQ3YmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYZ1VABJSxcOgFYoDETc821Yi0ggnm5ZaUsy ov3h5z1ZhdTJBwl3fLv1ndgb9xwHjQWVNI8hDH+26nt0CKe+kPy+YMt/l0uXworM VwTwZrKy4d3/F2hamRqy5Bc3sfutSZzYmW6GOFllnps9BoAjqUtBtJoNVrRWDU5p Rnd4QWhu6Wx/m2V6IbtBMxWEoTzQhb4x5kdujJDOiRaxvWF4i2Oa46YrYgp0r4kc QbnAWiYdEy2nw6uj1qni5p5i07Wv027thn6MSr2uqk9lm5V0uxoXI6pMz7gY2xxH 6XgMm04DJ826H2N9A8544YCeWJUMegJf801utepw6XICgD947QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+FSO5gHCa4WJ/1VSy/6FAa1KXgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYTk5OGYyMWYtZWZmYi0z OTJjLWFiZjgtZTU1ZTUyNzBkYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxijwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAB07o9oZ2DeOmUV41rjUtAh28SXibmj4njpu4ZR9WNS60JvBBs4+FUh Ojz9JYWamAZNVHG4lTQIhv8iMucB/tQKR0QFNNDbPL8t7epyRQmUgSY9RgEqxQLX LeB66AdFGmAnf5xoOQTyOWWpYWQS06XgulONdHcZFUtVGK/8veLEWpIZMP8SnOZR /BaLJYCAN+AidwGGNp4N1OklnSrRm0dL91hzW7JaAATonyxMvwWWHNuvI1nfpTOP WyYkmxw+U0UN/N1g0v3dLEmVdni2XGRiSPZv72IUpHlGTC97kmJ7LRJXyx3WGHq+ KVJxTC/exatLpsbATPH8ecW0J8h0IKA= -----END CERTIFICATE-----Generated at Wed Jun 24 03:14:41 2026 by rpki-client