$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa File: b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa (raw, json) Hash identifier: b47fMP0j8KfFcsXSf4B+84Aq3pij5fdLCVLJS9LyjPc= Subject key identifier: D5:82:8D:C8:6A:C6:5E:8A:89:54:C9:82:CD:8B:FF:3E:FC:1F:0C:17 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584EE38CB1AABE2B2EEDA34D1F00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 30036 IP address blocks: 198.40.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:b1:aa:be:2b:2e:ed:a3:4d:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=614a8503-c4b3-47db-86af-bc45c3a18ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:dd:a4:09:a1:0f:83:eb:79:2f:e1:f9:6c:97: 27:ae:c2:69:c7:27:d1:85:6b:9c:3a:c7:a7:b4:fd: e7:64:39:57:02:e3:6c:67:96:1b:b8:ab:ab:eb:fd: de:15:06:26:25:80:fb:95:5e:1e:8a:d0:66:fc:e8: ad:57:9d:39:57:05:3e:05:97:8d:5d:23:d8:fc:fd: 7a:3f:98:fe:d5:f6:33:85:04:67:9f:d8:7d:cb:b6: 9d:05:d0:09:cb:fc:4c:33:a6:bb:a3:a1:04:54:82: 3e:e5:8a:e9:d4:02:34:b7:9b:81:55:32:ee:18:7c: 41:f5:88:aa:61:7a:be:24:97:f9:63:37:ab:96:aa: 7c:63:d4:74:19:ce:a6:a5:29:b1:b2:88:19:b1:8f: a6:42:a3:f6:cf:6f:8b:cb:37:d9:64:63:b5:ff:74: ca:47:3f:82:97:57:08:74:61:33:80:b7:f0:63:ad: e7:2c:f1:48:ea:42:dd:2a:d1:a5:35:4f:bc:51:ce: 75:ec:88:42:82:59:a1:31:c7:7c:ae:0b:80:b1:71: ce:8a:8a:99:16:c4:c1:8e:f9:90:e0:fc:99:7a:86: 3a:b8:58:aa:06:72:ec:5d:d4:81:0e:44:77:b4:3a: f3:39:e3:71:0f:e9:25:6f:2c:cd:ca:72:9d:7f:3a: 47:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:82:8D:C8:6A:C6:5E:8A:89:54:C9:82:CD:8B:FF:3E:FC:1F:0C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b1caf375-54e6-3716-9ea5-96b0f9f66c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 198.40.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:11:76:23:d9:6a:58:95:e0:6f:81:31:61:44:fc:70:19:7f: db:95:d1:60:6b:97:a7:cf:3e:f7:f5:02:b5:b4:9c:d0:2e:05: d6:72:21:64:71:f5:04:0e:8b:bc:78:ba:0c:35:44:04:c9:5c: 4e:31:b7:e0:7b:f9:1b:bf:1b:37:99:39:d3:9b:48:15:31:63: ba:2b:e2:95:53:59:7d:01:bb:4e:1c:f5:09:d7:21:85:20:73: 9d:ed:fe:62:d5:a5:0b:c6:d3:33:35:b2:66:1e:0e:e3:65:bf: 5e:83:fa:d9:a9:1c:f8:75:70:4f:a1:e7:dc:67:53:11:be:db: 64:9b:78:b5:7d:f6:91:2f:07:d3:6f:93:a0:04:b3:3f:3d:1d: 53:45:8d:81:11:78:d1:07:aa:53:b5:cb:a6:33:94:2a:22:74: d7:92:1d:20:8a:ca:34:8f:d0:a2:41:72:78:9f:c5:25:6c:6b: e7:57:ae:40:2b:d1:6d:b4:09:11:9b:d4:b4:fe:fa:a2:32:1e: 36:06:fb:9e:e0:b0:c9:52:b1:06:62:23:15:fb:92:f5:86:f9: 96:83:5a:f7:32:03:02:66:f8:c8:67:f4:da:08:f8:40:fb:61: 57:2b:b4:91:b3:39:f4:50:7b:d1:52:a9:3a:08:e5:ee:5c:74: d8:3d:d2:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjLGqvisu7aNNHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk NjE0YTg1MDMtYzRiMy00N2RiLTg2YWYtYmM0NWMzYTE4YWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt2kCaEPg+t5L+H5bJcnrsJpxyfRhWucOsen tP3nZDlXAuNsZ5YbuKur6/3eFQYmJYD7lV4eitBm/OitV505VwU+BZeNXSPY/P16 P5j+1fYzhQRnn9h9y7adBdAJy/xMM6a7o6EEVII+5Yrp1AI0t5uBVTLuGHxB9Yiq YXq+JJf5Yzerlqp8Y9R0Gc6mpSmxsogZsY+mQqP2z2+LyzfZZGO1/3TKRz+Cl1cI dGEzgLfwY63nLPFI6kLdKtGlNU+8Uc517IhCglmhMcd8rguAsXHOioqZFsTBjvmQ 4PyZeoY6uFiqBnLsXdSBDkR3tDrzOeNxD+klbyzNynKdfzpHaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWCjchqxl6KiVTJgs2L/z78HwwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYjFjYWYzNzUtNTRlNi0z NzE2LTllYTUtOTZiMGY5ZjY2YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxij1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8RdiPZaliV4G+BMWFE/HAZf9uV0WBrl6fPPvf1ArW0nNAuBdZyIWRx 9QQOi7x4ugw1RATJXE4xt+B7+Ru/GzeZOdObSBUxY7or4pVTWX0Bu04c9QnXIYUg c53t/mLVpQvG0zM1smYeDuNlv16D+tmpHPh1cE+h59xnUxG+22SbeLV99pEvB9Nv k6AEsz89HVNFjYEReNEHqlO1y6YzlCoidNeSHSCKyjSP0KJBcnifxSVsa+dXrkAr 0W20CRGb1LT++qIyHjYG+57gsMlSsQZiIxX7kvWG+ZaDWvcyAwJm+Mhn9NoI+ED7 YVcrtJGzOfRQe9FSqToI5e5cdNg90lQ= -----END CERTIFICATE-----Generated at Fri Aug 21 01:47:47 2026 by rpki-client