$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1b24694c-8938-37ac-ab90-c586ce5cabd7.roa File: 1b24694c-8938-37ac-ab90-c586ce5cabd7.roa (raw, json) Hash identifier: EHuT4O6Ff8Q2uXxcn6lpgD2S4VhCm4MkxDIU56SXx3g= Subject key identifier: 51:8C:1B:7E:C5:DC:83:72:25:2C:F4:27:2F:C3:95:DF:86:83:C9:D8 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E51269A601778308317300 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1b24694c-8938-37ac-ab90-c586ce5cabd7.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 192.119.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:12:69:a6:01:77:83:08:31:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=d03aa3b1-2e36-4eb7-a929-f191be3c613e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fe:bc:5e:90:d3:32:5a:9f:81:b0:bd:17:ec: bc:34:19:22:0c:b4:cb:cd:e0:07:ad:84:2a:e3:21: 09:73:00:7b:3d:66:3a:35:cc:24:bc:31:9a:e2:b3: fa:ea:af:1a:89:92:45:8c:e8:86:f3:b4:cc:2b:d5: 06:cf:32:18:c0:79:71:e8:58:0a:79:07:bc:23:e4: 60:29:5a:9f:3c:67:33:7b:1d:aa:64:19:31:58:19: 92:2a:26:8b:bc:0d:79:fd:d6:14:d3:f4:1b:99:9d: f9:7a:c3:0b:99:b0:b4:2e:9a:4f:99:7d:65:ec:6c: bb:19:9c:fc:25:a1:b7:ec:52:76:c8:b2:50:af:c6: e7:c0:74:e3:cf:72:13:a3:07:1f:10:9b:c0:f8:25: aa:e8:f1:f2:ec:1e:31:45:30:12:b4:fb:94:20:9b: 27:79:0b:e8:16:0b:7c:63:e3:a3:e7:2b:a6:21:33: 2e:4c:40:29:ca:7c:c9:e1:34:b3:ce:4d:53:43:90: 6f:4e:b2:03:58:81:73:95:77:09:8e:e4:b7:30:c7: 27:36:00:ff:1c:16:94:69:58:70:56:8e:7f:48:ca: 2c:96:49:34:57:30:96:e9:5c:28:54:2d:9c:98:b9: 1e:63:d9:f8:bb:55:28:71:75:dd:89:dc:17:47:47: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8C:1B:7E:C5:DC:83:72:25:2C:F4:27:2F:C3:95:DF:86:83:C9:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/1b24694c-8938-37ac-ab90-c586ce5cabd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:99:ba:80:76:17:37:66:33:1f:15:c2:f4:cf:2d:c7:b9:bf: 32:72:88:75:0d:bb:8c:86:ac:7d:73:e4:29:4d:dc:d1:71:bc: 48:34:26:af:2d:13:67:7b:e6:2d:3f:36:8d:a9:43:79:e1:67: 90:cc:40:53:79:e5:08:bf:6a:f3:99:56:e4:62:da:1b:8f:c4: 30:89:29:76:4c:9b:d7:7b:44:48:c8:aa:61:aa:d8:96:b8:e6: f0:b1:71:c3:77:34:de:1f:a4:47:ae:bf:0c:53:ab:3b:6b:de: c9:97:26:36:fe:4a:16:f7:09:c3:dc:0b:02:20:dc:e3:d5:11: 89:42:3e:12:46:af:52:10:5d:b1:50:18:a4:d8:fb:a5:88:70: 6d:e1:85:0d:6f:62:2e:ed:d3:8b:a9:8d:4f:95:4d:87:54:bc: 55:2c:d1:51:99:73:17:db:d9:f2:0e:dc:2f:4b:6d:57:c3:0a: 04:4b:4c:ae:26:b9:69:0e:6a:52:71:8b:56:01:33:97:92:1e: 3b:74:cf:b1:25:05:9a:3e:7b:5b:2b:23:e7:6b:da:77:fd:98: ea:90:82:ae:97:d2:f9:48:67:b2:b4:c7:4a:ce:43:c5:12:4a: 77:ce:a9:55:6b:08:04:ec:d2:26:94:d8:4b:26:c0:a2:a0:f4: d8:cc:a3:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5RJppgF3gwgxcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk ZDAzYWEzYjEtMmUzNi00ZWI3LWE5MjktZjE5MWJlM2M2MTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v68XpDTMlqfgbC9F+y8NBkiDLTLzeAHrYQq 4yEJcwB7PWY6NcwkvDGa4rP66q8aiZJFjOiG87TMK9UGzzIYwHlx6FgKeQe8I+Rg KVqfPGczex2qZBkxWBmSKiaLvA15/dYU0/QbmZ35esMLmbC0LppPmX1l7Gy7GZz8 JaG37FJ2yLJQr8bnwHTjz3ITowcfEJvA+CWq6PHy7B4xRTAStPuUIJsneQvoFgt8 Y+Oj5yumITMuTEApynzJ4TSzzk1TQ5BvTrIDWIFzlXcJjuS3MMcnNgD/HBaUaVhw Vo5/SMoslkk0VzCW6VwoVC2cmLkeY9n4u1UocXXdidwXR0ccfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGMG37F3INyJSz0Jy/Dld+Gg8nYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMWIyNDY5NGMtODkzOC0z N2FjLWFiOTAtYzU4NmNlNWNhYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmZuoB2FzdmMx8VwvTPLce5vzJyiHUNu4yGrH1z5ClN3NFxvEg0Jq8t E2d75i0/No2pQ3nhZ5DMQFN55Qi/avOZVuRi2huPxDCJKXZMm9d7REjIqmGq2Ja4 5vCxccN3NN4fpEeuvwxTqztr3smXJjb+Shb3CcPcCwIg3OPVEYlCPhJGr1IQXbFQ GKTY+6WIcG3hhQ1vYi7t04upjU+VTYdUvFUs0VGZcxfb2fIO3C9LbVfDCgRLTK4m uWkOalJxi1YBM5eSHjt0z7ElBZo+e1srI+dr2nf9mOqQgq6X0vlIZ7K0x0rOQ8US SnfOqVVrCATs0iaU2EsmwKKg9NjMo6g= -----END CERTIFICATE-----Generated at Fri Apr 17 17:24:38 2026 by rpki-client