$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/809f5d1c-3dbd-384c-be67-749900902eab.roa File: 809f5d1c-3dbd-384c-be67-749900902eab.roa (raw, json) Hash identifier: ffQRhfYViW024gG7ZTpIT6+eni6/WIyDwUWoQMwDmA4= Subject key identifier: EB:55:AC:45:BB:3B:C7:2F:4A:1C:1D:58:8B:74:B0:DC:7B:3D:7D:AC Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E50291A77B7E9163099E00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/809f5d1c-3dbd-384c-be67-749900902eab.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 192.119.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:02:91:a7:7b:7e:91:63:09:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=8c2cc1cd-087a-499e-80f5-e60efa1bab40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f8:da:0c:8b:c9:94:e8:3a:d4:a6:15:9a:7e: 21:60:4f:fe:cd:07:1d:49:cc:d2:51:7c:f8:2d:01: 8b:1e:f2:21:dd:6a:ea:3c:68:65:c2:35:b2:a6:0e: ac:25:5f:57:5e:b9:fc:55:af:ee:23:03:2c:df:f3: 83:a2:84:54:6b:03:a6:b9:35:4d:bb:50:69:63:54: 7e:5c:a3:eb:08:00:07:b9:e4:3d:d7:df:3b:4e:d5: f5:ea:25:a6:d3:da:0c:84:28:4d:69:11:d8:a8:52: d4:9d:4d:95:45:d6:6b:83:4b:91:68:02:56:ed:15: 2d:57:49:25:e5:9a:93:82:4c:bf:96:4c:17:87:f0: ed:b4:46:ef:cd:ab:d3:1a:7f:b1:bc:56:92:8c:09: 10:f1:29:50:c2:3f:01:59:09:9d:b8:8d:ec:c2:71: dd:30:ad:4e:b1:5f:76:ab:8b:a7:40:97:39:ab:54: 7d:48:06:1a:f2:d6:ef:ab:4a:da:fa:0a:eb:68:ee: 4f:b9:81:14:96:29:3f:17:4c:34:60:d6:fe:3d:58: 2a:b5:f1:bc:99:c8:f9:27:4e:da:ee:49:e9:85:34: af:c5:b8:1e:7f:26:df:c7:5e:46:b2:80:af:30:2a: b3:12:7c:03:75:4a:76:11:12:81:4b:14:2e:ef:3c: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:55:AC:45:BB:3B:C7:2F:4A:1C:1D:58:8B:74:B0:DC:7B:3D:7D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/809f5d1c-3dbd-384c-be67-749900902eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:5b:51:35:e6:33:31:5d:aa:ea:2c:d5:99:8a:c5:5f:40:48: 45:c3:01:96:57:f9:3a:12:2f:14:0f:93:a7:71:98:1f:4a:d1: 11:d1:8d:18:d8:a2:1e:03:aa:96:e6:55:c6:55:de:d8:33:1d: 75:24:4c:52:4d:fa:e2:09:e8:cc:6d:16:af:12:4a:15:7f:d4: 0a:06:3e:b0:59:f4:22:c8:a1:cc:64:3a:79:8e:05:ca:3b:9e: af:6f:02:54:67:f5:c4:0a:fb:bb:2f:05:f6:01:d0:9e:e8:59: ad:e4:e1:2a:79:b1:9c:e4:3f:fb:71:a9:d4:63:1a:22:7e:ee: bc:7d:7e:5c:04:22:c9:2e:46:c9:c7:0c:51:af:dd:65:2f:b2: cf:65:89:f8:b8:42:ed:ee:2f:eb:24:cb:5f:ea:ea:40:a1:f4: 08:60:db:f6:c2:7c:67:03:f2:56:89:5d:67:47:6a:25:94:e8: 81:2f:fc:83:e0:52:0e:54:56:05:66:97:14:b6:55:c1:81:0e: e9:70:9c:10:b6:6a:06:fd:35:8e:75:c9:39:a7:d6:7f:01:29: 97:bb:8c:3a:60:c9:04:7a:e4:53:cf:9d:c0:87:73:3a:19:23: c2:3f:d4:ed:66:87:20:d7:ad:14:8f:15:b5:8c:c5:f5:89:3b: ef:bd:5e:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QKRp3t+kWMJngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OGMyY2MxY2QtMDg3YS00OTllLTgwZjUtZTYwZWZhMWJhYjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifjaDIvJlOg61KYVmn4hYE/+zQcdSczSUXz4 LQGLHvIh3WrqPGhlwjWypg6sJV9XXrn8Va/uIwMs3/ODooRUawOmuTVNu1BpY1R+ XKPrCAAHueQ91987TtX16iWm09oMhChNaRHYqFLUnU2VRdZrg0uRaAJW7RUtV0kl 5ZqTgky/lkwXh/DttEbvzavTGn+xvFaSjAkQ8SlQwj8BWQmduI3swnHdMK1OsV92 q4unQJc5q1R9SAYa8tbvq0ra+grraO5PuYEUlik/F0w0YNb+PVgqtfG8mcj5J07a 7knphTSvxbgefybfx15GsoCvMCqzEnwDdUp2ERKBSxQu7zwBPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtVrEW7O8cvShwdWIt0sNx7PX2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODA5ZjVkMWMtM2RiZC0z ODRjLWJlNjctNzQ5OTAwOTAyZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClbUTXmMzFdquos1ZmKxV9ASEXDAZZX+ToSLxQPk6dxmB9K0RHRjRjY oh4DqpbmVcZV3tgzHXUkTFJN+uIJ6MxtFq8SShV/1AoGPrBZ9CLIocxkOnmOBco7 nq9vAlRn9cQK+7svBfYB0J7oWa3k4Sp5sZzkP/txqdRjGiJ+7rx9flwEIskuRsnH DFGv3WUvss9lifi4Qu3uL+sky1/q6kCh9Ahg2/bCfGcD8laJXWdHaiWU6IEv/IPg Ug5UVgVmlxS2VcGBDulwnBC2agb9NY51yTmn1n8BKZe7jDpgyQR65FPPncCHczoZ I8I/1O1mhyDXrRSPFbWMxfWJO++9XmE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:44:55 2026 by rpki-client