$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/825f0480-630a-3a6d-9db3-b529f56247a9.roa File: 825f0480-630a-3a6d-9db3-b529f56247a9.roa (raw, json) Hash identifier: tzuxZYSbtbIYbHOkw55in+YTj8A/OINmwfOOz9+16Fw= Subject key identifier: 5C:02:1E:71:7A:32:D8:59:A8:30:E0:AD:B7:ED:3E:94:E3:4A:50:0F Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E4F26FE9C7348D444C6580 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/825f0480-630a-3a6d-9db3-b529f56247a9.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 192.119.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:f2:6f:e9:c7:34:8d:44:4c:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=9bc5c5f1-1881-4760-a03e-d2fd1c33324a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cf:cf:96:ac:8b:71:d3:4e:e1:c0:33:82:ce: 9b:2b:4a:2a:97:cd:7e:2d:13:a4:03:fd:2a:d7:70: 99:d3:d8:4d:fb:a2:50:e5:19:3a:f6:6d:5c:2a:60: 96:c0:b4:ef:ad:66:8c:7d:04:e5:64:8c:a4:51:19: c6:89:56:b3:94:fc:0e:60:c8:0d:86:07:6b:9e:05: dd:ac:03:c1:35:d9:40:ba:c4:3c:02:58:6f:06:d4: 08:7e:bd:44:66:fd:1d:fa:ed:7e:f0:24:e8:12:bb: 94:a6:c1:f9:97:49:a6:85:1d:3a:d7:5e:7d:d6:09: db:b4:e5:f0:78:1a:41:a6:28:6c:95:30:08:8a:37: a3:06:0d:3a:d4:0d:b3:0a:38:31:15:a5:27:f4:ec: 13:19:7c:20:70:45:31:81:0c:65:ea:3a:a2:64:f6: 6f:25:d3:98:eb:b4:5f:4c:6d:17:63:28:c1:67:92: f8:f4:dd:53:a7:19:57:35:7d:ab:3f:b1:74:cd:b8: 1e:9e:a6:4d:c7:79:53:f7:9e:7a:e2:5c:36:b5:db: 12:4d:12:d7:1c:41:f1:59:23:88:b7:e8:b5:cd:13: 39:fb:83:44:90:9e:b4:62:56:b4:89:95:64:21:60: 8f:40:1d:b5:07:3e:2d:14:f8:a7:42:08:bd:ef:df: bb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:02:1E:71:7A:32:D8:59:A8:30:E0:AD:B7:ED:3E:94:E3:4A:50:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/825f0480-630a-3a6d-9db3-b529f56247a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:61:ce:a5:12:a8:0c:67:dc:d5:07:d2:bc:36:85:26:05:61: 2c:52:fb:e5:59:53:d2:fe:b5:35:88:9c:40:b2:92:b6:16:10: 82:9b:e4:74:54:0a:f2:b6:bf:3f:e1:25:9d:90:da:71:aa:d7: 99:50:ae:0b:e9:ac:61:f2:8d:2b:5b:2d:b7:1d:aa:ee:1f:94: c8:01:fa:eb:08:5c:60:19:69:6d:4d:38:eb:54:cb:57:03:d4: d1:df:7c:2d:71:f4:d6:95:6a:9e:e5:d4:a1:ab:6f:98:ae:8a: 31:41:c2:d6:72:5d:0a:e2:13:2b:4c:82:fb:ff:02:5e:0d:9f: 47:37:c9:2d:95:f4:3d:c7:d5:27:0a:1c:e7:e1:e6:88:7d:6d: c2:c1:10:fa:8f:3d:1d:e8:36:97:a1:17:ca:42:3d:87:ff:92: 6e:f8:81:ce:44:7f:4c:d1:78:df:da:43:b2:05:4a:68:05:0a: d6:b9:70:79:0d:2f:e9:0d:cb:c2:72:5a:be:14:7a:18:f5:54: 79:dd:94:30:85:fa:bd:6c:54:e8:dc:f3:20:c1:e5:98:20:ee: 04:59:4d:60:20:1f:a0:0e:fc:19:00:e6:55:f1:ff:6c:5d:f3: c2:9f:91:09:92:06:7d:73:9c:18:36:7d:2e:d2:bb:44:77:e2: 81:86:29:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5PJv6cc0jURMZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk OWJjNWM1ZjEtMTg4MS00NzYwLWEwM2UtZDJmZDFjMzMzMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM/PlqyLcdNO4cAzgs6bK0oql81+LROkA/0q 13CZ09hN+6JQ5Rk69m1cKmCWwLTvrWaMfQTlZIykURnGiVazlPwOYMgNhgdrngXd rAPBNdlAusQ8AlhvBtQIfr1EZv0d+u1+8CToEruUpsH5l0mmhR0611591gnbtOXw eBpBpihslTAIijejBg061A2zCjgxFaUn9OwTGXwgcEUxgQxl6jqiZPZvJdOY67Rf TG0XYyjBZ5L49N1TpxlXNX2rP7F0zbgenqZNx3lT95564lw2tdsSTRLXHEHxWSOI t+i1zRM5+4NEkJ60Yla0iZVkIWCPQB21Bz4tFPinQgi979+7PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwCHnF6MthZqDDgrbftPpTjSlAPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODI1ZjA0ODAtNjMwYS0z YTZkLTlkYjMtYjUyOWY1NjI0N2E5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFhzqUSqAxn3NUH0rw2hSYFYSxS++VZU9L+tTWInECykrYWEIKb5HRU CvK2vz/hJZ2Q2nGq15lQrgvprGHyjStbLbcdqu4flMgB+usIXGAZaW1NOOtUy1cD 1NHffC1x9NaVap7l1KGrb5iuijFBwtZyXQriEytMgvv/Al4Nn0c3yS2V9D3H1ScK HOfh5oh9bcLBEPqPPR3oNpehF8pCPYf/km74gc5Ef0zReN/aQ7IFSmgFCta5cHkN L+kNy8JyWr4Uehj1VHndlDCF+r1sVOjc8yDB5Zgg7gRZTWAgH6AO/BkA5lXx/2xd 88KfkQmSBn1znBg2fS7Su0R34oGGKWw= -----END CERTIFICATE-----Generated at Fri Apr 17 19:04:55 2026 by rpki-client