$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86364858-d10c-3a40-88d9-8d6c740fde0c.roa File: 86364858-d10c-3a40-88d9-8d6c740fde0c.roa (raw, json) Hash identifier: gQRJfyvD4O2lkpHY6DxCqqOSJ2D9V0kmjJzDi0VKwSs= Subject key identifier: A8:F5:84:BF:46:A1:BC:76:74:50:3B:8C:7A:1C:7E:21:04:11:AC:55 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584D60E4EDEF6846DE7B9A62CC00 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86364858-d10c-3a40-88d9-8d6c740fde0c.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 30036 IP address blocks: 192.119.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e4:ed:ef:68:46:de:7b:9a:62:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=afd79114-7cb2-4868-8fd5-2d770c4ee043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:a3:9c:db:f2:59:63:8e:24:b4:81:40:cb: 92:a8:75:3f:6e:c5:0d:51:df:12:8e:cb:e4:47:18: c5:0c:8d:35:96:c1:bf:dc:bb:4f:d0:56:a6:39:9b: 13:05:4a:ad:1b:ed:15:57:87:d3:78:c2:1d:88:25: 27:a6:f0:4f:f6:b5:b3:d9:88:52:2d:e7:5d:e7:5e: ce:56:aa:05:02:1a:c9:5d:0e:ea:d3:6b:29:ff:b6: 8b:41:57:94:8b:58:b2:21:de:4a:eb:07:00:55:c0: c0:a0:44:76:df:9d:33:76:d6:4a:73:ed:94:a3:0f: 95:c6:6c:85:c4:33:3c:1d:bf:8d:87:70:58:2d:7a: 32:18:d6:11:78:9c:ec:1b:33:bc:4a:e6:ba:4f:6b: d9:a3:3b:a6:12:b9:85:23:e3:4e:1f:18:5a:4c:41: 07:74:48:36:e0:4d:3b:09:7f:c7:50:6b:3a:0e:dc: 6c:94:9d:b9:24:0a:aa:47:c0:bb:4a:32:28:24:1e: 75:b6:80:59:6b:0a:18:4d:87:c9:11:87:9e:ec:84: da:71:7c:a5:2f:d1:47:5b:a5:0a:4f:8f:a6:a8:c9: cd:7e:e3:01:13:07:dd:6e:56:f7:94:85:09:00:9f: 4a:52:27:64:79:73:12:7a:ea:ed:77:72:a4:41:54: d2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F5:84:BF:46:A1:BC:76:74:50:3B:8C:7A:1C:7E:21:04:11:AC:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/86364858-d10c-3a40-88d9-8d6c740fde0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 192.119.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:1a:21:60:b2:9c:96:69:12:39:b1:b5:74:da:53:87:a1:e5: 2f:77:7e:79:33:ce:bf:85:ce:d1:00:de:40:c1:a1:c8:9f:97: 04:b4:8c:8c:e0:63:1e:b3:42:26:fe:6d:3b:cf:dd:b0:62:90: 1a:b9:c9:e0:8e:eb:97:95:fd:32:c4:63:ef:8a:a1:48:67:8b: 3a:c1:7e:98:16:de:ad:44:6b:9f:a6:aa:20:8a:20:13:82:f0: 31:20:5f:65:13:d8:11:8f:6f:e8:6f:84:06:6f:28:88:a3:dc: e2:0c:1c:97:2c:6c:75:be:ac:52:7b:fe:98:be:6a:0c:9a:12: e5:10:a0:d9:7e:fb:51:ce:16:3f:00:a9:9a:7c:4d:78:8b:b1: e0:44:25:af:22:37:b8:9c:be:db:9d:17:f3:82:4d:a2:42:22: c8:c7:ee:f5:db:a8:27:94:e1:86:57:48:f8:4d:4c:f1:9a:6a: d4:6d:03:c6:f2:d0:57:9b:9f:b6:b1:37:0b:b4:1d:71:9c:ea: 5a:04:c9:67:ed:54:78:d3:0c:a6:0b:8e:0e:8f:c6:9c:a5:ef: 0e:8e:95:7b:9a:f8:fb:c6:95:07:00:8e:4d:20:63:bc:35:6a: a3:9e:41:d8:d7:34:f3:ed:9a:ca:7d:87:7f:b7:a6:8e:89:42: 49:8f:e9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5O3vaEbee5pizAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YWZkNzkxMTQtN2NiMi00ODY4LThmZDUtMmQ3NzBjNGVlMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XajnNvyWWOOJLSBQMuSqHU/bsUNUd8Sjsvk RxjFDI01lsG/3LtP0FamOZsTBUqtG+0VV4fTeMIdiCUnpvBP9rWz2YhSLedd517O VqoFAhrJXQ7q02sp/7aLQVeUi1iyId5K6wcAVcDAoER2350zdtZKc+2Uow+VxmyF xDM8Hb+Nh3BYLXoyGNYReJzsGzO8Sua6T2vZozumErmFI+NOHxhaTEEHdEg24E07 CX/HUGs6DtxslJ25JAqqR8C7SjIoJB51toBZawoYTYfJEYee7ITacXylL9FHW6UK T4+mqMnNfuMBEwfdblb3lIUJAJ9KUidkeXMSeurtd3KkQVTS7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj1hL9Gobx2dFA7jHocfiEEEaxVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvODYzNjQ4NTgtZDEwYy0z YTQwLTg4ZDktOGQ2Yzc0MGZkZTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHfJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoaIWCynJZpEjmxtXTaU4eh5S93fnkzzr+FztEA3kDBociflwS0jIzg Yx6zQib+bTvP3bBikBq5yeCO65eV/TLEY++KoUhnizrBfpgW3q1Ea5+mqiCKIBOC 8DEgX2UT2BGPb+hvhAZvKIij3OIMHJcsbHW+rFJ7/pi+agyaEuUQoNl++1HOFj8A qZp8TXiLseBEJa8iN7icvtudF/OCTaJCIsjH7vXbqCeU4YZXSPhNTPGaatRtA8by 0Febn7axNwu0HXGc6loEyWftVHjTDKYLjg6Pxpyl7w6OlXua+PvGlQcAjk0gY7w1 aqOeQdjXNPPtmsp9h3+3po6JQkmP6RE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:12 2026 by rpki-client