$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa File: 3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa (raw, json) Hash identifier: uvikA8u3DHGJpdDW31q4F8dzKp2xUvWBo4ApwM4Og7c= Subject key identifier: 20:22:CB:B6:A6:77:30:94:3E:6F:A5:5E:D9:23:58:C3:C7:66:41:E2 Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584D80FFD8310DB2E23BA080B880 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 14618 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:d8:31:0d:b2:e2:3b:a0:80:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=b00c3c3f-bbbc-4f8c-a230-c72a173d5a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:94:b0:98:19:4e:69:2b:95:cd:08:8d:77:f8: a2:3b:c1:29:3f:26:f5:c3:68:ec:c3:03:7f:9f:a0: ce:ed:67:11:11:bf:b8:59:ff:9c:04:d7:b3:16:3b: 08:0d:6e:7b:f7:13:ea:d5:97:15:97:df:60:70:92: 26:e7:ac:05:8b:a4:a8:ea:d3:2f:f5:15:25:76:c6: 7f:96:15:42:22:a1:cc:6b:d2:cc:2d:21:22:fd:e3: 6e:1b:f9:d3:64:26:67:e1:6d:9d:3b:0c:78:9f:73: e2:e1:61:e7:cb:cb:4b:a2:97:16:7b:26:fd:2e:6f: 1e:59:44:29:50:b5:af:9d:4e:6f:a7:57:a1:93:ea: f0:7f:da:c0:4d:40:9b:33:60:59:93:64:c9:42:16: 99:15:ab:31:62:10:6a:e6:65:5b:bf:53:fa:36:88: 5a:c9:39:99:68:cf:8f:b0:01:aa:aa:4c:f8:cc:0b: aa:85:48:82:5a:43:36:d3:ac:79:40:34:fc:72:2c: bd:c2:25:d0:78:f7:53:d1:5b:d2:cf:99:5d:53:f8: 1b:85:41:59:53:df:e9:ea:21:77:d5:c7:79:f6:a3: 0b:47:6b:0e:dd:1e:5c:fa:3a:5a:b6:dc:ca:6c:43: 90:02:1c:06:0b:ec:7b:f0:fa:14:71:8c:84:96:86: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:CB:B6:A6:77:30:94:3E:6F:A5:5E:D9:23:58:C3:C7:66:41:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/3c85918a-2baf-3ff9-856c-4f7666c40d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:30:ae:68:d9:a3:e7:f1:61:5e:dd:58:f4:3a:bf:a3:28:12: b8:1c:4a:09:ea:0c:b2:80:16:bb:9c:c9:bf:5c:e5:97:50:2a: 33:32:31:28:ea:8f:eb:68:81:ec:bf:aa:f8:5d:4d:66:82:f0: 47:d8:c7:5d:f6:ca:87:0d:80:fb:55:67:0a:b8:01:48:8a:eb: bb:c7:28:00:8d:ae:de:d7:20:55:49:32:82:50:84:52:0c:4e: 8b:3d:c6:86:be:b8:dc:44:e6:81:a3:75:4a:3b:16:91:2d:f0: c4:9c:2f:76:97:9d:46:84:58:8d:29:46:75:54:57:b8:94:07: b8:e2:68:5e:e9:32:f1:0c:5d:79:66:4a:2e:ea:4b:51:65:fb: e0:4d:4c:11:30:f2:da:57:a0:72:91:cf:78:45:35:6a:3d:85: b2:b5:50:94:cc:dd:aa:a6:8c:04:0f:2d:0a:7e:5d:b9:68:1e: fb:0c:bf:19:77:8a:b7:92:76:22:89:9b:c5:59:f3:51:53:ed: 07:84:f3:2d:1b:78:32:79:07:99:61:c1:cf:e6:9a:a0:98:7b: f2:ee:f4:d0:2e:f5:53:6c:34:fe:34:9e:87:68:8a:42:a0:6a: c2:0c:b2:0d:d8:62:e6:8e:32:68:3f:f0:c5:47:79:e2:b1:06: a9:f9:15:f2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2A/9gxDbLiO6CAuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk YjAwYzNjM2YtYmJiYy00ZjhjLWEyMzAtYzcyYTE3M2Q1YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5SwmBlOaSuVzQiNd/iiO8EpPyb1w2jswwN/ n6DO7WcREb+4Wf+cBNezFjsIDW579xPq1ZcVl99gcJIm56wFi6So6tMv9RUldsZ/ lhVCIqHMa9LMLSEi/eNuG/nTZCZn4W2dOwx4n3Pi4WHny8tLopcWeyb9Lm8eWUQp ULWvnU5vp1ehk+rwf9rATUCbM2BZk2TJQhaZFasxYhBq5mVbv1P6NohayTmZaM+P sAGqqkz4zAuqhUiCWkM206x5QDT8ciy9wiXQePdT0VvSz5ldU/gbhUFZU9/p6iF3 1cd59qMLR2sO3R5c+jpattzKbEOQAhwGC+x78PoUcYyEloZi8wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCAiy7amdzCUPm+lXtkjWMPHZkHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvM2M4NTkxOGEtMmJhZi0z ZmY5LTg1NmMtNGY3NjY2YzQwZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAcwrmjZo+fxYV7dWPQ6v6MoErgcSgnqDLKAFrucyb9c5ZdQ KjMyMSjqj+togey/qvhdTWaC8EfYx132yocNgPtVZwq4AUiK67vHKACNrt7XIFVJ MoJQhFIMTos9xoa+uNxE5oGjdUo7FpEt8MScL3aXnUaEWI0pRnVUV7iUB7jiaF7p MvEMXXlmSi7qS1Fl++BNTBEw8tpXoHKRz3hFNWo9hbK1UJTM3aqmjAQPLQp+Xblo HvsMvxl3ireSdiKJm8VZ81FT7QeE8y0beDJ5B5lhwc/mmqCYe/Lu9NAu9VNsNP40 nodoikKgasIMsg3YYuaOMmg/8MVHeeKxBqn5FfI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:25:18 2026 by rpki-client