$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa File: 88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa (raw, json) Hash identifier: DyHNV21ViNpQvrmYHnryzG0vRsQXeXOWmlMxMzKQ1Hc= Subject key identifier: 57:5A:D9:17:5E:78:F2:E6:E2:CC:F6:81:A7:8C:D4:6E:8A:DD:AD:2D Certificate issuer: /CN=219560ff-1a32-4424-9e54-f95df54ecc84 Certificate serial: 010D0C9F4328584D8100A78ED8A8F008C6E3ED80 Authority key identifier: B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 16509 IP address blocks: 192.35.220.0/24 maxlen: 24 192.35.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:81:00:a7:8e:d8:a8:f0:08:c6:e3:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=219560ff-1a32-4424-9e54-f95df54ecc84 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=225564a3-3e25-4b5d-a7bf-52eb0c97e42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a0:45:79:8e:46:4a:0d:8e:a5:1b:ae:4f:5d: 7e:b3:e4:f4:fd:5e:32:d4:41:7e:5b:93:6b:6e:ae: 96:9e:a4:60:cc:17:8e:f9:f8:74:ee:ce:5b:6e:18: f8:6e:8b:81:3e:fe:b1:0a:ee:37:d9:13:24:1b:15: 3f:c3:f5:c4:7d:82:1c:86:74:22:40:b4:a5:19:f7: 35:15:f8:66:2a:22:0c:ed:ad:4e:4f:e8:b0:35:53: c0:87:d1:de:1d:46:27:28:60:8d:71:a2:2a:6c:40: 23:ea:1d:41:b7:14:c2:de:11:76:a7:66:7b:58:40: 24:ac:aa:7c:25:09:9c:b7:2c:a7:b5:e4:72:ae:f8: 5e:e1:53:41:17:f5:b3:4b:bf:2b:da:f0:c3:54:02: dd:85:71:36:6d:2d:e5:cf:85:cc:e4:4e:c7:35:b6: cc:f6:a5:a9:bf:fe:d8:7b:6a:48:33:e5:cb:e3:d2: 41:be:e6:21:7a:fd:28:6a:c8:43:1d:30:38:ab:ca: f5:50:ce:7b:40:db:cd:3a:46:73:f7:60:e6:22:bc: 21:05:78:6f:10:eb:76:10:32:f8:f5:f2:41:d8:42: 2a:32:9a:06:d3:8d:46:92:d1:41:86:a3:b1:21:6d: 59:e0:d6:45:95:95:9d:89:15:89:30:c5:50:be:be: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:5A:D9:17:5E:78:F2:E6:E2:CC:F6:81:A7:8C:D4:6E:8A:DD:AD:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/88c5a7c0-ec9c-37a8-9ee4-af450aa4d8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84/219560ff-1a32-4424-9e54-f95df54ecc84.crl X509v3 Authority Key Identifier: keyid:B7:5A:46:BD:48:BF:FF:E6:F1:D7:1B:DB:F4:3B:BA:BB:79:2F:C0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/219560ff-1a32-4424-9e54-f95df54ecc84.cer sbgp-ipAddrBlock: critical IPv4: 192.35.220.0/24 192.35.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d5:83:01:a4:b4:f1:c9:06:e7:96:8f:e6:29:5f:d3:b1:e0: ae:b2:18:29:9b:4d:a9:57:0b:d8:f6:ce:1a:7a:38:c6:7e:c2: 09:3d:f4:ac:cd:b0:cb:2b:ad:32:3f:f1:82:49:09:01:83:71: c9:d9:9b:85:14:d0:73:2b:f4:f9:6d:ca:6a:7e:e6:d6:c0:88: 01:46:a2:b3:49:0d:1a:88:88:08:3c:b3:cf:0b:b4:a5:a5:63: 7e:1f:4c:c1:c1:81:52:61:60:a3:f3:90:f5:0a:b5:6b:1b:83: 48:a5:10:13:62:04:35:7d:58:7e:46:cc:10:6e:7b:38:fe:f1: b3:61:a6:06:5e:d1:ad:7d:8c:64:e8:64:67:0d:40:ac:43:c6: 5a:04:9c:52:28:a0:14:f4:e9:32:2d:85:6b:06:f4:8e:39:33: 7f:8e:82:73:03:10:23:e4:a8:78:a6:1e:4c:60:9d:00:79:80: 8e:f3:17:eb:65:73:9d:51:c4:01:53:59:62:8e:91:0e:20:47: 45:ba:81:e9:29:df:4c:23:6a:02:dc:64:c9:c2:80:cb:80:34: 99:d1:c4:b4:d5:94:40:63:2f:ae:2f:8a:a0:81:83:69:30:ec: d5:1b:37:0a:4b:b8:52:85:d9:e4:68:8d:4d:0a:37:97:42:ae: 82:c6:57:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2BAKeO2KjwCMbj7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE5NTYwZmYtMWEzMi00NDI0LTllNTQtZjk1ZGY1NGVj Yzg0MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MjI1NTY0YTMtM2UyNS00YjVkLWE3YmYtNTJlYjBjOTdlNDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6BFeY5GSg2OpRuuT11+s+T0/V4y1EF+W5Nr bq6WnqRgzBeO+fh07s5bbhj4bouBPv6xCu432RMkGxU/w/XEfYIchnQiQLSlGfc1 FfhmKiIM7a1OT+iwNVPAh9HeHUYnKGCNcaIqbEAj6h1BtxTC3hF2p2Z7WEAkrKp8 JQmctyynteRyrvhe4VNBF/WzS78r2vDDVALdhXE2bS3lz4XM5E7HNbbM9qWpv/7Y e2pIM+XL49JBvuYhev0oashDHTA4q8r1UM57QNvNOkZz92DmIrwhBXhvEOt2EDL4 9fJB2EIqMpoG041GktFBhqOxIW1Z4NZFlZWdiRWJMMVQvr6uEwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFda2RdeePLm4sz2gaeM1G6K3a0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1 NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVkZjU0ZWNjODQvODhjNWE3YzAtZWM5Yy0z N2E4LTllZTQtYWY0NTBhYTRkOGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjE5NTYwZmYtMWEzMi00NDI0LTll NTQtZjk1ZGY1NGVjYzg0LzIxOTU2MGZmLTFhMzItNDQyNC05ZTU0LWY5NWRmNTRl Y2M4NC5jcmwwHwYDVR0jBBgwFoAUt1pGvUi//+bx1xvb9Du6u3kvwIIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMTk1NjBmZi0xYTMyLTQ0MjQtOWU1NC1mOTVk ZjU0ZWNjODQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwCPcAwQA wCPfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGnVgwGktPHJBueWj+YpX9Ox4K6yGCmbTalXC9j2zhp6OMZ+ wgk99KzNsMsrrTI/8YJJCQGDccnZm4UU0HMr9Pltymp+5tbAiAFGorNJDRqIiAg8 s88LtKWlY34fTMHBgVJhYKPzkPUKtWsbg0ilEBNiBDV9WH5GzBBuezj+8bNhpgZe 0a19jGToZGcNQKxDxloEnFIooBT06TIthWsG9I45M3+OgnMDECPkqHimHkxgnQB5 gI7zF+tlc51RxAFTWWKOkQ4gR0W6gekp30wjagLcZMnCgMuANJnRxLTVlEBjL64v iqCBg2kw7NUbNwpLuFKF2eRojU0KN5dCroLGV2M= -----END CERTIFICATE-----Generated at Fri Apr 17 22:25:06 2026 by rpki-client