$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/fcdd057d-d79e-3d75-92f0-c20627f77705.roa File: fcdd057d-d79e-3d75-92f0-c20627f77705.roa (raw, json) Hash identifier: SOV+UJvIza3zMlyvOEHsLdfAemuSlomD3gD4zMpZviM= Subject key identifier: DA:CF:20:F2:72:98:49:D8:6C:ED:09:0A:64:58:1B:15:50:F3:5B:73 Certificate issuer: /CN=469597d0-a870-46e2-b0a1-04a71dad0b25 Certificate serial: 010D0C9F4328584D6C0FDC465F670D565DB84F40 Authority key identifier: D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/fcdd057d-d79e-3d75-92f0-c20627f77705.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 395117 IP address blocks: 47.19.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:dc:46:5f:67:0d:56:5d:b8:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=469597d0-a870-46e2-b0a1-04a71dad0b25 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=4e8abd47-ae34-4ace-ace2-8e2636355ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6c:9f:1d:55:2e:73:90:18:c0:22:7d:de:1a: f7:87:4d:99:c6:db:73:9c:22:72:92:0a:55:bd:05: 76:c1:26:cd:07:66:da:e3:6d:30:43:d8:8c:28:0d: 97:60:7a:f3:c3:54:5a:68:16:b0:ea:00:85:40:94: 5c:98:7a:c7:6c:41:2d:7a:cc:20:f4:a7:3c:af:28: 88:22:cb:ad:e8:b4:b0:3c:87:08:ea:61:b6:32:be: 2a:6c:f5:34:71:b0:f7:b4:e9:62:ca:51:c6:e3:b8: 78:47:da:82:3c:85:49:f6:06:33:c5:ec:30:06:2d: 0d:5a:80:a4:70:9e:39:6b:c4:08:87:cd:82:2e:bc: 91:32:fa:09:49:5f:61:c1:72:0c:c8:73:88:6c:6b: 60:99:73:8c:27:e9:05:a7:21:aa:7b:17:fd:12:51: 9e:e1:60:93:42:20:d0:4a:80:0b:96:7d:05:4b:1a: aa:16:8d:97:a5:d9:0a:eb:d5:c3:80:6a:9f:1f:da: 9c:d4:b1:be:f7:ab:9d:09:20:25:a2:8e:9e:48:6b: 14:43:e8:ec:5c:bf:d9:b0:da:16:37:3e:fe:0a:d4: 5e:06:33:dd:07:a1:55:29:11:ab:66:a0:f7:83:02: a7:18:bb:26:30:87:31:c0:10:27:cd:e4:2b:a5:92: 79:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CF:20:F2:72:98:49:D8:6C:ED:09:0A:64:58:1B:15:50:F3:5B:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/fcdd057d-d79e-3d75-92f0-c20627f77705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25/469597d0-a870-46e2-b0a1-04a71dad0b25.crl X509v3 Authority Key Identifier: keyid:D9:22:F4:C1:14:0A:7F:93:24:F6:09:53:39:5C:D7:15:FD:76:7A:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/469597d0-a870-46e2-b0a1-04a71dad0b25.cer sbgp-ipAddrBlock: critical IPv4: 47.19.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:7e:11:90:34:50:30:68:05:99:fd:a7:0c:dc:37:b4:96:12: cc:75:58:d9:59:dd:16:9e:d2:e7:dc:69:3c:72:f4:de:dd:68: 3c:16:a4:f4:a5:e4:09:7f:81:a2:74:bb:5a:1c:30:d1:57:25: 51:42:31:68:e0:e6:cf:98:3b:00:7b:28:a7:4c:ad:4b:7c:e6: c7:17:0e:4c:29:b6:46:e7:4f:4c:ae:63:a0:4d:54:88:0c:1a: f2:85:ef:11:f8:b2:f8:52:c7:2b:6f:81:52:ae:72:c1:24:da: 76:fa:87:ed:2c:85:2c:00:ae:ad:f7:07:7e:87:2c:e0:09:16: e3:2c:57:66:b7:a6:60:b3:97:2a:a0:ca:01:2e:f8:11:ea:d8: 62:8d:71:e3:ba:43:b6:92:e6:a8:d5:73:32:85:97:6c:2e:da: 65:f8:59:6a:08:96:64:eb:5c:9e:bb:96:9f:37:18:ac:98:e4: e6:1d:36:59:9e:4b:d9:51:d5:d2:49:87:8e:49:dd:4a:7b:75: 6e:b8:d2:4c:d2:54:04:69:57:32:1b:83:3c:de:1a:5a:6d:d0: 7c:6a:db:fd:45:4f:e5:f3:67:e6:a3:1a:72:3f:b4:7d:fd:ad: 98:4f:2d:c7:34:b5:cb:ba:ed:3b:b1:41:42:42:c7:54:e2:34: 34:9c:19:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD9xGX2cNVl24T0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY5NTk3ZDAtYTg3MC00NmUyLWIwYTEtMDRhNzFkYWQw YjI1MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk NGU4YWJkNDctYWUzNC00YWNlLWFjZTItOGUyNjM2MzU1Y2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGyfHVUuc5AYwCJ93hr3h02ZxttznCJykgpV vQV2wSbNB2ba420wQ9iMKA2XYHrzw1RaaBaw6gCFQJRcmHrHbEEteswg9Kc8ryiI Isut6LSwPIcI6mG2Mr4qbPU0cbD3tOliylHG47h4R9qCPIVJ9gYzxewwBi0NWoCk cJ45a8QIh82CLryRMvoJSV9hwXIMyHOIbGtgmXOMJ+kFpyGqexf9ElGe4WCTQiDQ SoALln0FSxqqFo2XpdkK69XDgGqfH9qc1LG+96udCSAloo6eSGsUQ+jsXL/ZsNoW Nz7+CtReBjPdB6FVKRGrZqD3gwKnGLsmMIcxwBAnzeQrpZJ5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrPIPJymEnYbO0JCmRYGxVQ81tzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1 OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3MWRhZDBiMjUvZmNkZDA1N2QtZDc5ZS0z ZDc1LTkyZjAtYzIwNjI3Zjc3NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDY5NTk3ZDAtYTg3MC00NmUyLWIw YTEtMDRhNzFkYWQwYjI1LzQ2OTU5N2QwLWE4NzAtNDZlMi1iMGExLTA0YTcxZGFk MGIyNS5jcmwwHwYDVR0jBBgwFoAU2SL0wRQKf5Mk9glTOVzXFf12erQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80Njk1OTdkMC1hODcwLTQ2ZTItYjBhMS0wNGE3 MWRhZDBiMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALxMTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp+EZA0UDBoBZn9pwzcN7SWEsx1WNlZ3Rae0ufcaTxy9N7daDwWpPSl 5Al/gaJ0u1ocMNFXJVFCMWjg5s+YOwB7KKdMrUt85scXDkwptkbnT0yuY6BNVIgM GvKF7xH4svhSxytvgVKucsEk2nb6h+0shSwArq33B36HLOAJFuMsV2a3pmCzlyqg ygEu+BHq2GKNceO6Q7aS5qjVczKFl2wu2mX4WWoIlmTrXJ67lp83GKyY5OYdNlme S9lR1dJJh45J3Up7dW640kzSVARpVzIbgzzeGlpt0Hxq2/1FT+XzZ+ajGnI/tH39 rZhPLcc0tcu67TuxQUJCx1TiNDScGYM= -----END CERTIFICATE-----Generated at Fri Apr 17 22:17:09 2026 by rpki-client