$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa File: 31421922-aedf-3672-abd4-cfa24a054705.roa (raw, json) Hash identifier: wpkKNnETFx9LTcVvJvc12DIABV3rSTp1FEsYDN7c2T4= Subject key identifier: 7F:F8:C5:17:4E:41:45:D9:6C:C6:49:DD:C5:BB:F4:E4:8B:14:C1:53 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D4A8FAF7B479662092D9BF880 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 396982 IP address blocks: 192.19.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:af:7b:47:96:62:09:2d:9b:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=76c0c8d0-5926-4aae-8fc2-6a4fcfa9a61c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:17:6f:88:a2:60:bc:75:76:2d:83:f4:9b: a6:b3:b6:40:5f:a5:8f:de:cd:c2:4e:32:44:e6:3c: a9:b1:35:64:1d:4c:d7:01:83:35:7f:de:ff:1b:b7: 3c:8c:44:35:f3:46:4d:fd:dc:db:6c:77:ca:53:62: 4c:19:66:c0:e3:58:63:d9:e3:0a:98:53:26:e1:04: e1:d1:72:f3:29:ff:b9:f1:d4:29:8d:77:b0:7d:c7: 51:b9:71:68:1c:4e:e2:48:6e:ac:a7:e4:d8:26:7b: 24:3d:59:d7:68:e0:87:5f:1f:ef:c2:82:17:4c:e4: f6:5e:07:f5:c4:7e:e4:6d:a9:1b:21:87:ea:94:63: b6:40:b4:c7:dc:e3:22:13:86:b2:f6:bf:5a:2a:26: a8:68:b2:7f:a1:93:03:56:39:f0:df:6e:da:4b:ae: a5:73:02:1d:63:91:12:61:fc:0d:0d:f5:0e:ea:2b: e9:ab:d3:0c:9e:fc:9a:95:94:f4:c4:aa:7b:7b:18: 50:40:44:a8:b0:70:8e:d9:68:7b:77:bb:13:de:6d: 61:79:71:5f:34:25:34:7a:50:05:c8:c0:58:5b:78: af:7b:a2:75:81:38:e8:d4:fa:b6:6d:d9:5d:00:14: f4:d1:66:7f:9b:00:92:d8:ec:71:4a:29:e2:41:e0: cc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F8:C5:17:4E:41:45:D9:6C:C6:49:DD:C5:BB:F4:E4:8B:14:C1:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/31421922-aedf-3672-abd4-cfa24a054705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:4d:be:ee:d4:20:69:58:6a:99:35:77:df:15:96:b0:94:a8: 9c:84:f4:81:7a:0d:2c:11:62:90:40:eb:b3:02:47:e8:50:bc: 14:72:43:22:e7:76:dc:40:51:65:45:f9:8e:80:e6:90:5e:12: 68:2a:ec:95:70:42:81:a8:c3:6a:9f:36:55:d4:5c:f9:25:64: 79:2e:7f:0f:14:99:5b:a7:d0:42:56:f8:77:bf:61:2b:66:e0: 4b:c8:e7:83:e0:86:52:94:ed:d7:fa:a6:f2:dd:7c:c8:fc:43: 3c:f6:ad:2b:33:c3:aa:4b:40:b3:be:86:76:7e:5f:b0:bb:cb: 64:97:31:b7:6c:54:9e:d8:69:e0:40:97:05:1d:e0:1e:d1:6b: 86:fa:e0:eb:64:f5:57:35:6a:6e:d0:74:03:ff:bc:6f:cb:83: fd:a7:e4:fd:89:19:b3:d2:cc:89:79:ab:b8:f2:43:f1:3d:d9: e0:0f:2a:55:88:3a:c0:2e:a7:3c:5a:89:27:a8:ad:5f:16:87: 99:b0:8a:d8:32:d5:4a:cb:c9:78:37:db:ab:3b:6d:0b:b8:11: 2c:f8:dd:6e:9f:45:3c:96:1a:81:ac:b0:c4:14:17:0f:09:15: 85:12:27:cb:43:f5:30:98:43:99:aa:4e:8f:fe:d1:f2:9c:95: 97:f1:18:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj697R5ZiCS2b+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk NzZjMGM4ZDAtNTkyNi00YWFlLThmYzItNmE0ZmNmYTlhNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+YXb4iiYLx1di2D9Jums7ZAX6WP3s3CTjJE 5jypsTVkHUzXAYM1f97/G7c8jEQ180ZN/dzbbHfKU2JMGWbA41hj2eMKmFMm4QTh 0XLzKf+58dQpjXewfcdRuXFoHE7iSG6sp+TYJnskPVnXaOCHXx/vwoIXTOT2Xgf1 xH7kbakbIYfqlGO2QLTH3OMiE4ay9r9aKiaoaLJ/oZMDVjnw327aS66lcwIdY5ES YfwNDfUO6ivpq9MMnvyalZT0xKp7exhQQESosHCO2Wh7d7sT3m1heXFfNCU0elAF yMBYW3ive6J1gTjo1Pq2bdldABT00WZ/mwCS2OxxSiniQeDMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/4xRdOQUXZbMZJ3cW79OSLFMFTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvMzE0MjE5MjItYWVkZi0z NjcyLWFiZDQtY2ZhMjRhMDU0NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBP/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9Nvu7UIGlYapk1d98VlrCUqJyE9IF6DSwRYpBA67MCR+hQvBRyQyLn dtxAUWVF+Y6A5pBeEmgq7JVwQoGow2qfNlXUXPklZHkufw8UmVun0EJW+He/YStm 4EvI54PghlKU7df6pvLdfMj8Qzz2rSszw6pLQLO+hnZ+X7C7y2SXMbdsVJ7YaeBA lwUd4B7Ra4b64Otk9Vc1am7QdAP/vG/Lg/2n5P2JGbPSzIl5q7jyQ/E92eAPKlWI OsAupzxaiSeorV8Wh5mwitgy1UrLyXg326s7bQu4ESz43W6fRTyWGoGssMQUFw8J FYUSJ8tD9TCYQ5mqTo/+0fKclZfxGK8= -----END CERTIFICATE-----Generated at Fri Apr 17 18:28:39 2026 by rpki-client