$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3b0a1c91-6081-3623-ab9d-9cf914540267.roa File: 3b0a1c91-6081-3623-ab9d-9cf914540267.roa (raw, json) Hash identifier: cE7nn/EDy4Fwe+yHEzzIF+lNos9aZRBiWskyMFU+vAc= Subject key identifier: A6:7E:7A:ED:13:5E:32:78:EA:C8:C8:D5:38:5E:08:86:F2:4E:D6:CD Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D59C7F750422228A0F4852D00 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3b0a1c91-6081-3623-ab9d-9cf914540267.roa Signing time: Tue 31 Mar 2026 11:51:25 +0000 ROA not before: Tue 31 Mar 2026 11:51:25 +0000 ROA not after: Mon 29 Jun 2026 11:51:25 +0000 asID: 19637 IP address blocks: 192.19.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:c7:f7:50:42:22:28:a0:f4:85:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Mar 31 11:51:25 2026 GMT Not After : Jun 29 11:51:25 2026 GMT Subject: CN=1165eaa6-830c-4d75-a9a2-4dccbcd18acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:57:7a:24:ca:b0:7c:15:09:40:50:bb:06:8e: 6e:f3:3e:1e:df:99:f1:22:63:bc:a4:aa:df:b0:0e: 39:0f:98:78:d0:b7:ee:34:01:85:e0:fb:49:44:64: f0:a5:0a:99:e6:fe:10:33:fb:b5:ef:cf:f8:f1:08: 99:46:31:69:a0:5b:60:ce:65:5a:76:b2:f5:a5:66: fd:70:bb:bb:fc:f7:d1:e8:25:89:53:7f:75:32:1a: 2f:18:a6:e4:c8:52:9e:e3:e6:78:a1:87:eb:7e:88: 3c:ab:07:c1:36:94:b2:c9:0f:40:a9:f0:5a:a8:40: 5b:f8:c2:f4:ef:73:47:c7:0b:07:31:de:22:04:c2: 69:f3:b2:b1:5c:1d:34:ca:c3:df:5c:0a:d3:9b:28: ca:75:07:2a:88:0e:ff:f5:0f:f8:76:de:9f:aa:16: be:d3:87:2f:be:c9:4f:5a:c7:7a:f4:1e:eb:92:d0: 40:42:3c:2a:0a:c5:2f:4c:57:6f:af:a9:4f:78:43: 64:b7:29:4f:1e:a5:40:70:7e:94:ae:00:09:21:7b: 15:f7:54:13:f7:98:73:a9:6d:24:bc:76:54:23:99: 95:d4:c8:66:0f:b8:a9:53:59:cb:19:57:a6:b1:5a: 9f:30:e1:c2:81:57:9d:7d:e4:7f:9c:ea:f1:88:d7: 97:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7E:7A:ED:13:5E:32:78:EA:C8:C8:D5:38:5E:08:86:F2:4E:D6:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3b0a1c91-6081-3623-ab9d-9cf914540267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5f:f4:52:0d:a4:02:6b:0a:b1:ef:6a:61:d4:f8:ac:76:74: 54:86:dc:eb:2e:c0:d3:ba:b6:ea:67:72:c3:79:b2:24:93:d2: 16:66:95:e4:10:b5:75:09:5c:06:be:ed:1f:27:9d:1f:1a:73: 2a:48:4d:8f:39:e5:22:2e:45:6f:9a:76:b5:a1:6f:5f:60:b4: 89:a3:b0:e2:fc:40:50:1c:b0:bd:34:df:ed:11:55:d5:42:30: 6d:6a:a7:07:ff:88:a3:d9:be:86:41:a2:58:47:4c:c9:33:4b: fe:eb:e6:0b:52:20:f9:97:94:40:44:42:4d:09:e9:21:4a:f5: d7:9b:72:b0:e3:e6:d6:7b:56:aa:cb:98:92:cd:9e:86:c5:40: 63:78:c3:38:a0:54:c0:18:d4:d3:73:39:5e:81:7d:5a:b9:4c: 47:c9:11:de:aa:b0:9c:e0:ae:1a:d1:03:2c:60:53:23:56:41: f0:17:47:29:c6:51:5f:2a:4a:03:2d:b5:0a:00:c9:2b:fa:a4: 77:4c:f6:53:b2:ca:b0:95:b9:90:18:da:83:4c:e4:ec:66:6e: 44:d3:83:9a:03:cf:bc:c3:ec:b6:85:0a:cb:b7:3a:ef:11:22: a9:da:cd:21:78:f1:e3:44:80:ff:97:30:22:a1:99:a0:82:2c: c3:89:d9:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Zx/dQQiIooPSFLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDMzMTExNTEyNVoXDTI2MDYyOTExNTEyNVowLzEtMCsGA1UEAxMk MTE2NWVhYTYtODMwYy00ZDc1LWE5YTItNGRjY2JjZDE4YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVd6JMqwfBUJQFC7Bo5u8z4e35nxImO8pKrf sA45D5h40LfuNAGF4PtJRGTwpQqZ5v4QM/u178/48QiZRjFpoFtgzmVadrL1pWb9 cLu7/PfR6CWJU391MhovGKbkyFKe4+Z4oYfrfog8qwfBNpSyyQ9AqfBaqEBb+ML0 73NHxwsHMd4iBMJp87KxXB00ysPfXArTmyjKdQcqiA7/9Q/4dt6fqha+04cvvslP Wsd69B7rktBAQjwqCsUvTFdvr6lPeENktylPHqVAcH6UrgAJIXsV91QT95hzqW0k vHZUI5mV1MhmD7ipU1nLGVemsVqfMOHCgVedfeR/nOrxiNeXlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZ+eu0TXjJ46sjI1TheCIbyTtbNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvM2IwYTFjOTEtNjA4MS0z NjIzLWFiOWQtOWNmOTE0NTQwMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJf9FINpAJrCrHvamHU+Kx2dFSG3OsuwNO6tupncsN5siST0hZmleQQ tXUJXAa+7R8nnR8acypITY855SIuRW+adrWhb19gtImjsOL8QFAcsL003+0RVdVC MG1qpwf/iKPZvoZBolhHTMkzS/7r5gtSIPmXlEBEQk0J6SFK9debcrDj5tZ7VqrL mJLNnobFQGN4wzigVMAY1NNzOV6BfVq5TEfJEd6qsJzgrhrRAyxgUyNWQfAXRynG UV8qSgMttQoAySv6pHdM9lOyyrCVuZAY2oNM5OxmbkTTg5oDz7zD7LaFCsu3Ou8R IqnazSF48eNEgP+XMCKhmaCCLMOJ2WI= -----END CERTIFICATE-----Generated at Fri Apr 17 19:18:12 2026 by rpki-client