$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa File: 4075d6f0-6747-3705-bcd1-320a5d5683a1.roa (raw, json) Hash identifier: Z9As1rNIL65mXxHofoSFQpaYUqiOE7zmU5J4deDL+/A= Subject key identifier: EB:08:C6:8D:27:CA:04:44:14:2A:9A:85:6F:10:28:FE:10:C5:91:12 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D7A0533B954851FFEBC8DE340 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 19637 IP address blocks: 192.19.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:33:b9:54:85:1f:fe:bc:8d:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=a998be82-059e-48f2-99b6-883a6117668c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c9:c5:77:c5:72:38:a0:b9:fa:03:d2:04:31: ba:77:1f:0e:76:9c:7c:cd:45:ed:61:0c:fc:70:7e: 77:e1:c7:e0:8d:e4:69:e2:74:06:93:3c:f5:25:7b: fa:b9:9e:ce:41:71:e0:ae:ea:a1:89:f4:6a:c1:70: b9:47:da:77:f2:fb:39:49:68:a3:12:73:32:df:da: 01:f9:79:81:b5:58:a2:83:9f:0f:ba:c1:b3:4a:9d: a1:55:37:7a:e2:5f:6a:9e:aa:f6:41:97:3a:e6:3e: b9:f2:54:37:c8:8d:5d:b3:07:dc:6f:c6:79:b3:ed: 5e:5c:64:3a:6b:46:4a:03:45:41:bc:c0:fe:31:01: f6:a1:25:9a:97:07:c6:6a:13:a1:5a:a9:2b:b2:92: aa:8d:b6:67:5a:1e:40:0d:32:a0:d3:e9:c3:e2:5c: e8:ec:b5:c7:11:15:98:95:58:db:78:3b:ba:41:6e: 55:d2:6a:df:c2:69:26:f0:38:87:65:85:a4:de:27: 78:4a:ee:75:c3:0e:f0:86:d8:50:6b:9e:0d:83:f5: 86:ed:61:ed:fd:01:62:d3:82:32:7e:34:73:1b:0f: c2:64:b6:dc:e0:df:85:24:44:bb:9b:72:00:d7:ee: 1e:f4:19:7b:1f:9a:25:52:bc:95:d4:20:ea:20:ef: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:08:C6:8D:27:CA:04:44:14:2A:9A:85:6F:10:28:FE:10:C5:91:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/4075d6f0-6747-3705-bcd1-320a5d5683a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c6:76:33:35:7d:12:a2:e9:dc:12:9c:70:a7:6e:bc:9d:17: a1:4d:92:87:3e:67:1f:34:93:f6:73:27:26:10:fa:6f:0a:48: b7:64:80:10:20:75:59:4f:ca:b3:e0:d1:98:e7:9b:af:eb:d2: f8:73:ee:16:b4:d6:74:78:a8:61:47:58:cb:b3:95:e1:78:5b: 38:0c:18:8f:07:06:48:dc:bd:73:1d:36:01:a7:81:89:73:05: ac:96:86:64:3c:2c:e2:41:62:eb:ca:c3:85:63:83:0d:f5:ef: db:0e:72:34:fc:85:4d:f2:04:2d:28:64:f4:33:ab:5d:99:86: 45:02:8a:50:65:07:f0:24:a4:4a:11:5c:d1:7e:31:26:b5:e4: f4:3e:6a:04:1b:ea:79:16:a4:24:90:ab:40:98:ae:b0:c9:23: d7:aa:71:9d:be:9c:1d:5e:10:f7:ca:ab:06:c8:de:c0:71:60: 4e:2c:3f:07:45:0e:3e:f4:ef:fd:b4:76:47:55:69:53:0e:92: 02:7f:9c:19:e8:03:09:d9:18:f8:1c:3c:fd:6e:50:d1:15:06: 69:ef:89:50:95:62:7e:bb:88:21:07:00:03:b5:61:c0:c4:3b: f2:8a:b5:ca:17:49:3c:94:2e:80:db:35:e3:b2:e9:cf:6b:95: 02:32:f9:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTO5VIUf/ryN40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YTk5OGJlODItMDU5ZS00OGYyLTk5YjYtODgzYTYxMTc2NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcnFd8VyOKC5+gPSBDG6dx8Odpx8zUXtYQz8 cH534cfgjeRp4nQGkzz1JXv6uZ7OQXHgruqhifRqwXC5R9p38vs5SWijEnMy39oB +XmBtViig58PusGzSp2hVTd64l9qnqr2QZc65j658lQ3yI1dswfcb8Z5s+1eXGQ6 a0ZKA0VBvMD+MQH2oSWalwfGahOhWqkrspKqjbZnWh5ADTKg0+nD4lzo7LXHERWY lVjbeDu6QW5V0mrfwmkm8DiHZYWk3id4Su51ww7whthQa54Ng/WG7WHt/QFi04Iy fjRzGw/CZLbc4N+FJES7m3IA1+4e9Bl7H5olUryV1CDqIO+IUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsIxo0nygREFCqahW8QKP4QxZESMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvNDA3NWQ2ZjAtNjc0Ny0z NzA1LWJjZDEtMzIwYTVkNTY4M2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBM7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbGdjM1fRKi6dwSnHCnbrydF6FNkoc+Zx80k/ZzJyYQ+m8KSLdkgBAg dVlPyrPg0Zjnm6/r0vhz7ha01nR4qGFHWMuzleF4WzgMGI8HBkjcvXMdNgGngYlz BayWhmQ8LOJBYuvKw4Vjgw3179sOcjT8hU3yBC0oZPQzq12ZhkUCilBlB/AkpEoR XNF+MSa15PQ+agQb6nkWpCSQq0CYrrDJI9eqcZ2+nB1eEPfKqwbI3sBxYE4sPwdF Dj707/20dkdVaVMOkgJ/nBnoAwnZGPgcPP1uUNEVBmnviVCVYn67iCEHAAO1YcDE O/KKtcoXSTyULoDbNeOy6c9rlQIy+aM= -----END CERTIFICATE-----Generated at Fri Apr 17 17:40:03 2026 by rpki-client