$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa File: 7a1d4876-3def-3187-938f-10513510e226.roa (raw, json) Hash identifier: lu2cv+tj41Vgd4jrjq8B8DLXPWOf2KHiW5O/0ov/gT0= Subject key identifier: 7A:56:9B:65:E1:BE:A4:35:4A:25:78:55:32:E4:8F:17:94:16:45:84 Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584CDB02039BA41FE1D6C9827260 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa Signing time: Sat 14 Feb 2026 02:00:32 +0000 ROA not before: Sat 14 Feb 2026 02:00:32 +0000 ROA not after: Fri 15 May 2026 01:00:32 +0000 asID: 396982 IP address blocks: 192.19.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:db:02:03:9b:a4:1f:e1:d6:c9:82:72:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Feb 14 02:00:32 2026 GMT Not After : May 15 01:00:32 2026 GMT Subject: CN=586e2de4-248e-406f-8624-ea30bbe26f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:9f:67:96:e6:73:a7:65:8b:37:fd:fb:8f:37: 27:ac:4d:0e:53:17:85:a9:ba:4c:f6:bd:fc:29:2c: 12:37:4d:19:e5:78:0a:24:f0:bd:a6:ad:4c:f8:0e: a5:b7:96:cd:fb:75:43:49:1f:fc:71:c4:79:ee:ff: 3f:a6:85:53:55:50:de:6f:30:f2:58:a9:23:1b:f8: 42:e6:15:84:d5:9a:2b:36:8b:5c:8c:d5:f5:22:e9: 7e:22:16:b0:22:32:bf:bb:19:2f:28:9a:f4:03:39: ce:d0:33:de:7d:96:92:56:31:3f:e6:4d:a6:23:9d: ff:7c:5d:5b:43:e0:9f:1c:6e:b8:64:0b:0a:17:c0: 4b:cb:b9:73:c4:47:e7:e1:c6:e9:8a:aa:41:7d:22: 19:62:81:5f:b2:02:03:4f:23:f9:6b:24:b8:d9:45: f2:b0:0d:4b:e9:db:48:67:ea:34:57:d9:71:a0:a1: 3f:32:c4:61:69:27:d3:cb:69:a0:d6:55:af:cd:08: 42:1b:1c:df:7f:6b:41:26:06:a9:cd:22:95:f9:bb: 44:5d:f3:2f:ab:43:e0:15:98:17:4e:73:73:85:5d: 3b:10:66:76:d2:0f:8b:cb:16:d7:e6:f0:53:32:fa: 8d:4c:55:dd:cb:d3:66:20:00:9a:bc:8b:b2:5c:82: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:56:9B:65:E1:BE:A4:35:4A:25:78:55:32:E4:8F:17:94:16:45:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/7a1d4876-3def-3187-938f-10513510e226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e4:5b:d3:30:f2:84:63:57:75:61:de:4e:99:1b:91:b5:c8: 51:05:72:d9:c0:cb:af:97:b4:d8:43:0c:da:65:45:39:37:79: 1e:e5:89:6d:ae:2b:65:a3:08:4c:73:4d:18:b1:25:23:c1:ca: cf:cb:a5:5d:35:54:a0:6d:53:60:39:2b:a7:ef:45:38:f4:84: c2:33:4f:65:85:41:48:2e:36:1c:fa:30:6c:7d:a0:b9:f6:db: 42:d5:31:6d:a1:c3:8e:12:c8:e3:66:5a:20:9e:19:d7:0d:b4: 1b:36:b6:c8:65:a2:8c:e3:17:61:7b:74:6a:05:cb:5a:37:c9: f3:b3:c3:46:d4:83:7a:59:76:18:22:a7:21:f2:af:b0:e0:ac: f5:b5:14:31:ad:76:00:72:d4:2f:d2:ee:b1:3c:a7:40:e0:f1: d5:ef:ba:d9:ef:df:d2:21:92:b6:65:2e:e9:c5:ec:cb:ae:53: 71:0b:70:13:a3:91:c6:ed:7b:c9:e3:89:3d:b4:25:0a:c4:de: 17:43:37:d6:97:c7:56:47:a5:59:6a:16:ac:13:5b:ed:73:eb: 5c:c7:9a:47:af:95:f1:c5:5e:88:c1:65:aa:bf:16:fb:5f:8b: 60:86:40:42:1e:50:2f:6a:28:b8:91:f1:32:c7:0a:85:c9:11: 8e:bb:23:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzbAgObpB/h1smCcmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDIxNDAyMDAzMloXDTI2MDUxNTAxMDAzMlowLzEtMCsGA1UEAxMk NTg2ZTJkZTQtMjQ4ZS00MDZmLTg2MjQtZWEzMGJiZTI2ZjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZ9nluZzp2WLN/37jzcnrE0OUxeFqbpM9r38 KSwSN00Z5XgKJPC9pq1M+A6lt5bN+3VDSR/8ccR57v8/poVTVVDebzDyWKkjG/hC 5hWE1ZorNotcjNX1Iul+IhawIjK/uxkvKJr0AznO0DPefZaSVjE/5k2mI53/fF1b Q+CfHG64ZAsKF8BLy7lzxEfn4cbpiqpBfSIZYoFfsgIDTyP5ayS42UXysA1L6dtI Z+o0V9lxoKE/MsRhaSfTy2mg1lWvzQhCGxzff2tBJgapzSKV+btEXfMvq0PgFZgX TnNzhV07EGZ20g+LyxbX5vBTMvqNTFXdy9NmIACavIuyXIIh2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpWm2XhvqQ1SiV4VTLkjxeUFkWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvN2ExZDQ4NzYtM2RlZi0z MTg3LTkzOGYtMTA1MTM1MTBlMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/kW9Mw8oRjV3Vh3k6ZG5G1yFEFctnAy6+XtNhDDNplRTk3eR7liW2u K2WjCExzTRixJSPBys/LpV01VKBtU2A5K6fvRTj0hMIzT2WFQUguNhz6MGx9oLn2 20LVMW2hw44SyONmWiCeGdcNtBs2tshloozjF2F7dGoFy1o3yfOzw0bUg3pZdhgi pyHyr7DgrPW1FDGtdgBy1C/S7rE8p0Dg8dXvutnv39IhkrZlLunF7MuuU3ELcBOj kcbte8njiT20JQrE3hdDN9aXx1ZHpVlqFqwTW+1z61zHmkevlfHFXojBZaq/Fvtf i2CGQEIeUC9qKLiR8TLHCoXJEY67Ixc= -----END CERTIFICATE-----Generated at Mon Mar 2 17:10:44 2026 by rpki-client