$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa File: cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa (raw, json) Hash identifier: Bs8pvKN3VjtTvbgpGbKW1fajuN2/xK1rdD+415eRV3M= Subject key identifier: 48:81:C2:F7:F9:DA:A8:D6:68:75:9B:E1:59:3F:93:AC:E9:F8:51:1B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86954F582E7004F48E7DEF40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 192.29.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4f:58:2e:70:04:f4:8e:7d:ef:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=d9493166-c843-4b05-8d91-78e1565fdd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:8c:50:75:7c:c6:4a:c4:e3:b7:ea:e7:eb: 52:bd:bd:1f:5e:7e:54:d9:e8:ac:15:02:61:c0:a2: aa:ef:44:e6:21:d4:f1:c4:c5:5c:a8:ba:46:9c:6f: 94:5b:b1:5b:9d:b3:e6:cb:5d:e9:30:f4:da:af:b3: b8:81:66:de:26:13:a2:34:03:60:75:bf:6e:4a:8a: cf:e0:98:4c:a9:56:4f:c0:2a:91:ac:ad:3e:7f:f0: 97:08:3c:01:fe:28:85:77:c5:86:5e:6a:7d:9d:8f: 90:ec:98:a4:7d:5a:f4:d6:d8:5a:3f:e3:8a:f8:e7: fb:bc:72:50:e5:05:90:42:4b:b3:d3:51:dc:6f:90: dc:c5:f0:79:b7:49:4a:1f:40:07:af:a3:c4:6c:3b: 31:ab:bc:40:5a:5e:33:9b:89:5d:46:6f:45:db:6f: b9:59:fc:f2:d6:2e:ee:e1:ad:a8:db:18:eb:50:0b: 68:c1:13:c8:98:00:b3:d8:53:96:0f:64:a1:00:99: 76:3c:a6:37:79:37:25:36:d4:23:f8:aa:bc:e1:7a: 33:19:6f:aa:ee:f6:aa:a8:c2:ba:59:9f:d3:d6:e5: 63:f4:96:01:c1:4a:a0:dc:d4:68:fb:45:5d:43:eb: e7:0a:77:db:df:f9:72:18:90:a7:08:d1:45:06:7e: a4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:81:C2:F7:F9:DA:A8:D6:68:75:9B:E1:59:3F:93:AC:E9:F8:51:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cea471d4-2e6f-3371-a0b9-77b0ba03876c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.29.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:4f:e3:80:4c:df:a0:75:45:4a:4b:4a:f1:eb:77:10:ff:4b: 0d:3e:b8:f0:6b:74:ee:da:7b:b6:cc:46:3e:b8:3c:59:0d:9f: b8:f0:6b:9d:e3:37:5e:40:55:e1:b3:69:d1:ec:11:3b:5d:6b: 32:8b:77:22:e6:47:9c:c9:84:26:f3:d8:86:f7:e0:81:78:56: 96:57:c9:1e:47:99:47:e3:db:7d:2d:05:f3:62:88:ed:ad:e0: b4:72:34:54:e7:97:11:f8:d5:51:bb:5e:6b:d9:d5:fc:d4:62: 68:87:e5:12:c4:a2:e5:67:f6:d0:fc:c0:cc:c0:8e:3e:6e:fb: cd:b1:af:b7:bc:2e:58:30:4d:59:41:d8:3a:87:06:ad:07:ad: 9c:5c:58:46:4b:47:ec:a2:80:3c:64:ec:21:b2:05:1a:f8:07: 13:88:ed:6a:ae:de:26:61:03:fe:2d:27:50:38:34:64:90:af: 13:8d:1d:76:1f:39:b0:35:1f:f8:ba:c4:46:e8:99:b6:d9:8e: 13:29:58:a7:4b:ae:aa:e3:8f:52:95:d2:63:d9:bc:64:ec:73: 21:27:5c:0e:0a:53:24:c1:a0:1b:bc:f3:2a:cb:1c:1c:4e:60: 74:14:e7:68:9d:7e:48:e1:78:55:74:4f:ea:54:f1:48:c7:33: 60:22:1d:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlU9YLnAE9I5970AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZDk0OTMxNjYtYzg0My00YjA1LThkOTEtNzhlMTU2NWZkZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhyMUHV8xkrE47fq5+tSvb0fXn5U2eisFQJh wKKq70TmIdTxxMVcqLpGnG+UW7FbnbPmy13pMPTar7O4gWbeJhOiNANgdb9uSorP 4JhMqVZPwCqRrK0+f/CXCDwB/iiFd8WGXmp9nY+Q7JikfVr01thaP+OK+Of7vHJQ 5QWQQkuz01Hcb5DcxfB5t0lKH0AHr6PEbDsxq7xAWl4zm4ldRm9F22+5Wfzy1i7u 4a2o2xjrUAtowRPImACz2FOWD2ShAJl2PKY3eTclNtQj+Kq84XozGW+q7vaqqMK6 WZ/T1uVj9JYBwUqg3NRo+0VdQ+vnCnfb3/lyGJCnCNFFBn6kZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiBwvf52qjWaHWb4Vk/k6zp+FEbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2VhNDcxZDQtMmU2Zi0z MzcxLWEwYjktNzdiMGJhMDM4NzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwB1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhP44BM36B1RUpLSvHrdxD/Sw0+uPBrdO7ae7bMRj64PFkNn7jwa53j N15AVeGzadHsETtdazKLdyLmR5zJhCbz2Ib34IF4VpZXyR5HmUfj230tBfNiiO2t 4LRyNFTnlxH41VG7XmvZ1fzUYmiH5RLEouVn9tD8wMzAjj5u+82xr7e8LlgwTVlB 2DqHBq0HrZxcWEZLR+yigDxk7CGyBRr4BxOI7Wqu3iZhA/4tJ1A4NGSQrxONHXYf ObA1H/i6xEbombbZjhMpWKdLrqrjj1KV0mPZvGTscyEnXA4KUyTBoBu88yrLHBxO YHQU52idfkjheFV0T+pU8UjHM2AiHSg= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:31 2026 by rpki-client