$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/19318cc5-4e5e-3977-b788-af45e7c8c028.roa File: 19318cc5-4e5e-3977-b788-af45e7c8c028.roa (raw, json) Hash identifier: hEdPons/kd8BBjwJbpSupZkQoM/hgJFn9v5eVx0XU5s= Subject key identifier: 33:28:24:42:B5:F8:BA:F5:80:0E:6D:EA:C7:7F:6D:D3:90:7C:3B:57 Certificate issuer: /CN=884b7d34-d438-4755-8e96-f046e8b77dab Certificate serial: 010D0C9F4328584E4D0E11379014EF6D61C49800 Authority key identifier: B7:F5:36:39:6C:D6:8A:75:38:CC:19:B4:AB:AE:38:8D:80:30:86:FD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/19318cc5-4e5e-3977-b788-af45e7c8c028.roa Signing time: Fri 26 Jun 2026 15:14:06 +0000 ROA not before: Fri 26 Jun 2026 15:14:06 +0000 ROA not after: Thu 24 Sep 2026 15:14:06 +0000 asID: 399220 IP address blocks: 192.230.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:0e:11:37:90:14:ef:6d:61:c4:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884b7d34-d438-4755-8e96-f046e8b77dab Validity Not Before: Jun 26 15:14:06 2026 GMT Not After : Sep 24 15:14:06 2026 GMT Subject: CN=bd996e46-3ce7-44ed-aed5-f322d8c1bc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:dc:0a:6a:9e:46:bc:cd:4f:e5:57:01:cc:8f: 9c:be:68:a7:ff:ff:d3:b2:29:f1:03:f4:d0:09:83: c5:16:ec:aa:7f:00:23:8c:2a:a5:2d:28:53:cd:c9: 8c:fb:74:a5:34:6f:65:98:5f:df:5d:d4:eb:57:ca: 49:ce:b6:5f:05:eb:2c:cd:01:16:2c:b3:29:78:43: bd:06:ab:59:e4:2a:65:2f:79:cf:ff:68:4c:07:ea: e7:12:90:e2:f6:84:56:36:fc:60:f1:6d:5f:5c:15: 7d:f8:d7:6a:60:8a:be:6e:0d:7d:d4:27:c5:b0:a5: f4:11:71:16:f5:f0:45:9a:d5:89:01:bc:25:cd:23: 40:96:d6:75:dd:ba:ae:2f:01:ee:f3:50:89:19:12: f5:9d:93:f5:30:87:a2:89:b1:ff:37:1d:1e:11:54: 9c:72:fc:e8:e8:7f:8e:83:ab:07:e2:aa:7b:b2:bc: 4c:95:25:51:95:e7:c5:42:1f:cf:c1:c4:ad:a1:fc: 08:50:82:a9:a0:c2:73:12:d6:93:bd:f4:eb:ca:b6: 12:5a:45:47:b3:98:ec:80:48:95:c6:c0:85:56:67: 34:7c:07:f1:40:43:21:d9:06:65:00:08:e4:0f:2c: f9:34:cc:6a:cd:81:f0:cc:05:77:34:33:7c:10:c2: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:24:42:B5:F8:BA:F5:80:0E:6D:EA:C7:7F:6D:D3:90:7C:3B:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/19318cc5-4e5e-3977-b788-af45e7c8c028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab/884b7d34-d438-4755-8e96-f046e8b77dab.crl X509v3 Authority Key Identifier: keyid:B7:F5:36:39:6C:D6:8A:75:38:CC:19:B4:AB:AE:38:8D:80:30:86:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/884b7d34-d438-4755-8e96-f046e8b77dab.cer sbgp-ipAddrBlock: critical IPv4: 192.230.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:6d:09:7f:18:de:a3:b2:c3:49:b9:11:1a:87:6e:8d:21:cc: df:2d:17:69:f2:f4:ae:64:9f:99:ac:b1:3e:23:be:43:70:21: 90:f8:e9:a7:08:51:2e:8e:b0:37:ba:fb:e3:c9:00:06:63:5a: 4a:33:d9:90:07:b7:de:72:eb:46:48:e9:a0:42:1f:38:36:5e: 97:7e:db:1a:8c:93:c7:b8:25:3b:d6:d1:2d:93:47:9b:b4:51: 00:f5:9c:e5:05:5d:9d:f4:71:5e:96:79:fb:f8:71:12:28:11: be:cf:2e:b3:4b:b0:e3:82:50:05:cb:a0:bf:6a:56:47:b5:16: 95:85:0f:d8:9e:75:a5:8d:f3:31:9a:58:a7:cd:31:95:be:09: 87:a5:bb:13:35:32:8e:f3:0d:09:de:09:d5:37:38:14:e2:17: a2:9e:83:c6:87:5d:76:10:69:3e:5c:67:28:d9:4b:01:8a:23: f8:c2:fc:72:8c:41:9f:6a:89:8b:6a:ce:af:31:ce:e6:e1:74: b8:d5:5c:c0:2a:80:51:80:6d:6f:66:b4:48:ff:95:40:9e:7c: f9:e3:e1:33:80:e9:0a:ea:d4:c5:1b:2c:55:78:b9:41:43:f3: 5e:0e:50:39:e5:8b:5f:63:ae:38:c1:41:79:c8:32:56:67:ec: e0:69:76:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NDhE3kBTvbWHEmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0YjdkMzQtZDQzOC00NzU1LThlOTYtZjA0NmU4Yjc3 ZGFiMB4XDTI2MDYyNjE1MTQwNloXDTI2MDkyNDE1MTQwNlowLzEtMCsGA1UEAxMk YmQ5OTZlNDYtM2NlNy00NGVkLWFlZDUtZjMyMmQ4YzFiYzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktwKap5GvM1P5VcBzI+cvmin///TsinxA/TQ CYPFFuyqfwAjjCqlLShTzcmM+3SlNG9lmF/fXdTrV8pJzrZfBesszQEWLLMpeEO9 BqtZ5CplL3nP/2hMB+rnEpDi9oRWNvxg8W1fXBV9+NdqYIq+bg191CfFsKX0EXEW 9fBFmtWJAbwlzSNAltZ13bquLwHu81CJGRL1nZP1MIeiibH/Nx0eEVSccvzo6H+O g6sH4qp7srxMlSVRlefFQh/PwcStofwIUIKpoMJzEtaTvfTryrYSWkVHs5jsgEiV xsCFVmc0fAfxQEMh2QZlAAjkDyz5NMxqzYHwzAV3NDN8EMIW1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMoJEK1+Lr1gA5t6sd/bdOQfDtXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ODRi N2QzNC1kNDM4LTQ3NTUtOGU5Ni1mMDQ2ZThiNzdkYWIvMTkzMThjYzUtNGU1ZS0z OTc3LWI3ODgtYWY0NWU3YzhjMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODg0YjdkMzQtZDQzOC00NzU1LThl OTYtZjA0NmU4Yjc3ZGFiLzg4NGI3ZDM0LWQ0MzgtNDc1NS04ZTk2LWYwNDZlOGI3 N2RhYi5jcmwwHwYDVR0jBBgwFoAUt/U2OWzWinU4zBm0q644jYAwhv0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ODRiN2QzNC1kNDM4LTQ3NTUtOGU5Ni1mMDQ2 ZThiNzdkYWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwOaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRtCX8Y3qOyw0m5ERqHbo0hzN8tF2ny9K5kn5mssT4jvkNwIZD46acI US6OsDe6++PJAAZjWkoz2ZAHt95y60ZI6aBCHzg2Xpd+2xqMk8e4JTvW0S2TR5u0 UQD1nOUFXZ30cV6Wefv4cRIoEb7PLrNLsOOCUAXLoL9qVke1FpWFD9iedaWN8zGa WKfNMZW+CYeluxM1Mo7zDQneCdU3OBTiF6Keg8aHXXYQaT5cZyjZSwGKI/jC/HKM QZ9qiYtqzq8xzubhdLjVXMAqgFGAbW9mtEj/lUCefPnj4TOA6Qrq1MUbLFV4uUFD 814OUDnli19jrjjBQXnIMlZn7OBpdrE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:16:51 2026 by rpki-client