$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c01946b8-c888-36e7-9154-c7906b6fcad2.roa File: c01946b8-c888-36e7-9154-c7906b6fcad2.roa (raw, json) Hash identifier: 4ZAsxZwjgH3xxJErndubTP4AJdtXQ3t0PR7F6NjhjVI= Subject key identifier: AF:89:66:FA:90:05:2B:34:48:8C:6D:AF:64:9A:2F:12:1C:6B:4F:0F Certificate issuer: /CN=9de5b47f-bd49-4614-b658-9980cfd17769 Certificate serial: 010D0C9F4328584D343A1E57293C29EFDB59E200 Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c01946b8-c888-36e7-9154-c7906b6fcad2.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 19637 IP address blocks: 192.19.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1e:57:29:3c:29:ef:db:59:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=7df085ff-6e9e-4c7f-86e9-8fb7177a3271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c6:73:4d:c8:76:ca:88:c0:00:c4:53:ee:b9: b2:3d:a0:91:1c:3c:f2:f3:0d:cf:80:1d:a3:b9:e6: 70:0e:d1:c9:4c:a7:25:f1:f2:5c:af:32:ab:fe:88: 83:b4:24:e9:d6:c2:ef:bb:25:31:41:fe:9a:3a:14: cb:3b:24:61:6c:06:bc:b2:e6:02:56:52:f7:ab:a3: 04:17:38:c0:83:0b:cb:77:c7:5c:f1:c6:a8:e4:33: 84:3d:c3:87:f1:2f:16:af:4a:cb:9e:9d:60:4e:a0: 5b:29:64:67:2c:16:40:64:20:14:6d:a0:08:7f:c5: 31:f7:0f:d4:7f:4d:ad:8f:39:c9:84:47:7b:07:1d: ec:84:05:c0:93:61:00:2f:ea:78:79:c1:e7:da:ff: ae:fb:07:33:f4:15:98:bc:02:d5:f4:73:77:fd:a6: 6a:67:db:57:f2:d2:e2:27:31:66:80:af:e4:9f:18: 67:a2:8a:14:82:d5:c0:55:cb:3f:a7:d3:ad:47:b8: 08:dd:7d:93:58:36:b0:ba:19:d0:42:89:6b:db:c0: 62:29:f2:bd:8b:af:ce:03:05:79:af:eb:75:d6:ce: 1f:37:68:f2:95:c0:5c:ca:6a:15:32:85:94:d3:31: f1:b4:06:c4:ac:cc:c3:18:56:56:69:97:1b:bd:e8: cc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:89:66:FA:90:05:2B:34:48:8C:6D:AF:64:9A:2F:12:1C:6B:4F:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/c01946b8-c888-36e7-9154-c7906b6fcad2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl X509v3 Authority Key Identifier: keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer sbgp-ipAddrBlock: critical IPv4: 192.19.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:79:c2:3e:1a:94:85:87:70:2c:38:c6:6a:8f:1e:0b:63:a4: 77:16:14:78:50:e9:59:7a:98:29:f3:00:e3:f4:b2:1b:e5:b6: de:d3:02:7c:98:9a:9c:e6:43:59:a5:ee:d2:ff:6b:9f:29:c5: 06:ff:9e:a7:cb:85:2e:f1:01:a4:af:81:dd:62:59:ce:ef:33: c9:d1:49:ad:23:03:e1:5e:86:e6:0f:89:a9:95:ff:84:02:a0: ce:f3:05:79:c3:15:68:a3:e6:85:ff:c3:2d:83:d6:e9:ed:29: 3b:e8:a0:f4:0d:69:69:c8:b3:f1:d0:db:9c:1c:92:b6:16:50: b1:93:71:8a:40:b1:00:77:b4:82:65:36:eb:47:a3:32:a0:b0: 76:55:5d:6b:9d:b9:1a:89:58:ad:44:7e:a9:8a:bf:05:92:8f: 0b:bc:e5:c9:9e:7f:ce:64:53:53:01:c2:4d:5d:bf:cb:89:57: 09:4b:1d:54:3b:ae:bf:b7:33:d9:d6:46:f9:19:60:dc:19:10: 6c:8d:65:70:24:33:c5:2d:70:50:b9:d0:38:ef:7c:28:e6:71: 78:19:ed:92:2d:a8:3d:3e:a0:d0:28:98:3c:9d:af:7d:fa:ea: 08:c9:df:4b:08:23:38:22:d3:05:82:56:8e:93:a4:c7:8a:01: 2f:72:f4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Oh5XKTwp79tZ4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlNWI0N2YtYmQ0OS00NjE0LWI2NTgtOTk4MGNmZDE3 NzY5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk N2RmMDg1ZmYtNmU5ZS00YzdmLTg2ZTktOGZiNzE3N2EzMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsZzTch2yojAAMRT7rmyPaCRHDzy8w3PgB2j ueZwDtHJTKcl8fJcrzKr/oiDtCTp1sLvuyUxQf6aOhTLOyRhbAa8suYCVlL3q6ME FzjAgwvLd8dc8cao5DOEPcOH8S8Wr0rLnp1gTqBbKWRnLBZAZCAUbaAIf8Ux9w/U f02tjznJhEd7Bx3shAXAk2EAL+p4ecHn2v+u+wcz9BWYvALV9HN3/aZqZ9tX8tLi JzFmgK/knxhnoooUgtXAVcs/p9OtR7gI3X2TWDawuhnQQolr28BiKfK9i6/OAwV5 r+t11s4fN2jylcBcymoVMoWU0zHxtAbErMzDGFZWaZcbvejMgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+JZvqQBSs0SIxtr2SaLxIca08PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1 YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgwY2ZkMTc3NjkvYzAxOTQ2YjgtYzg4OC0z NmU3LTkxNTQtYzc5MDZiNmZjYWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWRlNWI0N2YtYmQ0OS00NjE0LWI2 NTgtOTk4MGNmZDE3NzY5LzlkZTViNDdmLWJkNDktNDYxNC1iNjU4LTk5ODBjZmQx Nzc2OS5jcmwwHwYDVR0jBBgwFoAUjxiLGO21eSNV+7m/BlYK0+IBpDcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85ZGU1YjQ3Zi1iZDQ5LTQ2MTQtYjY1OC05OTgw Y2ZkMTc3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwBOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB95wj4alIWHcCw4xmqPHgtjpHcWFHhQ6Vl6mCnzAOP0shvltt7TAnyY mpzmQ1ml7tL/a58pxQb/nqfLhS7xAaSvgd1iWc7vM8nRSa0jA+FehuYPiamV/4QC oM7zBXnDFWij5oX/wy2D1untKTvooPQNaWnIs/HQ25wckrYWULGTcYpAsQB3tIJl NutHozKgsHZVXWuduRqJWK1EfqmKvwWSjwu85cmef85kU1MBwk1dv8uJVwlLHVQ7 rr+3M9nWRvkZYNwZEGyNZXAkM8UtcFC50DjvfCjmcXgZ7ZItqD0+oNAomDydr336 6gjJ30sIIzgi0wWCVo6TpMeKAS9y9Lk= -----END CERTIFICATE-----Generated at Sat Mar 21 15:23:42 2026 by rpki-client