$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/00191e89-7b8a-39b6-b75c-fe5950e68aa9.roa File: 00191e89-7b8a-39b6-b75c-fe5950e68aa9.roa (raw, json) Hash identifier: lULe7S0A1Ys0ZJg3U8vmS3vJJ+YjYO4LyiBa8tQqAD4= Subject key identifier: 14:82:2A:8C:7A:5A:9E:4C:92:F1:71:90:80:4D:9A:C0:C2:36:4D:D9 Certificate issuer: /CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Certificate serial: 010D0C9F4328584D91C00419C9EB549A4860A080 Authority key identifier: D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/00191e89-7b8a-39b6-b75c-fe5950e68aa9.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 394043 IP address blocks: 192.169.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:04:19:c9:eb:54:9a:48:60:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccfe266-0609-49cd-b2ba-671a64efdc7c Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=8cf8e43c-8478-49d6-9cf0-4c90cee17742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:97:b4:93:ce:e7:d8:11:5e:fb:2f:b1:d0:4a: 1f:0e:1c:54:66:b5:f4:1b:34:23:74:4a:b2:b8:bf: f0:58:c1:98:ed:57:1d:0b:81:41:48:9f:b8:99:df: 4d:70:06:01:a1:96:78:f2:a8:fe:f0:b9:69:9e:69: 47:c6:60:69:0e:47:e7:ac:b4:7f:a3:af:a5:70:60: 9f:d1:38:7e:d9:bd:b4:a4:32:90:60:a3:8f:3f:10: 18:6d:17:94:35:b5:e0:eb:08:72:3f:1f:95:95:10: 19:65:fc:e2:c7:1b:69:5d:4e:36:27:0c:41:44:0e: 6d:4e:fe:8d:37:3f:6a:6a:83:10:f2:51:80:34:3f: 56:43:1c:49:20:0d:7f:26:f8:e3:bc:f4:fb:ef:f7: 1e:24:8d:bf:2d:23:79:15:d1:8d:d1:73:47:76:ec: 28:16:6b:54:bf:54:1f:29:21:e3:c1:ec:09:3e:0f: d0:4a:a7:fc:f9:95:3a:4f:f5:84:2c:88:8b:d3:cc: db:4a:9e:04:34:49:c9:0d:38:af:2e:26:24:72:f4: d6:04:0b:cd:8f:c8:70:cd:c0:10:88:b2:5b:95:7b: b2:dc:9b:65:d1:89:43:0b:86:04:36:5e:79:a9:b6: bb:1e:2a:78:b2:0e:76:a3:b6:0e:f0:b1:88:6d:9c: fd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:82:2A:8C:7A:5A:9E:4C:92:F1:71:90:80:4D:9A:C0:C2:36:4D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/00191e89-7b8a-39b6-b75c-fe5950e68aa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c/1ccfe266-0609-49cd-b2ba-671a64efdc7c.crl X509v3 Authority Key Identifier: keyid:D2:F9:69:B3:D5:80:E9:D5:A6:9F:39:9B:27:89:E8:E2:73:69:11:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ccfe266-0609-49cd-b2ba-671a64efdc7c.cer sbgp-ipAddrBlock: critical IPv4: 192.169.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fb:29:49:fa:d6:ed:df:4c:d0:df:62:36:b7:12:62:e8:9c: 2c:3d:44:83:59:ca:6d:01:ae:3a:bc:02:0c:04:4d:19:d7:be: d3:c3:c3:0d:07:9f:f1:45:12:e7:70:dc:af:2d:da:75:3c:04: fc:63:ad:a9:8b:f1:c9:80:ef:17:3b:21:1b:e9:2c:ed:98:69: e6:34:71:c7:f8:81:dd:2b:f7:a1:29:74:54:72:f2:51:d2:20: 41:b6:5a:08:0a:1a:31:03:83:70:2e:05:46:89:44:4a:19:c8: f6:6f:6f:4f:73:70:b4:cb:70:67:94:94:0a:b8:8c:9e:44:f1: 69:c1:cf:d8:ad:44:b0:85:c5:2e:25:a4:e7:89:42:bf:58:54: 19:ee:a7:1b:1d:cf:7a:40:91:e8:17:85:ab:9e:7f:f6:b2:9a: 46:95:f7:e3:91:47:5a:41:72:ff:6f:78:ba:07:ed:ba:16:91: f7:0f:67:04:2b:a4:d8:d3:b5:eb:71:bd:ff:b6:48:c0:e2:da: 5c:42:dc:15:be:b3:74:43:4a:ce:e8:3f:ce:1a:98:19:10:99: 66:d1:51:6a:49:d4:58:cd:1a:d8:e6:71:12:46:30:25:d7:2f: d8:9e:d3:b9:d2:de:85:03:d0:21:de:19:38:f3:c3:84:a3:d4: 77:4f:c8:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAQZyetUmkhgoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZmUyNjYtMDYwOS00OWNkLWIyYmEtNjcxYTY0ZWZk YzdjMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk OGNmOGU0M2MtODQ3OC00OWQ2LTljZjAtNGM5MGNlZTE3NzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupe0k87n2BFe+y+x0EofDhxUZrX0GzQjdEqy uL/wWMGY7VcdC4FBSJ+4md9NcAYBoZZ48qj+8LlpnmlHxmBpDkfnrLR/o6+lcGCf 0Th+2b20pDKQYKOPPxAYbReUNbXg6whyPx+VlRAZZfzixxtpXU42JwxBRA5tTv6N Nz9qaoMQ8lGAND9WQxxJIA1/JvjjvPT77/ceJI2/LSN5FdGN0XNHduwoFmtUv1Qf KSHjwewJPg/QSqf8+ZU6T/WELIiL08zbSp4ENEnJDTivLiYkcvTWBAvNj8hwzcAQ iLJblXuy3Jtl0YlDC4YENl55qba7Hip4sg52o7YO8LGIbZz9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSCKox6Wp5MkvFxkIBNmsDCNk3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xY2Nm ZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFhNjRlZmRjN2MvMDAxOTFlODktN2I4YS0z OWI2LWI3NWMtZmU1OTUwZTY4YWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWNjZmUyNjYtMDYwOS00OWNkLWIy YmEtNjcxYTY0ZWZkYzdjLzFjY2ZlMjY2LTA2MDktNDljZC1iMmJhLTY3MWE2NGVm ZGM3Yy5jcmwwHwYDVR0jBBgwFoAU0vlps9WA6dWmnzmbJ4no4nNpERkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xY2NmZTI2Ni0wNjA5LTQ5Y2QtYjJiYS02NzFh NjRlZmRjN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKkFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj7KUn61u3fTNDfYja3EmLonCw9RINZym0Brjq8AgwETRnXvtPDww0H n/FFEudw3K8t2nU8BPxjramL8cmA7xc7IRvpLO2YaeY0ccf4gd0r96EpdFRy8lHS IEG2WggKGjEDg3AuBUaJREoZyPZvb09zcLTLcGeUlAq4jJ5E8WnBz9itRLCFxS4l pOeJQr9YVBnupxsdz3pAkegXhauef/aymkaV9+ORR1pBcv9veLoH7boWkfcPZwQr pNjTtetxvf+2SMDi2lxC3BW+s3RDSs7oP84amBkQmWbRUWpJ1FjNGtjmcRJGMCXX L9ie07nS3oUD0CHeGTjzw4Sj1HdPyF0= -----END CERTIFICATE-----Generated at Wed May 13 07:26:13 2026 by rpki-client