$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa File: 848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa (raw, json) Hash identifier: yQQJU0CZP3a0PJEJg2twTryuyXRyoOJ2H8fMXAvyVhg= Subject key identifier: 86:FC:59:5D:B7:7D:1A:A7:BA:A1:65:B1:26:71:96:E3:5C:CF:46:BC Certificate issuer: /CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Certificate serial: 010D0C9F4328584DAAE0347040592213448B7780 Authority key identifier: 68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 398774 IP address blocks: 209.250.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:34:70:40:59:22:13:44:8b:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1ffc192-d4a8-4189-bab2-ce7a37ea683c Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=f03a917b-b6c6-443e-a050-07dba5c17e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:1a:6d:83:67:98:3d:12:6b:4e:ce:c0:12: 1a:79:b5:84:d0:87:61:d5:f1:d6:09:f5:91:5e:b0: 60:10:24:2a:35:e8:7d:51:ee:ed:f6:40:ef:02:26: 09:c4:92:5a:dd:bc:e0:29:b1:ca:5b:a1:ce:de:9e: a9:cd:c8:07:68:7d:bd:73:c9:fb:8d:1a:f9:f5:90: 74:3f:ab:57:f4:04:46:b0:ad:16:68:20:ac:70:bc: c7:91:84:fc:4a:6d:4f:7c:38:56:cd:92:b7:e0:41: 5d:5a:80:21:31:d7:b5:68:e7:b0:39:7c:d4:d2:ef: fc:5d:a1:02:68:ab:4b:74:87:85:a0:20:49:33:d5: 9f:be:da:18:38:bb:1b:18:b4:c9:86:4f:c7:81:2c: 98:52:5e:a7:f9:dc:cc:8b:e5:c9:17:89:65:39:0d: 06:e6:f6:41:d8:40:54:6f:a6:2e:f0:df:c1:48:79: 8a:7e:f8:3e:67:a8:10:a3:20:f9:2c:1e:2d:69:d5: 02:70:73:bc:08:7e:f7:f8:79:d2:4e:e6:2f:fb:32: 41:7b:55:4f:6c:c9:2f:1e:68:18:30:bc:46:ea:ad: e5:8b:96:cc:47:51:23:ba:00:f2:2d:d3:2a:96:ff: af:27:a8:10:b5:37:a8:7b:47:bd:29:dc:ea:dc:e3: b6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FC:59:5D:B7:7D:1A:A7:BA:A1:65:B1:26:71:96:E3:5C:CF:46:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/848bbd29-5bc4-39b5-be9c-b90b75f8a7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.crl X509v3 Authority Key Identifier: keyid:68:BB:AC:66:A8:07:8B:85:E6:ED:9C:01:3D:C2:35:BD:D2:A7:AB:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a1ffc192-d4a8-4189-bab2-ce7a37ea683c.cer sbgp-ipAddrBlock: critical IPv4: 209.250.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d4:3a:81:4b:97:4b:23:c4:92:b5:27:0e:05:e9:1c:01:1b: 66:74:42:a5:8f:5e:fe:82:71:25:7c:f0:f6:1a:26:f5:fd:63: 43:7a:23:38:ee:2e:6f:11:81:6b:54:18:1b:5a:55:9a:3b:d0: 4c:dc:cd:99:e4:d1:3d:3b:52:80:5d:5f:ba:6f:59:f7:df:7e: 1a:9d:6e:10:66:f5:fc:65:94:3c:9a:fe:56:a0:b1:81:24:16: c7:d5:48:5b:2f:f3:cd:bf:59:40:5e:06:3c:18:32:fc:54:88: d8:0a:00:dd:39:22:ce:1e:3d:c4:ef:3a:4c:a7:6d:ec:2b:f8: f3:a4:02:09:51:70:73:1c:f9:ec:65:75:10:f5:f1:6b:06:71: c5:c9:f3:e3:8a:e1:a0:03:77:60:76:87:91:d2:5d:41:ea:85: 35:fc:79:05:5b:20:6c:08:7c:00:e5:75:47:f5:e1:05:e2:f2: 94:17:f3:7d:8e:5f:a4:4d:b2:a8:8b:d7:de:45:1d:c8:7a:42: e7:3a:85:c7:e7:dc:3c:98:80:c1:25:33:f4:fd:b9:1a:9b:9d: 59:5a:d2:15:dd:bb:92:78:69:92:46:c2:81:a2:18:5a:ea:27: c4:da:2e:73:62:be:63:15:b8:e2:dc:43:b9:49:19:ae:f2:84: 3d:a0:de:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4DRwQFkiE0SLd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFmZmMxOTItZDRhOC00MTg5LWJhYjItY2U3YTM3ZWE2 ODNjMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZjAzYTkxN2ItYjZjNi00NDNlLWEwNTAtMDdkYmE1YzE3ZTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlAabYNnmD0Sa07OwBIaebWE0Idh1fHWCfWR XrBgECQqNeh9Ue7t9kDvAiYJxJJa3bzgKbHKW6HO3p6pzcgHaH29c8n7jRr59ZB0 P6tX9ARGsK0WaCCscLzHkYT8Sm1PfDhWzZK34EFdWoAhMde1aOewOXzU0u/8XaEC aKtLdIeFoCBJM9WfvtoYOLsbGLTJhk/HgSyYUl6n+dzMi+XJF4llOQ0G5vZB2EBU b6Yu8N/BSHmKfvg+Z6gQoyD5LB4tadUCcHO8CH73+HnSTuYv+zJBe1VPbMkvHmgY MLxG6q3li5bMR1EjugDyLdMqlv+vJ6gQtTeoe0e9Kdzq3OO2DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb8WV23fRqnuqFlsSZxluNcz0a8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZm YzE5Mi1kNGE4LTQxODktYmFiMi1jZTdhMzdlYTY4M2MvODQ4YmJkMjktNWJjNC0z OWI1LWJlOWMtYjkwYjc1ZjhhN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTFmZmMxOTItZDRhOC00MTg5LWJh YjItY2U3YTM3ZWE2ODNjL2ExZmZjMTkyLWQ0YTgtNDE4OS1iYWIyLWNlN2EzN2Vh NjgzYy5jcmwwHwYDVR0jBBgwFoAUaLusZqgHi4Xm7ZwBPcI1vdKnq/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMWZmYzE5Mi1kNGE4LTQxODktYmFiMi1jZTdh MzdlYTY4M2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0frAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3UOoFLl0sjxJK1Jw4F6RwBG2Z0QqWPXv6CcSV88PYaJvX9Y0N6Izju Lm8RgWtUGBtaVZo70EzczZnk0T07UoBdX7pvWffffhqdbhBm9fxllDya/lagsYEk FsfVSFsv882/WUBeBjwYMvxUiNgKAN05Is4ePcTvOkynbewr+POkAglRcHMc+exl dRD18WsGccXJ8+OK4aADd2B2h5HSXUHqhTX8eQVbIGwIfADldUf14QXi8pQX832O X6RNsqiL195FHch6Quc6hcfn3DyYgMElM/T9uRqbnVla0hXdu5J4aZJGwoGiGFrq J8TaLnNivmMVuOLcQ7lJGa7yhD2g3to= -----END CERTIFICATE-----Generated at Wed May 13 05:53:59 2026 by rpki-client