$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa File: 228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa (raw, json) Hash identifier: JTC3yQCcxBjY7IM2EprMD5SiGG6oAqE0FNfabyJD0Pc= Subject key identifier: 78:D8:1A:EC:C2:1D:CA:F6:4F:3C:C7:77:E2:F3:65:1F:86:F9:E5:59 Certificate issuer: /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Certificate serial: 010D0C9F4328584DA6B02154CAE87685A4B28880 Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 25629 IP address blocks: 192.161.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:21:54:ca:e8:76:85:a4:b2:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=74ec5448-b3f6-4452-8c80-255a73108891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d6:4f:38:93:ea:b1:3b:f2:03:0a:ef:f2:2e: 97:2d:d4:f6:8c:fd:c9:e8:68:8b:33:e9:86:a2:68: b8:f8:13:48:a8:00:e3:ba:57:9a:53:5d:1e:70:10: 7a:a7:96:35:8d:41:74:fa:b1:8c:ee:2c:58:72:29: ea:9b:e4:bb:25:74:d0:aa:2b:5b:4a:91:c0:b7:b1: a0:1f:52:05:6a:c0:7a:0d:3d:8a:54:26:57:bf:f7: 6f:34:db:29:9a:0e:63:8e:cf:26:60:12:9c:a6:ba: 65:6b:d9:48:b9:3f:7b:e5:31:1b:3d:37:af:77:50: 68:bb:13:7c:b1:e2:dd:07:ab:5f:ef:f3:72:e7:63: 25:13:d0:d9:12:21:b0:f7:9f:fd:41:42:f9:68:ef: d3:ec:7f:d8:05:8d:b0:32:1c:2b:7e:2b:bb:93:f3: b5:fc:84:ea:98:de:61:3c:c7:01:d2:10:c9:5e:3a: 8e:07:61:bd:f6:6d:d3:f0:9e:fd:49:fe:09:c6:f5: 75:19:01:30:cc:ed:82:bd:d4:6f:bc:2b:c5:12:4c: 48:c0:08:db:ba:a2:7b:a4:9f:07:c6:1c:e7:60:ff: bd:55:de:dc:8a:2b:af:cf:d5:2a:3f:6c:26:06:38: bc:5a:1e:fc:19:84:c1:22:f6:49:12:0f:03:b0:8e: f9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D8:1A:EC:C2:1D:CA:F6:4F:3C:C7:77:E2:F3:65:1F:86:F9:E5:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/228d9cdf-9e05-3f9c-a866-95d4f64db4ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl X509v3 Authority Key Identifier: keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer sbgp-ipAddrBlock: critical IPv4: 192.161.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8a:31:5e:29:22:9e:c9:9a:d8:f3:b3:e6:a7:b5:6e:09:d8: c2:1f:ca:41:c4:2c:27:b0:96:0f:1a:b2:0e:ae:a5:11:b0:c4: 2a:2a:86:c8:d3:f2:98:66:1b:51:20:a1:20:ed:e1:a8:51:2c: 33:e3:d7:f5:14:6e:37:f8:cc:ac:de:69:b3:31:49:60:90:95: 21:fe:f8:6b:4d:35:d1:20:dc:9c:07:ea:41:df:c2:88:ab:9e: 10:2f:46:53:bf:64:50:20:df:83:5d:3e:27:ca:ce:29:54:8b: 14:65:4b:f1:ca:b0:60:ec:eb:c4:d6:fd:08:fd:54:78:86:9e: 15:38:f0:b9:a1:15:bf:2f:a2:cd:ed:f4:5f:e9:38:87:20:2b: 5b:c8:37:85:57:97:80:ab:c1:9d:d2:3f:a7:b3:80:b5:71:ca: ad:26:62:02:51:91:f9:6e:fe:7f:27:e1:5a:c9:4c:56:aa:e0: 0e:b1:a7:f9:4b:81:ea:9a:fe:54:df:fc:1c:31:0c:8f:46:47: af:19:d3:d6:ff:3e:88:97:7c:e3:4b:bc:d7:ab:d8:ae:84:a1: 28:88:c0:f3:ea:1e:9c:2e:f1:64:12:a2:41:10:bb:53:3a:cd: 24:64:7f:1c:d3:c9:0a:50:62:af:48:ec:17:7c:d5:db:bd:d0: 52:64:76:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msCFUyuh2haSyiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz MTA5MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk NzRlYzU0NDgtYjNmNi00NDUyLThjODAtMjU1YTczMTA4ODkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNZPOJPqsTvyAwrv8i6XLdT2jP3J6GiLM+mG omi4+BNIqADjuleaU10ecBB6p5Y1jUF0+rGM7ixYcinqm+S7JXTQqitbSpHAt7Gg H1IFasB6DT2KVCZXv/dvNNspmg5jjs8mYBKcprpla9lIuT975TEbPTevd1BouxN8 seLdB6tf7/Ny52MlE9DZEiGw95/9QUL5aO/T7H/YBY2wMhwrfiu7k/O1/ITqmN5h PMcB0hDJXjqOB2G99m3T8J79Sf4JxvV1GQEwzO2CvdRvvCvFEkxIwAjbuqJ7pJ8H xhznYP+9Vd7ciiuvz9UqP2wmBji8Wh78GYTBIvZJEg8DsI756wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjYGuzCHcr2TzzHd+LzZR+G+eVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvMjI4ZDljZGYtOWUwNS0z ZjljLWE4NjYtOTVkNGY2NGRiNGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3 MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwKFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGaKMV4pIp7Jmtjzs+antW4J2MIfykHELCewlg8asg6upRGwxCoqhsjT 8phmG1EgoSDt4ahRLDPj1/UUbjf4zKzeabMxSWCQlSH++GtNNdEg3JwH6kHfwoir nhAvRlO/ZFAg34NdPifKzilUixRlS/HKsGDs68TW/Qj9VHiGnhU48LmhFb8vos3t 9F/pOIcgK1vIN4VXl4CrwZ3SP6ezgLVxyq0mYgJRkflu/n8n4VrJTFaq4A6xp/lL geqa/lTf/BwxDI9GR68Z09b/PoiXfONLvNer2K6EoSiIwPPqHpwu8WQSokEQu1M6 zSRkfxzTyQpQYq9I7Bd81du90FJkdso= -----END CERTIFICATE-----Generated at Wed May 13 11:02:52 2026 by rpki-client