$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa File: d12a4c75-b429-30dd-b69a-b38ea72126c0.roa (raw, json) Hash identifier: f+FHiHHHYqR7BV8uGqBgciYkhKo881ZVW9s0spB2W9o= Subject key identifier: 75:52:4D:84:E6:A4:C9:34:B7:35:AE:3F:BB:7D:12:2E:E9:7C:25:73 Certificate issuer: /CN=2e689c55-8453-486f-8b88-f433fba67f55 Certificate serial: 010D0C9F4328584DC83045E550FCAA51F8445C00 Authority key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa Signing time: Sun 10 May 2026 01:00:24 +0000 ROA not before: Sun 10 May 2026 01:00:24 +0000 ROA not after: Sat 08 Aug 2026 01:00:24 +0000 asID: 26216 IP address blocks: 172.96.24.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c8:30:45:e5:50:fc:aa:51:f8:44:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e689c55-8453-486f-8b88-f433fba67f55 Validity Not Before: May 10 01:00:24 2026 GMT Not After : Aug 8 01:00:24 2026 GMT Subject: CN=d14f74a2-8714-468d-9831-844a22196a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:2f:ce:fe:1d:31:a8:56:d7:3a:26:5d:d5: 8f:ca:18:43:dc:13:00:5d:4a:ea:95:68:de:54:c5: 9e:7e:49:e1:c9:b4:3c:35:3e:11:85:84:b0:e6:c2: 30:46:7b:8e:f8:eb:d4:73:8f:2d:bb:13:fb:69:03: 8d:22:6c:50:3d:84:48:3b:b9:e5:52:fc:ac:eb:82: dc:c8:95:61:d0:bd:91:71:2a:41:70:88:a1:df:04: f1:bd:02:8e:b0:25:dc:9e:c2:6d:34:6f:19:38:d4: de:2c:d1:e5:5d:29:29:0a:f4:32:f7:48:08:f4:f9: 7d:b3:14:f0:3e:1d:e7:61:4a:58:29:24:ea:65:ac: 09:c8:9c:a8:65:f7:26:7c:1e:85:e5:2b:02:1f:e1: 32:08:a6:3a:1c:0e:fd:e2:40:47:0b:03:e3:d4:4d: 5a:0c:6f:e3:33:fb:47:5e:d1:d5:3f:5b:a3:61:48: c2:e6:f6:0d:83:67:46:dd:87:6d:43:10:18:36:20: a9:af:4d:f7:47:dc:11:26:d0:5b:20:6a:54:54:a4: d1:f1:53:19:a6:ca:ba:ac:34:eb:2c:3a:79:3c:dd: be:61:12:6d:b9:c8:ee:3d:c4:78:69:eb:32:c0:c5: f8:0e:09:4e:d8:de:3a:5a:fe:57:fb:31:d6:20:1b: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:52:4D:84:E6:A4:C9:34:B7:35:AE:3F:BB:7D:12:2E:E9:7C:25:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl X509v3 Authority Key Identifier: keyid:CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer sbgp-ipAddrBlock: critical IPv4: 172.96.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:f5:3c:95:4e:05:29:e4:15:9f:18:ba:fc:8e:91:d9:99:88: 58:1d:f1:63:e5:6e:75:63:cd:66:24:74:4e:a9:c4:8d:02:b9: a3:87:d7:a6:1e:8f:8e:2e:bd:5d:b7:35:fd:2f:4d:0e:b2:79: d0:76:6d:f0:a1:49:2d:0f:37:9d:ab:ab:d5:ab:ed:1f:6a:b1: 59:7c:41:5f:68:78:bc:73:b8:8a:02:ea:3f:5f:bf:5a:a0:0c: 14:cb:ad:19:4e:ee:a0:7e:20:5a:70:11:cc:85:b9:2e:1c:4f: 71:cb:08:40:df:df:a9:b7:43:04:38:50:35:80:61:dc:cc:9c: 48:e4:fd:3a:de:7b:8d:e9:90:e6:70:82:b1:02:08:7e:13:f2: 37:fe:63:51:c3:ff:5b:4d:8e:6f:2a:30:ad:56:2d:c3:ae:54: fb:e1:be:8b:c2:2f:87:17:34:86:92:9a:d6:ce:59:40:72:ca: b6:73:27:00:9f:5d:34:3b:8a:5c:ff:4a:8f:78:98:bb:c2:9a: 5f:62:20:c7:97:1c:a1:41:f6:a4:73:2a:4e:29:6b:16:0b:14: 29:5b:07:7b:40:53:01:d3:20:31:23:5b:8b:ff:fc:4c:b6:2f: 7c:91:e3:10:74:bb:6f:4a:f3:d9:5c:db:03:c6:88:49:2a:4e: 68:b3:86:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3IMEXlUPyqUfhEXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU2ODljNTUtODQ1My00ODZmLThiODgtZjQzM2ZiYTY3 ZjU1MB4XDTI2MDUxMDAxMDAyNFoXDTI2MDgwODAxMDAyNFowLzEtMCsGA1UEAxMk ZDE0Zjc0YTItODcxNC00NjhkLTk4MzEtODQ0YTIyMTk2YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgsvzv4dMahW1zomXdWPyhhD3BMAXUrqlWje VMWefknhybQ8NT4RhYSw5sIwRnuO+OvUc48tuxP7aQONImxQPYRIO7nlUvys64Lc yJVh0L2RcSpBcIih3wTxvQKOsCXcnsJtNG8ZONTeLNHlXSkpCvQy90gI9Pl9sxTw Ph3nYUpYKSTqZawJyJyoZfcmfB6F5SsCH+EyCKY6HA794kBHCwPj1E1aDG/jM/tH XtHVP1ujYUjC5vYNg2dG3YdtQxAYNiCpr033R9wRJtBbIGpUVKTR8VMZpsq6rDTr LDp5PN2+YRJtucjuPcR4aesywMX4DglO2N46Wv5X+zHWIBu/fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVSTYTmpMk0tzWuP7t9Ei7pfCVzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4 OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMzZmJhNjdmNTUvZDEyYTRjNzUtYjQyOS0z MGRkLWI2OWEtYjM4ZWE3MjEyNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMmU2ODljNTUtODQ1My00ODZmLThi ODgtZjQzM2ZiYTY3ZjU1LzJlNjg5YzU1LTg0NTMtNDg2Zi04Yjg4LWY0MzNmYmE2 N2Y1NS5jcmwwHwYDVR0jBBgwFoAUyi2Ow8wphcSLJa7g69UtiXJzMi0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yZTY4OWM1NS04NDUzLTQ4NmYtOGI4OC1mNDMz ZmJhNjdmNTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrGAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG31PJVOBSnkFZ8YuvyOkdmZiFgd8WPlbnVjzWYkdE6pxI0CuaOH16Ye j44uvV23Nf0vTQ6yedB2bfChSS0PN52rq9Wr7R9qsVl8QV9oeLxzuIoC6j9fv1qg DBTLrRlO7qB+IFpwEcyFuS4cT3HLCEDf36m3QwQ4UDWAYdzMnEjk/Tree43pkOZw grECCH4T8jf+Y1HD/1tNjm8qMK1WLcOuVPvhvovCL4cXNIaSmtbOWUByyrZzJwCf XTQ7ilz/So94mLvCml9iIMeXHKFB9qRzKk4paxYLFClbB3tAUwHTIDEjW4v//Ey2 L3yR4xB0u29K89lc2wPGiEkqTmizhiQ= -----END CERTIFICATE-----Generated at Wed May 13 13:13:36 2026 by rpki-client