$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa File: 0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa (raw, json) Hash identifier: yf4dmN8IHqjCimL/5s/Fizw0yoI21b+LOnyE/TiLSas= Subject key identifier: 07:BC:E9:CD:AD:81:0C:AA:97:F8:97:C5:12:B3:43:DE:1F:0F:AF:84 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D9E50137AC64A794A0414A500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 172.235.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:13:7a:c6:4a:79:4a:04:14:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=70fc088f-d1e9-4a51-a231-6da8aacb5799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bb:75:12:3c:05:4d:dc:50:a6:55:f2:20:7d: da:14:d5:e7:7e:ec:ed:96:1f:c1:b9:bb:8b:f6:f8: 7e:88:9a:09:d4:4a:61:15:8a:a6:4d:c9:9a:f6:c6: 22:9e:ac:09:71:7c:ff:5e:88:bb:7c:f6:10:61:f3: a5:fe:a8:53:55:5c:2f:d0:1d:55:5a:e1:62:24:29: 76:f1:21:31:87:c9:76:d8:6a:3c:b4:46:dd:aa:66: a7:ea:f1:3a:a9:19:6a:4e:7d:d6:ba:85:fd:9a:a7: 84:da:cc:3c:22:24:9d:e0:e0:ef:02:5e:ee:1d:95: 31:d3:62:09:9f:e8:fa:f4:e8:8c:d5:81:6d:47:23: 12:a8:a3:bc:89:f7:02:cc:6b:b6:5a:26:8c:d8:5f: 57:57:d8:26:94:67:54:12:c8:ac:63:67:81:c0:77: 35:a2:e5:ab:5d:21:88:09:71:69:32:53:b6:e8:8e: b6:5d:bf:eb:9f:e6:5e:9b:98:66:0b:35:42:d3:bb: 26:05:67:6d:05:0a:4b:cd:60:bf:88:d3:ea:35:ce: 9f:fb:e9:6e:a8:d2:b1:7a:6a:40:fd:ba:1b:04:66: eb:ec:0d:83:41:9b:86:ad:d5:5b:b2:e1:68:f6:69: 70:1d:4e:c1:ec:f9:78:db:eb:7b:49:24:e4:de:13: 93:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BC:E9:CD:AD:81:0C:AA:97:F8:97:C5:12:B3:43:DE:1F:0F:AF:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0da2b90f-1d2c-328a-b6c2-5fe234bf2b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b6:4a:e4:71:ed:6e:56:dd:5e:43:e0:80:52:83:22:29:aa: 8f:05:ed:e4:19:bc:43:1e:3c:5f:f0:1c:be:81:50:9f:9e:f9: 47:af:44:4d:e9:bb:c2:52:69:0a:12:a7:71:10:68:7e:97:d9: 17:ba:d2:3c:bc:05:a8:db:d1:26:85:17:8f:5b:7c:7d:36:96: 33:c6:68:e5:8d:8e:d3:03:83:fc:ca:7f:d6:8e:4b:43:e6:9f: d7:2f:d8:93:c3:47:0a:67:c3:1f:b9:82:ea:fa:dc:58:f4:dd: 95:35:94:43:4c:5e:d0:33:de:95:4a:c6:d5:27:55:ce:5c:3b: 88:09:df:3a:9c:6f:21:8e:5f:36:c6:5d:06:15:6b:19:c9:f2: 77:39:db:3d:ae:1d:0e:76:c5:71:90:79:4f:1e:d2:dd:a8:ae: af:2e:eb:0c:13:22:cb:c2:fb:93:ad:27:33:63:73:73:a1:c5: 91:e7:7e:d4:cb:c6:40:1d:71:bb:b2:53:c9:85:2e:fb:cb:a6: 69:b6:af:af:fd:5b:d3:94:40:9c:ed:32:1d:22:4f:54:78:4c: 23:5b:c1:52:b9:dd:4a:1b:cb:d6:15:2c:90:52:3e:7c:85:c4: f3:29:d6:57:28:fd:f8:ab:bf:2c:79:a0:8f:e1:67:a9:cc:89: d1:9d:0c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBN6xkp5SgQUpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NzBmYzA4OGYtZDFlOS00YTUxLWEyMzEtNmRhOGFhY2I1Nzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbt1EjwFTdxQplXyIH3aFNXnfuztlh/BubuL 9vh+iJoJ1EphFYqmTcma9sYinqwJcXz/Xoi7fPYQYfOl/qhTVVwv0B1VWuFiJCl2 8SExh8l22Go8tEbdqman6vE6qRlqTn3WuoX9mqeE2sw8IiSd4ODvAl7uHZUx02IJ n+j69OiM1YFtRyMSqKO8ifcCzGu2WiaM2F9XV9gmlGdUEsisY2eBwHc1ouWrXSGI CXFpMlO26I62Xb/rn+Zem5hmCzVC07smBWdtBQpLzWC/iNPqNc6f++luqNKxempA /bobBGbr7A2DQZuGrdVbsuFo9mlwHU7B7Pl42+t7SSTk3hOThQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAe86c2tgQyql/iXxRKzQ94fD6+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGRhMmI5MGYtMWQyYy0z MjhhLWI2YzItNWZlMjM0YmYyYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB62SuRx7W5W3V5D4IBSgyIpqo8F7eQZvEMePF/wHL6BUJ+e+UevRE3p u8JSaQoSp3EQaH6X2Re60jy8Bajb0SaFF49bfH02ljPGaOWNjtMDg/zKf9aOS0Pm n9cv2JPDRwpnwx+5gur63Fj03ZU1lENMXtAz3pVKxtUnVc5cO4gJ3zqcbyGOXzbG XQYVaxnJ8nc52z2uHQ52xXGQeU8e0t2orq8u6wwTIsvC+5OtJzNjc3OhxZHnftTL xkAdcbuyU8mFLvvLpmm2r6/9W9OUQJztMh0iT1R4TCNbwVK53Uoby9YVLJBSPnyF xPMp1lco/firvyx5oI/hZ6nMidGdDIc= -----END CERTIFICATE-----Generated at Wed May 13 06:27:45 2026 by rpki-client