$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa File: 20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa (raw, json) Hash identifier: goUkJ7EHQ3mjafsS4Pab2IE172BBfs1zALG6r05NAYo= Subject key identifier: 58:53:89:B2:E0:C8:EE:80:F1:31:34:0F:92:90:6E:DD:F2:AF:3A:52 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D343A3846C93D0DCC1BC97480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 63949 IP address blocks: 172.237.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:38:46:c9:3d:0d:cc:1b:c9:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=26bc8968-ff92-45f0-9a68-978875084002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:23:bd:d6:00:7c:31:da:36:63:58:26:70: 24:0c:88:74:c2:cd:f6:b1:3a:d3:4d:f9:6b:8c:a8: ed:b9:46:ff:db:3a:48:f2:ed:8c:55:21:8f:7b:90: f8:22:38:a7:c4:41:aa:10:90:75:9c:17:68:f2:0b: 17:66:f1:da:a1:0d:0f:bb:c4:fe:06:2d:b5:b4:7f: 32:e0:77:15:21:c4:7a:3d:fa:12:99:98:9d:da:a4: 26:32:e1:49:6e:8f:b5:79:8d:1a:2c:63:17:7d:65: 2c:45:50:05:9a:e1:27:01:11:8c:aa:cf:b2:dc:91: fb:46:5e:fe:75:85:f5:9b:75:b9:dc:fb:f5:67:9a: ec:81:b0:e0:3f:4d:14:78:fb:8e:18:00:4e:18:5a: 8e:ea:81:68:7c:56:43:65:dc:87:1f:53:99:a5:76: 2c:3e:3e:25:71:42:48:47:76:ae:58:2d:eb:f3:ad: d5:e2:3e:a1:13:53:0a:dd:f8:41:37:b9:a9:6c:a5: 20:ad:bc:01:1e:b0:38:1c:a7:c3:e3:9a:20:57:43: 31:94:14:89:6d:56:84:73:11:6a:42:4a:f2:85:c9: 98:4c:5d:6d:6e:02:9f:f6:2e:3e:68:0b:07:5e:39: 44:ee:7d:60:52:5b:58:61:53:1e:81:be:15:ab:47: 37:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:53:89:B2:E0:C8:EE:80:F1:31:34:0F:92:90:6E:DD:F2:AF:3A:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20c9bcff-954c-3d54-8ad3-ef0ede456e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bd:08:c6:28:2f:99:0a:7c:63:d3:77:73:8e:03:c4:b1:b6: f8:a4:09:8a:ba:39:88:45:35:65:0c:f1:9e:fd:85:33:75:07: f2:7e:ef:21:b2:61:01:72:cc:5c:f2:45:cb:b1:02:55:f9:5f: cf:af:7d:24:79:8a:57:4c:8e:d2:61:b3:1a:01:e8:39:f0:03: 6b:9d:e9:0c:53:bd:73:fe:b3:86:36:d8:d8:9f:53:80:3c:e5: b3:11:dc:a9:db:c1:e1:0d:38:f9:7a:23:5a:4b:dc:1f:aa:80: c5:fb:d3:53:db:08:c7:bb:4d:a0:33:ef:de:b4:35:aa:77:15: 84:c9:37:89:0e:8d:5f:7c:bc:a1:7b:4d:c8:9b:60:53:9a:4f: 01:37:45:ce:bd:5f:b5:64:de:c8:14:0f:78:45:5e:e0:4a:03: 60:35:20:86:fd:b8:8f:8d:50:d4:d1:0b:90:be:1c:e3:50:53: 2a:5d:92:3d:92:48:2e:0a:fd:72:cc:af:bd:fe:21:bc:11:60: 6b:ff:b1:5e:d6:8e:1c:f1:ac:7b:d0:82:a4:c3:f2:88:da:1d: 40:4a:bb:32:f9:00:22:f1:04:31:e5:d9:a3:fd:05:c8:7a:01: 9f:97:e6:bb:fb:43:33:c7:b8:0f:06:b5:e9:ac:c7:4c:13:b6: e9:30:b9:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OjhGyT0NzBvJdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MjZiYzg5NjgtZmY5Mi00NWYwLTlhNjgtOTc4ODc1MDg0MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhswjvdYAfDHaNmNYJnAkDIh0ws32sTrTTflr jKjtuUb/2zpI8u2MVSGPe5D4IjinxEGqEJB1nBdo8gsXZvHaoQ0Pu8T+Bi21tH8y 4HcVIcR6PfoSmZid2qQmMuFJbo+1eY0aLGMXfWUsRVAFmuEnARGMqs+y3JH7Rl7+ dYX1m3W53Pv1Z5rsgbDgP00UePuOGABOGFqO6oFofFZDZdyHH1OZpXYsPj4lcUJI R3auWC3r863V4j6hE1MK3fhBN7mpbKUgrbwBHrA4HKfD45ogV0MxlBSJbVaEcxFq QkryhcmYTF1tbgKf9i4+aAsHXjlE7n1gUltYYVMegb4Vq0c3dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhTibLgyO6A8TE0D5KQbt3yrzpSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjBjOWJjZmYtOTU0Yy0z ZDU0LThhZDMtZWYwZWRlNDU2ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+9CMYoL5kKfGPTd3OOA8SxtvikCYq6OYhFNWUM8Z79hTN1B/J+7yGy YQFyzFzyRcuxAlX5X8+vfSR5ildMjtJhsxoB6DnwA2ud6QxTvXP+s4Y22NifU4A8 5bMR3KnbweENOPl6I1pL3B+qgMX701PbCMe7TaAz7960Nap3FYTJN4kOjV98vKF7 TcibYFOaTwE3Rc69X7Vk3sgUD3hFXuBKA2A1IIb9uI+NUNTRC5C+HONQUypdkj2S SC4K/XLMr73+IbwRYGv/sV7WjhzxrHvQgqTD8ojaHUBKuzL5ACLxBDHl2aP9Bch6 AZ+X5rv7QzPHuA8Gtemsx0wTtukwuVE= -----END CERTIFICATE-----Generated at Thu Mar 26 05:19:55 2026 by rpki-client