$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa File: 310aa2b6-46c7-3c3f-be18-80729877d42a.roa (raw, json) Hash identifier: llbIpRUlj/i+NH7J03czhqz4OJPSMmJwwdcY2t8vP0s= Subject key identifier: 7A:84:70:E4:BD:34:A3:57:05:52:13:6F:39:8F:DA:0B:DD:4A:9D:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3E000232070AD93372E9C540 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36183 IP address blocks: 172.225.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:02:32:07:0a:d9:33:72:e9:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=41e77368-af96-474b-b550-d98ff3b78f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:02:a6:f4:ab:64:4f:06:09:52:6e:42:5d: 26:fd:d5:ec:d7:af:7f:96:b5:75:a2:53:dd:43:23: af:16:6d:32:01:3a:57:2c:8e:9c:24:50:79:e1:1e: 73:e5:b1:c0:42:f3:27:78:24:e7:03:73:f0:24:99: 49:6c:8e:50:df:19:dd:ab:b1:f4:1b:95:2d:de:17: 39:fd:09:85:2b:2f:e7:07:69:d6:58:b3:ef:ba:cb: c4:b1:3e:35:4c:88:6d:1b:9d:94:a0:a5:10:f8:97: 70:d1:76:31:e4:02:27:18:84:46:ae:d1:db:73:00: 0b:22:fc:c6:57:ec:80:ec:0e:68:88:79:ba:48:57: 8e:bc:9e:28:96:03:f2:31:7d:23:4f:5f:cb:79:a3: 5b:b6:92:a0:49:90:97:13:f2:0e:e8:ee:94:15:68: 0e:1a:f4:93:7a:47:4f:db:be:90:94:c4:e9:a5:de: ad:a0:49:b8:bb:24:e5:d9:9e:be:3e:c7:70:81:f8: 45:b9:ef:ed:a1:6f:b8:28:07:00:10:1b:2b:ac:25: a7:71:ad:e1:e6:9f:ad:56:2f:c7:cc:cc:ab:93:ae: b1:3e:26:45:0a:b3:7f:93:5e:11:cd:84:d3:65:6c: 34:bc:42:9e:7d:89:95:05:24:97:dc:67:60:bd:d4: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:84:70:E4:BD:34:A3:57:05:52:13:6F:39:8F:DA:0B:DD:4A:9D:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5f:56:0d:44:e5:01:d4:3d:a1:89:e4:cb:a5:34:f8:5e:90: 2c:30:de:e7:bc:12:3f:59:aa:09:50:e3:bf:ce:34:77:bc:8a: 50:5f:ae:ff:c6:35:11:e1:9d:f4:6a:74:e9:3c:c3:25:6d:79: 0a:33:ad:64:41:9a:3b:f6:96:b0:56:f8:b8:84:f3:b9:be:90: e9:21:13:e0:f1:ab:ec:58:13:bd:1f:29:78:66:63:2c:2d:21: 29:e5:e8:bf:a3:8e:e0:01:d0:89:9e:38:f5:8f:aa:2c:b2:28: a8:5d:3d:df:7b:0b:31:e5:1a:e1:b4:89:ae:b4:fd:7d:1b:19: 14:76:97:de:b9:b5:d3:f5:36:0c:e4:ef:51:24:ca:c6:7f:b0: c1:68:00:5f:4b:eb:ba:0a:60:90:41:c1:16:36:02:53:b0:fc: 57:ef:c7:92:5e:79:94:1c:88:48:2b:7d:11:b7:29:a7:21:f2: dc:dc:f8:5a:24:ba:02:65:78:41:18:0d:a5:4b:0d:73:d1:7b: 41:e0:83:a4:5a:ac:12:77:f8:19:38:5e:1f:a9:c6:65:70:30: 86:9e:7e:33:b3:a7:40:0a:b8:e9:84:fe:17:b7:53:86:1d:82: 70:97:54:dd:7c:ef:44:ec:74:13:4a:81:c6:ae:1c:fa:10:57: cd:f1:c6:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAIyBwrZM3LpxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDFlNzczNjgtYWY5Ni00NzRiLWI1NTAtZDk4ZmYzYjc4ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYoCpvSrZE8GCVJuQl0m/dXs169/lrV1olPd QyOvFm0yATpXLI6cJFB54R5z5bHAQvMneCTnA3PwJJlJbI5Q3xndq7H0G5Ut3hc5 /QmFKy/nB2nWWLPvusvEsT41TIhtG52UoKUQ+Jdw0XYx5AInGIRGrtHbcwALIvzG V+yA7A5oiHm6SFeOvJ4olgPyMX0jT1/LeaNbtpKgSZCXE/IO6O6UFWgOGvSTekdP 276QlMTppd6toEm4uyTl2Z6+PsdwgfhFue/toW+4KAcAEBsrrCWnca3h5p+tVi/H zMyrk66xPiZFCrN/k14RzYTTZWw0vEKefYmVBSSX3GdgvdQ7fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqEcOS9NKNXBVITbzmP2gvdSp29MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEwYWEyYjYtNDZjNy0z YzNmLWJlMTgtODA3Mjk4NzdkNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNfVg1E5QHUPaGJ5MulNPhekCww3ue8Ej9ZqglQ47/ONHe8ilBfrv/G NRHhnfRqdOk8wyVteQozrWRBmjv2lrBW+LiE87m+kOkhE+Dxq+xYE70fKXhmYywt ISnl6L+jjuAB0ImeOPWPqiyyKKhdPd97CzHlGuG0ia60/X0bGRR2l965tdP1Ngzk 71EkysZ/sMFoAF9L67oKYJBBwRY2AlOw/Ffvx5JeeZQciEgrfRG3Kach8tzc+Fok ugJleEEYDaVLDXPRe0Hgg6RarBJ3+Bk4Xh+pxmVwMIaefjOzp0AKuOmE/he3U4Yd gnCXVN1870TsdBNKgcauHPoQV83xxoU= -----END CERTIFICATE-----Generated at Thu Mar 26 03:51:09 2026 by rpki-client