$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bce8ed5-abeb-30ff-b8c6-91c91f0409cd.roa File: 4bce8ed5-abeb-30ff-b8c6-91c91f0409cd.roa (raw, json) Hash identifier: sRplHAn+gLKsX9rtpN8MfugdzVJ/3GcucIaPvQVVtwM= Subject key identifier: 70:59:30:34:8C:04:6A:89:A2:29:4A:43:1F:73:96:88:41:D2:3D:C6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3DFF99B4128333BEF1BD8380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bce8ed5-abeb-30ff-b8c6-91c91f0409cd.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 63949 IP address blocks: 172.232.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:99:b4:12:83:33:be:f1:bd:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=5be63ae0-4e38-43ae-a771-391e389c6831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:df:ba:d9:06:29:ff:95:0d:10:d9:bb:68: ae:a4:33:5b:d9:fd:20:7a:0d:ff:94:dd:b5:5d:ce: 6c:73:23:74:e1:34:13:e3:50:e7:98:5c:0d:54:99: 57:7f:27:2b:09:9b:d6:15:52:d5:e7:fa:19:75:fd: 5e:fa:71:2e:71:e3:48:53:73:f1:5f:50:c7:88:42: 08:fd:da:b5:e3:39:cd:c2:35:2c:dd:0e:a3:eb:b6: 24:fb:0d:d2:c2:c9:c8:59:d1:61:7e:e4:c8:49:8c: aa:9b:cd:0b:c0:83:7f:84:ed:e2:c8:c1:4a:8e:f4: b1:77:f1:06:16:e0:73:2d:7c:d4:e4:ee:cb:f1:f1: f4:90:4b:0f:b9:00:4b:74:18:82:1e:b2:15:21:c4: 6c:e8:ba:1f:14:44:1b:5e:4d:a5:ec:b9:83:3f:71: d6:17:6a:fb:fd:f1:82:1a:85:62:bd:43:4d:a3:64: 23:5d:82:f6:c9:14:6e:57:2d:b2:86:a6:69:7c:f4: 33:73:56:f5:67:a4:18:38:59:42:d8:b0:b9:ad:22: 6a:28:06:86:87:be:36:19:98:9a:00:44:5d:10:f6: b0:25:c9:f7:c0:0b:24:d4:13:6f:2b:c1:bf:29:1f: b3:22:51:83:84:ac:d2:ab:42:5a:a4:a6:cb:f2:a7: e4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:59:30:34:8C:04:6A:89:A2:29:4A:43:1F:73:96:88:41:D2:3D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bce8ed5-abeb-30ff-b8c6-91c91f0409cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.232.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ae:27:7a:9c:b0:6c:b0:ee:19:4e:5c:f9:94:94:5c:d8:79: 9a:8c:70:04:b7:f0:93:3b:fe:b4:d8:69:86:43:01:fa:37:0f: 10:a7:d0:31:24:15:8b:84:d4:b8:c0:6b:4f:90:8a:93:0c:f0: 3f:7f:d2:12:f8:b4:15:43:ed:24:20:ea:e9:08:e9:94:b1:88: d1:b8:f7:b1:f0:8b:41:2c:d3:c6:af:51:4a:52:74:11:a5:b3: cf:9d:53:00:ad:76:dc:8d:f5:3c:36:30:48:09:57:af:ad:3e: e3:cf:61:ab:e6:63:16:d4:7c:00:be:ca:77:a5:52:a3:57:00: 1e:55:5b:89:e0:86:57:2a:29:6c:c2:0b:0b:25:ff:e9:7d:d4: 11:c5:95:02:40:df:ec:b2:4c:85:a6:4b:92:03:b5:44:b8:67: 72:ff:de:3f:93:48:20:dc:65:f4:d2:ee:a5:0d:70:f5:1d:c1: 12:6e:fc:f5:af:75:fb:19:62:b5:e5:e3:c9:dc:aa:0d:d0:04: df:ba:28:f2:b1:7b:e8:b4:2d:7c:f8:f5:c0:c1:ba:be:ee:03: 10:86:5c:c8:4f:d0:d6:48:cb:db:17:99:06:3c:4f:88:0b:33: a0:e6:84:0f:62:c1:11:6d:44:6d:ff:fd:f5:f9:48:8e:2d:8a: 72:21:b0:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5m0EoMzvvG9g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NWJlNjNhZTAtNGUzOC00M2FlLWE3NzEtMzkxZTM4OWM2ODMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx/futkGKf+VDRDZu2iupDNb2f0geg3/lN21 Xc5scyN04TQT41DnmFwNVJlXfycrCZvWFVLV5/oZdf1e+nEuceNIU3PxX1DHiEII /dq14znNwjUs3Q6j67Yk+w3SwsnIWdFhfuTISYyqm80LwIN/hO3iyMFKjvSxd/EG FuBzLXzU5O7L8fH0kEsPuQBLdBiCHrIVIcRs6LofFEQbXk2l7LmDP3HWF2r7/fGC GoVivUNNo2QjXYL2yRRuVy2yhqZpfPQzc1b1Z6QYOFlC2LC5rSJqKAaGh742GZia AERdEPawJcn3wAsk1BNvK8G/KR+zIlGDhKzSq0JapKbL8qfkIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBZMDSMBGqJoilKQx9zlohB0j3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGJjZThlZDUtYWJlYi0z MGZmLWI4YzYtOTFjOTFmMDQwOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrOhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABauJ3qcsGyw7hlOXPmUlFzYeZqMcAS38JM7/rTYaYZDAfo3DxCn0DEk FYuE1LjAa0+QipMM8D9/0hL4tBVD7SQg6ukI6ZSxiNG497Hwi0Es08avUUpSdBGl s8+dUwCtdtyN9Tw2MEgJV6+tPuPPYavmYxbUfAC+ynelUqNXAB5VW4nghlcqKWzC Cwsl/+l91BHFlQJA3+yyTIWmS5IDtUS4Z3L/3j+TSCDcZfTS7qUNcPUdwRJu/PWv dfsZYrXl48ncqg3QBN+6KPKxe+i0LXz49cDBur7uAxCGXMhP0NZIy9sXmQY8T4gL M6DmhA9iwRFtRG3//fX5SI4tinIhsPg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:49 2026 by rpki-client