$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa File: 578c0eaf-1b74-300d-911f-899673def303.roa (raw, json) Hash identifier: 516GS2zfy/jralxNxXPVCp28A7OTNZzg/1IQNjaG1tw= Subject key identifier: 7D:9F:EA:7D:4E:CB:CF:7B:E5:CA:B8:A8:B5:FE:52:63:BA:92:5D:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D40CB9C6AA385538BE44608E3 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 36183 IP address blocks: 172.225.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9c:6a:a3:85:53:8b:e4:46:08:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=735ea9dc-8a8d-48e7-84d9-68daaa6f13c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c3:2b:8b:48:00:ea:8d:0e:df:0f:da:a5:98: 78:14:ab:21:b0:fe:8e:f6:92:2a:43:24:30:ca:49: 91:8f:39:c3:61:df:6c:03:78:fa:76:62:36:4a:38: 79:ae:71:de:f3:53:1f:7f:ad:97:a6:cd:d1:b9:3a: b9:8f:4f:69:8d:92:7d:56:24:c4:cf:6c:f8:bd:aa: 0f:ba:c7:1b:0c:40:96:5d:a7:7d:59:f8:08:fb:76: 31:7b:df:1c:9e:d3:b4:25:f5:35:41:8b:fc:ea:9e: 23:b8:ea:f0:96:b3:32:4f:42:8c:b0:c0:3a:07:ca: 46:7d:c8:bd:94:5c:69:3e:e5:3d:bb:e1:88:37:e4: 91:60:36:f1:34:54:91:e1:7f:42:14:34:e3:da:a7: 7e:ca:a4:57:69:dc:ec:ac:73:4d:e1:90:76:83:ee: 21:f8:2f:ee:9b:4a:f1:7c:30:e5:b3:c9:38:42:3c: b0:ff:ea:8a:d6:25:41:bb:02:d2:98:18:4d:34:22: 85:03:f7:9c:c2:2d:33:56:2f:a7:83:ae:4c:fa:28: f0:f0:a1:ff:af:83:12:7c:44:a5:91:b9:18:de:ac: a4:0c:33:ae:6b:0b:b0:26:2c:0b:48:aa:ff:f1:4e: db:71:d2:f4:69:b2:48:d8:75:5f:04:33:bb:d3:42: 19:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9F:EA:7D:4E:CB:CF:7B:E5:CA:B8:A8:B5:FE:52:63:BA:92:5D:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:f3:1a:0d:90:bb:59:01:ba:3f:7c:42:28:1b:ec:93:a4:8b: 03:51:7e:10:72:16:1a:af:17:3e:8d:72:6b:7f:7b:d9:59:9b: 7b:1e:27:a3:84:d9:fd:ad:f7:c3:be:ef:53:6b:c7:c5:b0:2e: 16:ba:bc:06:0c:db:ed:79:a0:77:02:a7:e0:33:b5:59:46:bb: 08:09:cc:6e:1d:4c:33:c8:90:fc:24:8d:7a:2d:02:67:ed:6f: 04:20:40:df:5a:b4:92:fb:90:12:9a:ea:f2:29:46:6b:55:ef: 11:a2:ed:0a:b6:50:f3:33:6f:26:58:d7:35:f3:e7:e0:12:ea: 77:c3:41:d9:61:db:7a:5b:6b:b5:4f:33:46:2c:0e:b3:dd:15: d8:d8:81:40:bc:52:2c:46:a9:91:1f:c7:8e:98:33:25:31:f3: 02:90:8c:6e:13:b4:53:f4:93:fc:94:85:1f:52:42:64:ec:56: 15:3e:2d:76:01:ac:28:15:a8:28:23:c8:03:11:39:74:e7:2f: 04:78:d8:1a:60:4e:e0:7d:9d:c3:c0:b8:e2:4d:10:28:e2:0e: 78:3d:80:f2:cb:d2:7c:69:36:c0:c0:eb:b6:71:cc:e5:3f:af: 5c:d3:a6:07:fe:60:e9:f5:9d:23:7b:fa:38:f9:4b:ba:bf:42: 0e:23:fe:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay5xqo4VTi+RGCOMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NzM1ZWE5ZGMtOGE4ZC00OGU3LTg0ZDktNjhkYWFhNmYxM2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsMri0gA6o0O3w/apZh4FKshsP6O9pIqQyQw ykmRjznDYd9sA3j6dmI2Sjh5rnHe81Mff62Xps3RuTq5j09pjZJ9ViTEz2z4vaoP uscbDECWXad9WfgI+3Yxe98cntO0JfU1QYv86p4juOrwlrMyT0KMsMA6B8pGfci9 lFxpPuU9u+GIN+SRYDbxNFSR4X9CFDTj2qd+yqRXadzsrHNN4ZB2g+4h+C/um0rx fDDls8k4Qjyw/+qK1iVBuwLSmBhNNCKFA/ecwi0zVi+ng65M+ijw8KH/r4MSfESl kbkY3qykDDOuawuwJiwLSKr/8U7bcdL0abJI2HVfBDO700IZ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2f6n1Oy8975cq4qLX+UmO6kl0uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc4YzBlYWYtMWI3NC0z MDBkLTkxMWYtODk5NjczZGVmMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvzGg2Qu1kBuj98Qigb7JOkiwNRfhByFhqvFz6Ncmt/e9lZm3seJ6OE 2f2t98O+71Nrx8WwLha6vAYM2+15oHcCp+AztVlGuwgJzG4dTDPIkPwkjXotAmft bwQgQN9atJL7kBKa6vIpRmtV7xGi7Qq2UPMzbyZY1zXz5+AS6nfDQdlh23pba7VP M0YsDrPdFdjYgUC8UixGqZEfx46YMyUx8wKQjG4TtFP0k/yUhR9SQmTsVhU+LXYB rCgVqCgjyAMROXTnLwR42BpgTuB9ncPAuOJNECjiDng9gPLL0nxpNsDA67ZxzOU/ r1zTpgf+YOn1nSN7+jj5S7q/Qg4j/r0= -----END CERTIFICATE-----Generated at Thu Mar 26 04:00:30 2026 by rpki-client