$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa File: 5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa (raw, json) Hash identifier: 3DLrFguFqy13J9XC0ek74CTW5HZbP+Qp4zFjo2QZB1o= Subject key identifier: 0B:D8:03:F8:22:5C:6F:B2:6A:8C:5D:4B:AC:6A:03:60:E5:B7:07:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D39CF944466E815F600183E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:94:44:66:e8:15:f6:00:18:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=fb54048d-3557-42f2-bd3e-720dd87894a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:09:0a:e5:a1:11:85:93:9e:76:fd:08:b7: d0:82:bd:23:0e:24:a3:5d:f0:ce:93:ee:03:57:c7: a3:c1:50:a9:51:26:7f:df:7a:d0:0e:dc:84:bf:8a: f9:4b:dc:aa:6b:e3:10:0d:6d:cb:34:fb:6b:90:9a: 11:22:2a:41:aa:f0:21:d0:f8:93:c9:78:ab:fa:73: 50:47:3e:bb:dc:2c:ed:2f:ca:65:d0:e3:a9:6b:e5: fc:3e:85:d3:17:70:af:a0:f1:5c:af:3f:42:fa:8a: bd:90:81:78:3f:67:ae:6d:f8:8c:1a:7f:32:f0:42: 4d:72:27:5d:a8:c6:77:cc:73:ec:94:54:e5:9e:e5: c8:b6:83:de:cd:c3:42:b7:1a:60:83:f4:73:34:40: 7d:a3:d8:f1:f6:81:00:dd:dd:ee:e4:54:37:06:7f: 13:ab:07:9c:67:73:91:67:ed:35:a6:de:0f:45:67: f3:97:13:b5:55:a9:94:cf:6c:0c:f2:c5:75:29:4e: 7c:76:d3:ef:6f:1d:91:ca:36:0e:90:74:fc:38:2a: 5a:f1:36:a6:b9:c7:b6:b0:77:e2:64:af:bd:70:ba: df:0f:3c:8b:38:d3:fa:1a:e8:b8:f1:ef:57:3f:d8: c4:ff:6f:13:bd:e9:e2:40:d3:80:3c:4d:9b:ab:b6: 32:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D8:03:F8:22:5C:6F:B2:6A:8C:5D:4B:AC:6A:03:60:E5:B7:07:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6b:e9:0e:09:87:d2:ab:c5:ef:91:ce:9c:a1:9b:80:55:76: d3:fe:09:a2:81:c2:1c:14:f3:a7:40:03:4f:c7:23:e6:5b:a9: 3f:34:b1:48:6c:f0:ab:ed:49:e1:5b:69:59:79:46:cc:6a:85: 82:81:6e:90:5f:b2:6e:0f:22:16:c2:02:42:9f:fe:a9:d8:0a: f3:77:52:d2:36:22:08:a4:5b:5a:c2:0f:c8:7a:01:60:76:53: 35:5a:3b:b7:71:cb:d8:ec:7c:6c:82:d0:d6:1c:7d:8f:e1:8f: c3:4d:85:b0:83:d3:1e:58:f3:6d:8c:74:f7:9f:1a:e0:30:e0: d9:a4:4a:c0:18:36:c1:cd:c2:fc:6a:81:68:7f:b3:33:60:01: fa:5b:dc:ca:93:1a:09:df:91:41:8e:46:e1:95:5e:f4:cc:29: 6d:42:48:62:75:f9:ec:d4:02:46:b3:b8:58:d9:96:79:b4:cd: 37:e9:26:da:11:90:d5:46:95:f5:5e:03:d6:6a:5c:7f:6c:50: c1:0e:d4:cb:42:d9:a6:b1:87:a2:50:bf:ca:8c:da:83:7d:14: 86:2b:e4:64:e3:38:f6:67:3a:df:95:85:61:2d:cc:8c:65:5b: ba:8a:c1:8c:f3:27:41:da:43:9c:bf:9a:2f:b9:ec:dd:1b:13: b3:f2:bb:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5REZugV9gAYPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZmI1NDA0OGQtMzU1Ny00MmYyLWJkM2UtNzIwZGQ4Nzg5NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM4JCuWhEYWTnnb9CLfQgr0jDiSjXfDOk+4D V8ejwVCpUSZ/33rQDtyEv4r5S9yqa+MQDW3LNPtrkJoRIipBqvAh0PiTyXir+nNQ Rz673CztL8pl0OOpa+X8PoXTF3CvoPFcrz9C+oq9kIF4P2eubfiMGn8y8EJNcidd qMZ3zHPslFTlnuXItoPezcNCtxpgg/RzNEB9o9jx9oEA3d3u5FQ3Bn8TqwecZ3OR Z+01pt4PRWfzlxO1VamUz2wM8sV1KU58dtPvbx2RyjYOkHT8OCpa8Tamuce2sHfi ZK+9cLrfDzyLONP6Gui48e9XP9jE/28TveniQNOAPE2bq7YyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvYA/giXG+yaoxdS6xqA2Dltwf0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM0Y2VjYWEtMTAxZC0z ZTMxLTkwYzctYmNlZWVlNTQxNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNr6Q4Jh9Krxe+Rzpyhm4BVdtP+CaKBwhwU86dAA0/HI+ZbqT80sUhs 8KvtSeFbaVl5RsxqhYKBbpBfsm4PIhbCAkKf/qnYCvN3UtI2IgikW1rCD8h6AWB2 UzVaO7dxy9jsfGyC0NYcfY/hj8NNhbCD0x5Y822MdPefGuAw4NmkSsAYNsHNwvxq gWh/szNgAfpb3MqTGgnfkUGORuGVXvTMKW1CSGJ1+ezUAkazuFjZlnm0zTfpJtoR kNVGlfVeA9ZqXH9sUMEO1MtC2aaxh6JQv8qM2oN9FIYr5GTjOPZnOt+VhWEtzIxl W7qKwYzzJ0HaQ5y/mi+57N0bE7Pyu44= -----END CERTIFICATE-----Generated at Thu Mar 26 08:26:41 2026 by rpki-client