$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6161459d-3c29-3be6-af51-f6a44269a7d5.roa File: 6161459d-3c29-3be6-af51-f6a44269a7d5.roa (raw, json) Hash identifier: yoMFRSkAzN6UYfqL+lkKHxFvqM5NlzjFfg+quebhHmI= Subject key identifier: CF:8F:1D:CF:E5:C7:0D:73:55:60:FD:7C:64:C0:4B:7C:68:11:D6:5D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D40CB0276D65E587262883180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6161459d-3c29-3be6-af51-f6a44269a7d5.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 36183 IP address blocks: 172.225.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:02:76:d6:5e:58:72:62:88:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=42721667-c3cb-4204-99d6-e9c45627af3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d7:c9:ab:80:b9:2e:48:19:20:f9:ba:73:6b: 40:15:ab:61:7d:5a:72:d5:7e:47:c3:69:0a:61:8d: 0f:63:ca:56:b3:44:21:1a:01:ec:5d:44:45:ef:79: 65:0d:56:1a:71:ff:7d:9b:db:57:3f:32:e3:b0:70: e3:38:87:4c:3a:54:e4:f8:96:14:2b:60:ae:02:eb: e3:38:32:b4:9b:4f:f8:7c:79:77:ef:78:07:d5:41: bd:28:cc:c0:ce:fc:11:f6:0b:64:a6:44:14:f2:f4: 4b:64:9b:21:66:70:16:8c:86:6f:ed:d2:cf:48:1e: e7:9d:cc:e9:e5:c8:73:53:a7:15:df:b0:0c:f3:b9: 0b:ce:39:83:66:a5:d0:73:45:97:71:58:d7:2a:13: 6f:25:f2:06:9a:11:18:a8:e7:b2:4d:96:d0:99:28: 7b:b5:5f:45:6c:4b:9c:06:b6:1a:25:ac:af:4d:09: d4:0e:3a:36:f8:c3:43:bf:72:78:a0:bd:7c:19:96: df:d9:19:0c:f2:26:f4:71:fd:59:0a:16:e5:b6:3d: d4:2f:9f:8e:33:a2:64:10:87:f2:f1:aa:e1:e2:c2: 2c:d6:4e:cf:c1:99:63:60:59:3a:ae:00:36:42:30: 03:69:eb:db:03:53:ca:27:44:c7:02:d4:7b:8c:2c: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8F:1D:CF:E5:C7:0D:73:55:60:FD:7C:64:C0:4B:7C:68:11:D6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6161459d-3c29-3be6-af51-f6a44269a7d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:71:67:25:21:71:db:8b:d6:59:04:ba:7c:77:c2:a2:3e:fb: 30:4c:cb:a7:59:c2:7e:f7:d3:6e:d7:90:67:d5:0e:80:43:5b: 58:42:3b:b5:62:98:f7:cd:66:00:2a:0f:97:c3:f5:27:7f:a0: b5:0a:41:ae:1b:3d:ea:7f:65:a2:97:6d:e7:cd:a0:71:7a:9f: bf:22:54:a6:9d:ed:fd:4f:15:95:10:04:85:46:67:92:ff:95: 18:1e:58:83:ee:49:c1:ed:8f:55:87:0e:ee:85:3e:b6:b6:89: e8:5b:b2:bc:fb:f9:34:10:d2:26:0d:c7:ef:45:ca:af:53:cf: 1c:10:31:80:10:ab:e3:d1:4f:b9:ea:dc:1e:ef:6d:4e:52:58: 10:5c:89:28:e8:1c:3b:96:25:57:5a:a9:f2:fa:c2:5b:5d:53: 28:20:0f:e4:66:9e:7e:e5:9e:2e:2d:06:6f:1c:f4:c8:45:e8: 21:53:55:11:82:51:75:09:68:e8:2b:70:47:f7:ee:b0:f5:f5: b5:38:87:5e:a2:40:05:08:7f:62:df:8e:43:9d:20:94:e3:ba: 25:a2:06:c7:61:c4:bf:ad:17:76:2e:49:78:e1:24:c2:6c:b6: 7d:b8:27:8e:4f:9b:46:67:ae:cf:2e:d2:52:26:13:29:e4:f2: 4e:cc:2b:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AywJ21l5YcmKIMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NDI3MjE2NjctYzNjYi00MjA0LTk5ZDYtZTljNDU2MjdhZjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9fJq4C5LkgZIPm6c2tAFathfVpy1X5Hw2kK YY0PY8pWs0QhGgHsXURF73llDVYacf99m9tXPzLjsHDjOIdMOlTk+JYUK2CuAuvj ODK0m0/4fHl373gH1UG9KMzAzvwR9gtkpkQU8vRLZJshZnAWjIZv7dLPSB7nnczp 5chzU6cV37AM87kLzjmDZqXQc0WXcVjXKhNvJfIGmhEYqOeyTZbQmSh7tV9FbEuc BrYaJayvTQnUDjo2+MNDv3J4oL18GZbf2RkM8ib0cf1ZChbltj3UL5+OM6JkEIfy 8arh4sIs1k7PwZljYFk6rgA2QjADaevbA1PKJ0THAtR7jCxuTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+PHc/lxw1zVWD9fGTAS3xoEdZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjE2MTQ1OWQtM2MyOS0z YmU2LWFmNTEtZjZhNDQyNjlhN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApxZyUhcduL1lkEunx3wqI++zBMy6dZwn73027XkGfVDoBDW1hCO7Vi mPfNZgAqD5fD9Sd/oLUKQa4bPep/ZaKXbefNoHF6n78iVKad7f1PFZUQBIVGZ5L/ lRgeWIPuScHtj1WHDu6FPra2iehbsrz7+TQQ0iYNx+9Fyq9TzxwQMYAQq+PRT7nq 3B7vbU5SWBBciSjoHDuWJVdaqfL6wltdUyggD+Rmnn7lni4tBm8c9MhF6CFTVRGC UXUJaOgrcEf37rD19bU4h16iQAUIf2LfjkOdIJTjuiWiBsdhxL+tF3YuSXjhJMJs tn24J45Pm0Znrs8u0lImEynk8k7MK94= -----END CERTIFICATE-----Generated at Thu Mar 26 18:34:29 2026 by rpki-client