$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa File: 86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa (raw, json) Hash identifier: jnjIMEuHJpXV0KXQCotG1WecUN8Dd4TZL6HuOo6kSmE= Subject key identifier: 2B:91:EC:3C:7A:89:D3:4B:8E:6E:45:71:47:17:C7:D9:EB:FD:B6:01 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3E000254B6A1DFEC6B7D5070 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36183 IP address blocks: 172.225.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:02:54:b6:a1:df:ec:6b:7d:50:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=1d6f704d-bff6-4c76-9fb5-d733aeff6d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:90:5d:4d:6e:b2:5a:1b:cc:62:97:d9:e0: 38:24:8c:a1:85:7b:5b:7a:5a:b4:9c:b2:be:73:a4: 21:28:64:36:e1:2b:4c:99:00:3c:2d:d7:d8:9e:d0: 2d:54:2d:e4:19:5c:43:86:a1:b3:7b:74:cb:c9:c3: 54:46:8a:59:28:74:40:ed:aa:ea:9f:e6:92:06:7f: 61:8f:e8:ee:00:e2:be:f5:32:8e:02:db:ee:72:dc: 00:21:f2:e2:eb:21:09:aa:6e:5d:e3:9c:9b:61:f1: a8:41:48:d9:37:88:2a:4d:63:42:86:6b:dc:7d:6a: 6c:56:43:da:fe:11:9a:ae:77:53:1b:30:cb:3e:fd: 79:2a:6e:15:28:9b:1f:12:8d:e8:e1:06:3a:20:ce: 69:fc:64:93:30:28:04:28:34:a6:b8:32:a5:69:c7: 26:43:3a:93:eb:63:da:e8:39:a3:f0:3b:45:97:79: cc:6a:ef:e1:bb:ee:2a:42:b2:70:5f:5b:4c:3d:e9: 22:67:4c:3e:26:fb:da:9c:bc:67:e5:9d:88:1a:ee: d1:88:cb:d1:af:a3:84:3b:3d:59:c7:b7:12:97:f3: 3b:f8:b6:11:d9:c3:e0:88:21:94:93:cd:b2:4b:a9: d9:01:1d:67:77:65:0b:da:28:fa:a2:fb:31:34:ed: 3d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:91:EC:3C:7A:89:D3:4B:8E:6E:45:71:47:17:C7:D9:EB:FD:B6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86cd9256-6fcf-332c-a44c-c68fa0da4db2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f2:73:6e:43:3d:3f:5d:a4:91:8b:fb:e4:cf:ad:a5:db:e7: 57:22:b2:cc:f2:7e:ea:27:62:b7:5e:12:c6:ca:26:70:2c:5c: 20:db:0a:12:db:0a:ab:17:33:90:02:85:46:2d:51:ff:c5:22: 5c:ec:b7:58:2a:20:37:a1:34:66:55:d5:e4:a5:36:79:ca:6c: 38:be:02:98:16:ce:66:54:4e:d7:08:34:36:92:92:45:a7:85: 44:79:c9:67:5d:bb:ce:77:b9:23:a6:18:5d:ec:84:1f:05:81: 5d:67:50:e7:05:71:77:76:38:34:bf:5a:6a:33:18:3d:14:78: 59:5f:04:94:71:a0:3c:96:2f:c4:b1:c0:63:a1:46:45:9f:57: 3c:18:10:d8:db:d7:52:ce:86:88:98:db:9b:a8:07:b9:9b:0f: 78:2a:79:87:d0:1e:0a:fb:3f:f6:a4:db:b1:c3:fe:98:b8:16: fa:2e:0e:fe:d5:16:86:a8:84:34:45:09:90:eb:4c:00:d4:59: e8:2b:a4:12:64:08:32:5f:d9:bd:3e:9f:60:bd:e9:7c:31:f9: 7c:ed:86:43:7d:8b:0a:5d:48:a2:73:f2:6f:ee:8f:74:1a:b8: 53:4a:3f:87:e9:ae:0d:0a:89:2c:da:8c:9c:28:d6:17:7d:ae: 26:8e:1d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AAJUtqHf7Gt9UHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MWQ2ZjcwNGQtYmZmNi00Yzc2LTlmYjUtZDczM2FlZmY2ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSaQXU1uslobzGKX2eA4JIyhhXtbelq0nLK+ c6QhKGQ24StMmQA8LdfYntAtVC3kGVxDhqGze3TLycNURopZKHRA7arqn+aSBn9h j+juAOK+9TKOAtvuctwAIfLi6yEJqm5d45ybYfGoQUjZN4gqTWNChmvcfWpsVkPa /hGarndTGzDLPv15Km4VKJsfEo3o4QY6IM5p/GSTMCgEKDSmuDKlaccmQzqT62Pa 6Dmj8DtFl3nMau/hu+4qQrJwX1tMPekiZ0w+JvvanLxn5Z2IGu7RiMvRr6OEOz1Z x7cSl/M7+LYR2cPgiCGUk82yS6nZAR1nd2UL2ij6ovsxNO099QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuR7Dx6idNLjm5FcUcXx9nr/bYBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZjZDkyNTYtNmZjZi0z MzJjLWE0NGMtYzY4ZmEwZGE0ZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjyc25DPT9dpJGL++TPraXb51cisszyfuonYrdeEsbKJnAsXCDbChLb CqsXM5AChUYtUf/FIlzst1gqIDehNGZV1eSlNnnKbDi+ApgWzmZUTtcINDaSkkWn hUR5yWddu853uSOmGF3shB8FgV1nUOcFcXd2ODS/WmozGD0UeFlfBJRxoDyWL8Sx wGOhRkWfVzwYENjb11LOhoiY25uoB7mbD3gqeYfQHgr7P/ak27HD/pi4FvouDv7V FoaohDRFCZDrTADUWegrpBJkCDJf2b0+n2C96Xwx+XzthkN9iwpdSKJz8m/uj3Qa uFNKP4fprg0KiSzajJwo1hd9riaOHRA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:31:38 2026 by rpki-client