$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa File: 8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa (raw, json) Hash identifier: TGz6C+FgiUomBT87gyYmK17nllnLsKa7FGahjBIFVvU= Subject key identifier: BC:35:6C:82:4E:9D:77:35:0E:E9:63:89:DC:4B:9E:0E:59:C6:18:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D98BAB288A08A029685671000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 36183 IP address blocks: 172.224.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b2:88:a0:8a:02:96:85:67:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=6bb2e5b6-373f-4aab-85c4-c6d56f840ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c3:3b:68:9e:c0:25:d4:a7:79:5f:88:d0:f8: 68:54:ba:0f:fe:9c:31:ed:8a:9c:97:f0:46:a5:a5: d1:bb:77:54:13:ab:19:7f:df:00:64:ed:b6:38:cb: bf:1e:d1:bb:29:27:66:9b:de:3f:55:61:68:82:b9: 54:8b:e0:a7:12:91:08:b5:06:92:5d:02:14:73:b4: da:1d:28:b8:02:b1:6c:7a:1c:31:26:92:f6:08:41: b4:a6:07:28:1d:56:63:b5:27:1b:ca:ee:cb:9a:4c: f1:b1:d4:af:48:95:05:80:a3:cb:82:bb:9b:77:59: fa:c1:a4:61:a6:40:31:42:b7:f7:4c:71:22:e8:c0: e4:8f:e7:9a:ea:a5:43:9d:29:88:20:2e:17:d6:39: 87:59:01:e6:84:86:41:a9:bb:1d:f9:0a:41:0a:08: a6:9d:14:85:77:4e:78:26:3f:7a:40:78:b7:f6:96: 95:49:8c:9f:fa:42:e7:af:4d:ff:f8:e9:03:6a:a0: 78:25:42:68:47:3e:26:e1:fb:27:89:79:50:52:47: 25:bc:b4:5e:ca:c2:11:22:b9:5e:e1:93:b8:e5:6e: a1:b4:25:fc:97:16:3e:76:35:a0:02:55:3e:4e:5c: 6b:e9:70:93:fc:be:5b:29:40:bf:08:6d:45:b7:34: 37:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:35:6C:82:4E:9D:77:35:0E:E9:63:89:DC:4B:9E:0E:59:C6:18:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:a6:d5:ce:4c:be:7b:9e:5e:7c:83:16:a8:2c:1f:34:87:d0: da:dd:79:c0:2f:0a:d5:09:04:e3:2e:c0:62:37:03:dd:70:48: d9:5b:b9:5b:7d:38:b4:03:d3:95:37:8d:1e:3d:41:5e:b7:db: d4:b1:37:73:83:7f:7c:79:81:86:3a:5f:bb:18:63:c2:cf:e6: 9b:4c:09:65:14:bc:52:ff:24:5c:98:41:96:c9:4e:11:0e:ef: e5:1a:f1:83:d1:3c:1b:ff:8a:91:15:3b:5e:11:2c:b6:e7:63: 12:d9:52:0b:29:15:a2:90:65:86:a8:fb:8f:77:32:1b:ca:d1: 81:fb:8e:e1:4c:3c:3a:9a:b6:a1:0c:48:fc:64:f0:00:b6:dd: 89:14:59:21:de:df:06:c8:43:1c:9b:24:90:1d:b9:52:46:98: 8e:f0:06:97:f6:ed:eb:4a:fc:6f:f4:33:48:ba:07:fa:ac:e4: 1d:96:3d:19:fb:42:ce:85:79:5a:b8:c3:2a:97:88:4c:8b:29: 01:ab:28:1e:58:03:cb:92:27:fc:87:2c:7a:b6:c1:e7:b9:c2: 4a:37:55:dd:15:ad:49:86:bf:7b:fc:32:02:8c:e1:11:da:f9: e3:d4:13:7a:31:26:8d:eb:98:e8:50:1d:66:4d:4a:73:2f:d3: f2:e8:da:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurKIoIoCloVnEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk NmJiMmU1YjYtMzczZi00YWFiLTg1YzQtYzZkNTZmODQwZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMM7aJ7AJdSneV+I0PhoVLoP/pwx7Yqcl/BG paXRu3dUE6sZf98AZO22OMu/HtG7KSdmm94/VWFogrlUi+CnEpEItQaSXQIUc7Ta HSi4ArFsehwxJpL2CEG0pgcoHVZjtScbyu7LmkzxsdSvSJUFgKPLgrubd1n6waRh pkAxQrf3THEi6MDkj+ea6qVDnSmIIC4X1jmHWQHmhIZBqbsd+QpBCgimnRSFd054 Jj96QHi39paVSYyf+kLnr03/+OkDaqB4JUJoRz4m4fsniXlQUkclvLReysIRIrle 4ZO45W6htCX8lxY+djWgAlU+Tlxr6XCT/L5bKUC/CG1FtzQ3bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLw1bIJOnXc1DuljidxLng5ZxhgsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE5NmY4YjYtNWJkNi0z Y2IzLTljOTQtY2NhODdmNDQyNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIam1c5MvnueXnyDFqgsHzSH0NrdecAvCtUJBOMuwGI3A91wSNlbuVt9 OLQD05U3jR49QV6329SxN3ODf3x5gYY6X7sYY8LP5ptMCWUUvFL/JFyYQZbJThEO 7+Ua8YPRPBv/ipEVO14RLLbnYxLZUgspFaKQZYao+493MhvK0YH7juFMPDqatqEM SPxk8AC23YkUWSHe3wbIQxybJJAduVJGmI7wBpf27etK/G/0M0i6B/qs5B2WPRn7 Qs6FeVq4wyqXiEyLKQGrKB5YA8uSJ/yHLHq2wee5wko3Vd0VrUmGv3v8MgKM4RHa +ePUE3oxJo3rmOhQHWZNSnMv0/Lo2q0= -----END CERTIFICATE-----Generated at Wed May 13 06:50:03 2026 by rpki-client