$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa File: 8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa (raw, json) Hash identifier: 3eri1Y5QD0Vq5mqlpiLYAsLeJmY0vJI7rVYzr6+khk8= Subject key identifier: 43:C1:48:35:7B:FC:2B:C6:BC:44:D8:43:47:66:C6:D5:BD:C7:3A:F4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D44FA4B5EABCEF03D77BE67C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 63949 IP address blocks: 172.236.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:4b:5e:ab:ce:f0:3d:77:be:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=ccb16632-c04b-4832-b818-9f8395691051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:35:5d:70:f8:68:2a:c1:d0:d9:e4:97:1c: ac:76:aa:fa:3f:13:b8:6b:28:9e:99:cb:5e:e5:37: 8e:b0:ce:a5:6c:0e:9c:07:26:22:21:34:cf:0e:c7: f1:d3:27:5d:68:a6:88:5d:0b:e2:be:39:b4:e8:18: 5b:32:5f:c2:35:8a:78:95:56:dc:59:f8:67:6e:28: 28:52:f5:e0:0a:42:73:5d:fc:ad:a1:ef:34:9e:c1: 91:5a:89:68:96:53:16:95:94:ff:78:ef:41:ac:ca: 47:05:8c:3a:bf:44:97:2c:ec:1e:41:0a:53:ff:83: c7:e3:80:dd:d8:b1:0d:40:45:b0:72:37:59:df:49: 73:2e:02:63:6f:4a:0a:03:d9:82:dc:63:00:8c:ac: c1:a9:44:b2:83:b1:c5:89:0e:a9:8a:be:3a:d5:c2: 8b:5a:6f:72:cb:be:d9:01:fa:f4:ed:3d:14:e7:3f: 61:1a:7a:3e:84:e2:be:92:e9:89:d6:83:2f:e1:07: 02:85:52:59:3f:82:97:88:84:c6:bc:a1:19:3a:ec: bf:0b:14:74:82:64:64:3c:78:0c:a5:05:9a:cb:47: ef:39:e6:fa:88:0e:ca:6d:b4:d7:5c:1f:55:28:04: 4b:42:5c:3d:c0:78:30:d5:9b:06:59:ff:a1:14:b7: ed:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:48:35:7B:FC:2B:C6:BC:44:D8:43:47:66:C6:D5:BD:C7:3A:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8b239dff-6b17-3b05-aa3f-e7b82a0dea95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:7a:8d:7d:22:b3:55:d1:0d:cc:c3:60:b7:20:18:9a:57:a5: a8:48:a3:f5:0b:9a:7c:66:a5:88:80:7b:3c:1d:24:3c:ad:99: b9:f0:b2:11:79:9a:5f:22:9a:36:b2:8c:b5:bd:40:24:ea:aa: 9b:37:e8:5c:f7:41:2a:e9:07:28:e8:a4:57:63:58:f4:ec:be: 40:76:1b:ab:4d:7a:b7:97:f9:25:0f:41:23:86:e7:74:f4:58: 84:ba:9d:b0:30:b9:e0:17:c3:0c:ff:81:c9:5d:52:34:99:ee: a7:64:08:4f:1c:71:af:7d:f7:6b:e1:49:dc:8e:e9:43:d7:ce: 74:3d:0e:b5:e4:ef:85:b6:ff:6f:7a:a5:c4:8f:d5:c5:de:90: 74:41:7b:e3:c1:c6:62:a6:d4:a9:2c:3d:3d:d8:0c:ec:29:d8: a3:31:53:93:6b:16:c5:78:a5:76:3b:16:a1:37:b3:e1:17:9a: ec:d3:3d:84:b7:92:28:15:4a:3d:25:ed:10:38:30:26:c9:9a: fd:c0:0e:af:4d:55:48:43:ba:33:7e:69:bb:03:9b:b6:55:3c: a8:0a:ba:13:54:52:b9:27:80:2b:26:c7:d3:00:85:df:4c:eb: 27:04:2c:b8:a7:67:0f:ee:97:d7:54:d9:30:a4:46:d3:67:c5: bc:e1:30:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+kteq87wPXe+Z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk Y2NiMTY2MzItYzA0Yi00ODMyLWI4MTgtOWY4Mzk1NjkxMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+k1XXD4aCrB0Nnklxysdqr6PxO4ayiemcte 5TeOsM6lbA6cByYiITTPDsfx0yddaKaIXQvivjm06BhbMl/CNYp4lVbcWfhnbigo UvXgCkJzXfytoe80nsGRWolollMWlZT/eO9BrMpHBYw6v0SXLOweQQpT/4PH44Dd 2LENQEWwcjdZ30lzLgJjb0oKA9mC3GMAjKzBqUSyg7HFiQ6pir461cKLWm9yy77Z Afr07T0U5z9hGno+hOK+kumJ1oMv4QcChVJZP4KXiITGvKEZOuy/CxR0gmRkPHgM pQWay0fvOeb6iA7KbbTXXB9VKARLQlw9wHgw1ZsGWf+hFLftFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPBSDV7/CvGvETYQ0dmxtW9xzr0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGIyMzlkZmYtNmIxNy0z YjA1LWFhM2YtZTdiODJhMGRlYTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJ6jX0is1XRDczDYLcgGJpXpahIo/ULmnxmpYiAezwdJDytmbnwshF5 ml8imjayjLW9QCTqqps36Fz3QSrpByjopFdjWPTsvkB2G6tNereX+SUPQSOG53T0 WIS6nbAwueAXwwz/gcldUjSZ7qdkCE8cca9992vhSdyO6UPXznQ9DrXk74W2/296 pcSP1cXekHRBe+PBxmKm1KksPT3YDOwp2KMxU5NrFsV4pXY7FqE3s+EXmuzTPYS3 kigVSj0l7RA4MCbJmv3ADq9NVUhDujN+absDm7ZVPKgKuhNUUrkngCsmx9MAhd9M 6ycELLinZw/ul9dU2TCkRtNnxbzhMBg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:20 2026 by rpki-client