$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa File: 970cb531-2a50-39b8-9486-6ed2b0b9d958.roa (raw, json) Hash identifier: cLlJJ0RMJcjx/+P/UYCpO0cRCJVu6SaVUVB543xink0= Subject key identifier: 8E:EC:4B:EF:C8:FA:BF:03:9E:6E:C1:AD:B8:39:9A:AF:0D:1D:59:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3F64F65F1805C49A966C7E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f6:5f:18:05:c4:9a:96:6c:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=bc9065fe-830b-4480-8681-4aff1fd2c697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:65:1a:22:54:b3:2b:77:ee:0d:4e:b8:ed:6c: 3e:4a:70:42:b7:3a:0e:2f:fd:5a:0a:32:a7:88:30: 2c:53:fb:81:11:60:cf:c8:40:5c:f7:ba:aa:d3:5b: e4:b2:61:39:e9:8e:71:4b:74:d8:a2:d9:32:ad:1c: 2c:8d:c9:11:5a:74:fc:ca:09:4a:a9:69:5b:00:22: 8e:fd:39:a0:05:99:41:b9:ca:f2:87:af:44:de:41: d9:c3:93:d3:38:19:7c:97:b0:95:7c:b6:ec:60:75: a1:a0:96:46:17:94:62:96:24:ff:e3:23:32:e7:59: 01:65:bc:bf:7f:f2:b1:19:36:ac:48:28:ed:d8:d5: c4:c3:f1:73:10:95:df:ac:2a:78:5f:1b:6a:6a:f0: ba:0c:b4:f7:9d:51:1b:92:ab:cf:10:db:b0:03:0d: 5f:9b:26:45:9f:f3:84:1a:8f:ea:bf:20:00:87:3b: 46:84:ab:a8:8d:38:48:b8:f3:e0:7f:7f:4c:99:ad: ea:38:b7:a1:03:8a:72:39:d6:a8:2b:75:bc:b9:59: 21:05:a7:77:96:49:8b:8c:db:1e:9a:55:57:ce:b3: 15:b4:1e:ac:9d:61:18:8b:ad:b9:7f:77:03:48:8a: 63:d3:a0:42:37:93:92:3a:87:61:44:f5:e3:23:06: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:4B:EF:C8:FA:BF:03:9E:6E:C1:AD:B8:39:9A:AF:0D:1D:59:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:33:92:ea:b2:76:6e:e2:2f:c7:3f:f3:7b:85:60:e4:90:56: 21:ee:cc:a4:b2:02:60:b0:13:d7:05:8d:18:5e:7f:a9:85:76: 86:e3:01:36:2e:a0:38:1d:42:51:35:80:d1:c5:76:46:68:b1: 31:20:d8:e1:1e:45:2d:af:85:e4:4b:1d:b8:0b:a9:b9:7b:08: 81:81:63:d8:68:32:ae:60:3e:a3:94:4c:76:b7:f2:91:b6:63: 63:0b:23:ca:ef:11:af:c4:a9:98:b9:f0:33:00:6b:18:55:22: bb:50:ae:8a:de:11:8c:1b:21:4e:dc:91:a1:02:ff:51:8c:04: 56:af:e5:63:6a:35:d5:47:89:c4:f4:d5:90:5c:33:2a:10:bb: 04:4a:2a:c2:d5:84:6c:c0:19:65:10:2a:eb:11:61:e1:4a:d0: 72:da:37:60:8b:76:5d:c0:38:14:d3:a3:a4:50:24:a4:21:79: 0a:7e:40:db:f3:40:cc:66:34:f1:f3:4c:1b:f6:a6:73:ca:d7: 24:6b:5c:9b:76:84:4f:a4:98:b3:46:93:71:94:ba:5b:ed:71: 6f:8e:ce:9e:8b:61:33:ac:6a:9f:b2:a6:12:11:16:16:a3:93: 9b:cf:ed:bc:df:14:18:69:75:91:1f:d3:2a:7f:31:db:22:7b: 54:74:ff:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPZfGAXEmpZsfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YmM5MDY1ZmUtODMwYi00NDgwLTg2ODEtNGFmZjFmZDJjNjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmUaIlSzK3fuDU647Ww+SnBCtzoOL/1aCjKn iDAsU/uBEWDPyEBc97qq01vksmE56Y5xS3TYotkyrRwsjckRWnT8yglKqWlbACKO /TmgBZlBucryh69E3kHZw5PTOBl8l7CVfLbsYHWhoJZGF5RiliT/4yMy51kBZby/ f/KxGTasSCjt2NXEw/FzEJXfrCp4XxtqavC6DLT3nVEbkqvPENuwAw1fmyZFn/OE Go/qvyAAhztGhKuojThIuPPgf39Mma3qOLehA4pyOdaoK3W8uVkhBad3lkmLjNse mlVXzrMVtB6snWEYi625f3cDSIpj06BCN5OSOodhRPXjIwap+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7sS+/I+r8Dnm7Brbg5mq8NHVntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTcwY2I1MzEtMmE1MC0z OWI4LTk0ODYtNmVkMmIwYjlkOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAzkuqydm7iL8c/83uFYOSQViHuzKSyAmCwE9cFjRhef6mFdobjATYu oDgdQlE1gNHFdkZosTEg2OEeRS2vheRLHbgLqbl7CIGBY9hoMq5gPqOUTHa38pG2 Y2MLI8rvEa/EqZi58DMAaxhVIrtQroreEYwbIU7ckaEC/1GMBFav5WNqNdVHicT0 1ZBcMyoQuwRKKsLVhGzAGWUQKusRYeFK0HLaN2CLdl3AOBTTo6RQJKQheQp+QNvz QMxmNPHzTBv2pnPK1yRrXJt2hE+kmLNGk3GUulvtcW+Ozp6LYTOsap+yphIRFhaj k5vP7bzfFBhpdZEf0yp/Mdsie1R0//g= -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:04 2026 by rpki-client