$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97e8db84-97cf-3e45-9e36-e4dd4580f4a9.roa File: 97e8db84-97cf-3e45-9e36-e4dd4580f4a9.roa (raw, json) Hash identifier: JIHSm4kX2M3w/R3WR9wY+RG8/eOlZqpKk3ky+O2irx0= Subject key identifier: 1D:E1:2D:FF:B2:6E:A1:59:1E:39:5A:18:40:37:A8:18:C7:2A:88:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3F64F61E0AF092555A689D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97e8db84-97cf-3e45-9e36-e4dd4580f4a9.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f6:1e:0a:f0:92:55:5a:68:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=9ff4f2a2-4d1e-4684-91ad-08dfa351f190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:d9:b3:5a:8f:e9:74:9a:cc:ed:7f:ff:d0: 02:90:80:68:63:e3:9f:b4:9f:cf:5a:8d:67:1c:0c: cd:dd:38:8a:f3:37:e7:18:8d:b5:93:af:96:e6:58: ce:fb:32:c2:22:65:8a:12:53:ca:ba:7b:d7:5a:ff: 8e:fa:88:05:43:9f:cc:4c:e6:08:2b:56:db:4b:b8: 06:97:ae:be:40:29:96:f2:a6:f8:a7:92:40:25:aa: a6:a7:50:e7:55:f7:33:80:a3:ca:09:7f:cc:c2:dd: e6:0e:42:5f:71:15:46:0f:91:65:dd:72:6b:bb:82: e5:c7:da:64:53:6e:40:00:ed:79:f2:5d:81:cf:0a: 67:2b:6f:20:f6:0f:f7:0c:e4:13:43:54:01:67:da: 64:a5:1c:39:5b:3a:c5:21:05:50:37:c8:e6:d2:16: 73:4c:2a:58:31:16:51:4e:14:63:24:b2:4d:ec:45: f1:5c:dd:e3:fa:d4:b5:7d:a9:b9:54:84:64:2b:5a: e2:d2:1f:b7:09:24:7e:f2:c8:e7:db:c8:17:fb:0f: 23:4e:72:9d:8c:f8:4d:fe:23:9b:b4:ce:6b:e6:42: 2e:56:2e:8c:d5:a9:01:6f:e7:ab:9f:93:65:d1:bc: da:a8:84:a7:21:73:ac:19:ae:5f:3c:f8:b7:36:50: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E1:2D:FF:B2:6E:A1:59:1E:39:5A:18:40:37:A8:18:C7:2A:88:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97e8db84-97cf-3e45-9e36-e4dd4580f4a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:a3:80:21:6c:84:a3:50:b4:d1:ff:03:36:cc:71:c5:cf:d8: 25:ed:88:27:02:9b:a5:52:84:f8:19:1e:e5:da:8d:67:9b:bf: 55:bb:64:e5:36:c2:80:8e:c5:3b:d1:28:68:fc:93:01:62:16: 13:f7:10:68:95:9d:bd:09:24:de:36:f0:d9:af:d8:75:f9:17: 2a:6f:4a:8a:fb:42:b3:5f:2e:27:05:48:54:e1:26:85:25:2f: e0:60:c2:27:0d:6c:dc:3d:a8:cf:b6:40:35:dc:b5:65:18:fa: 4a:b7:39:99:ee:93:33:a7:bf:d1:7c:d2:36:0c:64:26:e4:6f: d3:7b:af:e6:5b:0e:5d:3b:7c:d6:36:ce:78:16:8a:df:cd:0b: e3:18:d4:2a:1c:cd:86:d4:81:dc:29:3f:58:eb:01:02:05:18: 61:52:d1:df:f3:87:63:a3:4a:a3:5c:ef:a9:3a:61:de:85:28: e4:7a:06:d2:0b:47:cc:4d:f4:69:9d:11:df:65:96:8f:e2:85: 41:f5:9d:d2:17:e9:72:78:3d:9a:88:ea:e5:be:72:ff:9b:cc: 0f:32:f4:b3:3a:06:dc:37:6e:ac:3d:cc:09:f9:de:94:8a:d9: e8:33:02:48:06:ca:8a:d7:1b:fd:95:b5:de:d4:fb:4b:0b:b3: d5:4e:4a:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPYeCvCSVVponQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk OWZmNGYyYTItNGQxZS00Njg0LTkxYWQtMDhkZmEzNTFmMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdHZs1qP6XSazO1//9ACkIBoY+OftJ/PWo1n HAzN3TiK8zfnGI21k6+W5ljO+zLCImWKElPKunvXWv+O+ogFQ5/MTOYIK1bbS7gG l66+QCmW8qb4p5JAJaqmp1DnVfczgKPKCX/Mwt3mDkJfcRVGD5Fl3XJru4Llx9pk U25AAO158l2BzwpnK28g9g/3DOQTQ1QBZ9pkpRw5WzrFIQVQN8jm0hZzTCpYMRZR ThRjJLJN7EXxXN3j+tS1fam5VIRkK1ri0h+3CSR+8sjn28gX+w8jTnKdjPhN/iOb tM5r5kIuVi6M1akBb+ern5Nl0bzaqISnIXOsGa5fPPi3NlBrjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3hLf+ybqFZHjlaGEA3qBjHKog1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTdlOGRiODQtOTdjZi0z ZTQ1LTllMzYtZTRkZDQ1ODBmNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABajgCFshKNQtNH/AzbMccXP2CXtiCcCm6VShPgZHuXajWebv1W7ZOU2 woCOxTvRKGj8kwFiFhP3EGiVnb0JJN428Nmv2HX5FypvSor7QrNfLicFSFThJoUl L+BgwicNbNw9qM+2QDXctWUY+kq3OZnukzOnv9F80jYMZCbkb9N7r+ZbDl07fNY2 zngWit/NC+MY1CoczYbUgdwpP1jrAQIFGGFS0d/zh2OjSqNc76k6Yd6FKOR6BtIL R8xN9GmdEd9llo/ihUH1ndIX6XJ4PZqI6uW+cv+bzA8y9LM6Btw3bqw9zAn53pSK 2egzAkgGyorXG/2Vtd7U+0sLs9VOSgQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:35 2026 by rpki-client