$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa File: b520fbe5-cd59-3561-89ef-ae42073c89f8.roa (raw, json) Hash identifier: ayfn33zi6FF28V/k7qCVnesHBXOjbqPjV1d3FMJE2f4= Subject key identifier: CE:D8:B2:98:71:43:17:D7:94:D8:A4:D2:58:B0:F5:99:95:32:39:27 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3F650029C7E30FFC05AC5980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:65:00:29:c7:e3:0f:fc:05:ac:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=69180cc4-53aa-4cda-a7bd-419e58abf77f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c6:a9:19:d1:5f:21:28:a6:9a:f4:80:32:3e: 3b:4f:d6:2d:6d:3a:91:99:8e:bf:6b:4b:01:bf:81: 84:ff:76:92:fa:22:13:ad:7e:62:c5:2d:1e:b7:9c: 7e:5b:7d:7b:fa:2c:94:e5:a5:f8:cd:ec:09:ed:ab: 95:82:42:e3:2f:96:72:05:93:21:d5:7b:8e:b8:86: c7:0b:ad:3e:1b:90:ba:31:92:ff:2c:91:15:52:33: 26:24:a2:1a:d8:14:1b:4e:ea:a7:df:19:bb:96:b1: a3:4f:82:f2:e4:2a:44:d9:40:d0:d5:dd:07:92:00: fd:89:21:6c:fa:9e:66:3c:8f:fb:c4:1b:72:23:3a: a3:73:23:00:06:52:2d:02:ec:cf:2b:c4:30:e0:66: 62:44:31:16:0d:cf:c8:cc:e6:78:88:2c:74:d7:65: 04:6b:0a:98:a9:49:3c:77:f8:ce:bd:9a:e0:1a:af: 38:48:ee:a8:81:66:73:dc:39:33:7f:0f:42:d1:76: 7b:1e:a8:97:ba:ab:d0:6a:b5:29:86:f5:2c:3f:c2: 07:5b:47:41:85:60:47:b0:bd:06:7f:3e:51:79:48: 93:d4:61:3d:42:8f:eb:06:70:6f:b0:da:7b:1e:b4: 9b:ba:63:be:8e:9f:46:7f:6c:6e:80:b5:12:7d:1d: fb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D8:B2:98:71:43:17:D7:94:D8:A4:D2:58:B0:F5:99:95:32:39:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b520fbe5-cd59-3561-89ef-ae42073c89f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b1:c0:70:da:51:13:61:91:4c:87:41:47:a3:0d:fc:7c:63: d0:9b:c6:b9:cf:d5:f5:b5:ed:fd:79:56:a2:77:85:92:db:d1: b9:9c:85:b2:e1:01:1e:91:23:2a:8c:af:d1:52:50:48:78:b9: 16:f9:15:7d:be:1f:dd:e5:91:3d:7e:5b:08:3f:77:1b:9b:28: 79:a4:2b:58:c4:71:f6:a2:17:bc:c3:9a:82:1e:af:c9:e5:74: 88:59:e3:cc:14:8c:0b:6d:0e:3c:e0:ec:d9:9e:66:b4:4b:7d: 2d:af:b2:e3:1a:f7:a1:ca:40:45:e2:7d:10:a5:e6:8c:8e:ea: a7:94:34:ae:fe:90:d8:70:c2:66:25:b1:6e:79:4c:3a:a5:06: 06:12:e7:dc:e8:46:be:21:f3:bd:9c:5c:fd:39:0c:db:66:a6: 89:07:51:74:4a:50:4a:f7:ad:b3:05:51:62:ae:eb:66:65:8d: 4f:8d:3b:76:a6:d6:c7:65:77:41:b6:34:9a:f1:67:cd:3d:27: 0c:68:8c:aa:ba:18:98:23:fc:4f:55:8d:be:69:3e:2b:e6:50: 1a:71:e4:f7:d5:cb:6f:fa:cb:13:04:2d:90:77:a3:89:87:59: 43:12:43:ed:dd:9f:7b:f2:f4:a9:b6:24:1b:3d:e5:e8:be:92: 2a:65:37:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZQApx+MP/AWsWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NjkxODBjYzQtNTNhYS00Y2RhLWE3YmQtNDE5ZTU4YWJmNzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMapGdFfISimmvSAMj47T9YtbTqRmY6/a0sB v4GE/3aS+iITrX5ixS0et5x+W317+iyU5aX4zewJ7auVgkLjL5ZyBZMh1XuOuIbH C60+G5C6MZL/LJEVUjMmJKIa2BQbTuqn3xm7lrGjT4Ly5CpE2UDQ1d0HkgD9iSFs +p5mPI/7xBtyIzqjcyMABlItAuzPK8Qw4GZiRDEWDc/IzOZ4iCx012UEawqYqUk8 d/jOvZrgGq84SO6ogWZz3Dkzfw9C0XZ7HqiXuqvQarUphvUsP8IHW0dBhWBHsL0G fz5ReUiT1GE9Qo/rBnBvsNp7HrSbumO+jp9Gf2xugLUSfR37UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7YsphxQxfXlNik0liw9ZmVMjknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjUyMGZiZTUtY2Q1OS0z NTYxLTg5ZWYtYWU0MjA3M2M4OWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFixwHDaURNhkUyHQUejDfx8Y9CbxrnP1fW17f15VqJ3hZLb0bmchbLh AR6RIyqMr9FSUEh4uRb5FX2+H93lkT1+Wwg/dxubKHmkK1jEcfaiF7zDmoIer8nl dIhZ48wUjAttDjzg7NmeZrRLfS2vsuMa96HKQEXifRCl5oyO6qeUNK7+kNhwwmYl sW55TDqlBgYS59zoRr4h872cXP05DNtmpokHUXRKUEr3rbMFUWKu62ZljU+NO3am 1sdld0G2NJrxZ809JwxojKq6GJgj/E9Vjb5pPivmUBpx5PfVy2/6yxMELZB3o4mH WUMSQ+3dn3vy9Km2JBs95ei+kiplN14= -----END CERTIFICATE-----Generated at Thu Mar 26 05:20:49 2026 by rpki-client