$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa File: cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa (raw, json) Hash identifier: vARfgywLXgjjTdrqu6R7cZUl5RzMb1BVqvuT7XPcEss= Subject key identifier: 5B:CB:83:86:4E:C1:D0:E4:6C:5E:72:00:E1:B2:F1:66:F9:A5:78:6B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3F64F701B6F69241FB300F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f7:01:b6:f6:92:41:fb:30:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=a06c47cf-1531-42f1-9296-4af96d8c4f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b4:dc:ca:43:74:41:cf:b9:92:cf:38:6c:b0: 81:b4:e3:29:27:e2:e9:8b:65:7c:fa:c6:0c:06:45: 96:4b:69:b6:47:3f:d2:73:5c:4a:70:8a:d6:0f:77: ae:6f:c0:dd:28:63:e7:3b:26:af:fa:e7:5d:11:1f: 32:3f:14:86:64:10:cc:b7:18:ce:4c:a2:6c:d0:46: 09:57:9f:06:4e:50:05:01:29:34:bc:c2:50:de:6d: 3a:89:7d:a7:73:7e:6c:91:28:04:98:2c:9a:62:14: 78:49:b9:9b:47:b1:19:cf:38:ad:f8:2d:2f:77:7e: db:5e:1f:84:57:5b:ff:b3:b1:7e:86:36:ff:88:85: 05:44:72:f5:e0:0c:c3:b3:1a:57:5e:92:f4:b8:c7: 77:ea:6d:b3:42:76:51:bc:89:17:2e:21:51:5f:f5: a7:13:c8:3e:e3:2a:c7:bf:74:54:8a:87:39:62:42: f0:11:75:ca:54:5e:b4:7a:7d:99:17:00:13:88:49: af:eb:bc:73:0a:f0:ac:bb:ed:c7:a2:e1:88:49:1a: 93:3c:ff:f0:10:79:c5:48:91:e5:f2:9e:cb:4b:f8: d9:e6:9d:dc:54:09:d8:74:18:2b:62:aa:80:83:c6: f2:e7:92:62:41:84:c2:d3:98:60:77:7a:51:5a:2a: 98:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:CB:83:86:4E:C1:D0:E4:6C:5E:72:00:E1:B2:F1:66:F9:A5:78:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fd:69:a5:65:11:8d:2b:3c:46:ee:eb:cc:c1:00:a0:25:ca: d5:11:43:08:dd:ad:81:ed:e2:04:53:47:28:6c:21:e9:5f:1d: 21:40:e8:39:a4:0c:e9:bb:56:cc:b7:4d:3e:1c:c3:9a:a0:98: 21:68:32:db:49:3c:91:e4:a8:3f:6a:ce:de:10:d0:69:76:2e: f5:d1:c6:67:82:53:04:b6:70:53:55:5a:c6:9f:0f:86:bc:0f: cb:a5:f5:0d:9a:dc:ff:7d:d1:45:7a:e2:34:d3:98:af:b7:4c: ae:7c:00:3a:aa:b4:e6:79:67:02:22:b3:48:dd:0d:4f:bb:36: b1:74:56:4a:ae:f2:08:e7:a4:54:eb:be:65:3a:a1:d8:80:49: a7:fe:8d:6f:db:e6:04:e5:a3:00:8d:11:a9:0f:f8:40:00:39: 9f:7b:4f:c2:6f:b9:bd:ec:8c:01:8e:69:fd:36:18:42:73:af: 5c:f2:fa:76:0f:d8:ef:71:29:72:32:c3:10:29:cb:4e:2d:5b: 40:d0:80:d4:aa:19:d3:2d:12:c7:f7:09:93:f3:fe:ac:42:5a: 54:b3:0f:a6:63:bb:0f:9c:1e:83:e3:c1:1a:2a:f1:21:c0:43: fc:20:5e:22:66:93:12:3d:4f:8c:d9:6e:d8:27:b9:c0:c5:c5: f6:fb:f9:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPcBtvaSQfswD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk YTA2YzQ3Y2YtMTUzMS00MmYxLTkyOTYtNGFmOTZkOGM0ZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7TcykN0Qc+5ks84bLCBtOMpJ+Lpi2V8+sYM BkWWS2m2Rz/Sc1xKcIrWD3eub8DdKGPnOyav+uddER8yPxSGZBDMtxjOTKJs0EYJ V58GTlAFASk0vMJQ3m06iX2nc35skSgEmCyaYhR4SbmbR7EZzzit+C0vd37bXh+E V1v/s7F+hjb/iIUFRHL14AzDsxpXXpL0uMd36m2zQnZRvIkXLiFRX/WnE8g+4yrH v3RUioc5YkLwEXXKVF60en2ZFwATiEmv67xzCvCsu+3HouGISRqTPP/wEHnFSJHl 8p7LS/jZ5p3cVAnYdBgrYqqAg8by55JiQYTC05hgd3pRWiqYHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvLg4ZOwdDkbF5yAOGy8Wb5pXhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZkZGNjYmItZmViMy0z MzQ2LTg1ZDQtM2E3Y2I0OWQxY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj9aaVlEY0rPEbu68zBAKAlytURQwjdrYHt4gRTRyhsIelfHSFA6Dmk DOm7Vsy3TT4cw5qgmCFoMttJPJHkqD9qzt4Q0Gl2LvXRxmeCUwS2cFNVWsafD4a8 D8ul9Q2a3P990UV64jTTmK+3TK58ADqqtOZ5ZwIis0jdDU+7NrF0Vkqu8gjnpFTr vmU6odiASaf+jW/b5gTlowCNEakP+EAAOZ97T8Jvub3sjAGOaf02GEJzr1zy+nYP 2O9xKXIywxApy04tW0DQgNSqGdMtEsf3CZPz/qxCWlSzD6Zjuw+cHoPjwRoq8SHA Q/wgXiJmkxI9T4zZbtgnucDFxfb7+Zg= -----END CERTIFICATE-----Generated at Thu Mar 26 10:40:34 2026 by rpki-client