$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d301defd-1d3c-366f-9ab4-5476d5e65088.roa File: d301defd-1d3c-366f-9ab4-5476d5e65088.roa (raw, json) Hash identifier: RVttVVmc0LGdrN8FztrHj3QXPnzAxj1bBTBQ1uoqZEQ= Subject key identifier: A9:A0:71:45:7E:1C:55:7E:7F:B8:C8:CF:37:FE:FA:B0:2D:74:8F:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D39CF93A256A058B26329E680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d301defd-1d3c-366f-9ab4-5476d5e65088.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:93:a2:56:a0:58:b2:63:29:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=0a1ae3dc-4c7f-4852-bde3-e49e7911a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3e:28:12:06:c5:e4:3b:aa:5c:a7:a0:06:c0: 83:68:b5:ad:f0:01:b0:ca:71:fd:c7:ce:7c:62:d1: e8:55:56:fd:6d:cf:61:c4:c3:36:77:ac:ec:70:ac: 95:a9:b1:6b:a5:06:f5:fe:fe:6a:35:53:2e:d4:72: af:27:08:e1:a9:5f:82:3a:3b:c1:01:aa:be:ca:fc: a4:e2:49:5f:59:c9:f0:d9:f6:55:df:7c:ab:95:32: c9:87:bd:c6:21:f2:6d:85:1f:69:c7:46:7d:03:1b: b8:82:a0:bc:98:db:e8:2a:18:bc:33:fa:28:94:73: 8a:b8:22:98:df:75:5a:3b:04:8c:3d:72:48:e4:d7: eb:5f:4e:7e:53:3f:c0:b2:ed:1f:f7:38:2a:48:08: e9:41:8d:a6:76:ff:37:81:22:83:c2:f3:48:e4:8d: 11:e5:7a:bf:32:40:2f:ab:63:8b:91:d6:24:2d:0a: d7:59:3f:83:2a:b1:0e:74:ca:b6:a0:02:bb:8d:e1: cd:9a:79:80:91:8d:96:60:a5:73:4c:c5:b8:f9:f4: 52:1b:0e:a7:de:ba:e3:d6:f7:66:3b:d0:35:06:e2: f2:98:36:65:0e:14:91:c5:d1:c0:50:91:8a:3c:00: 85:7c:96:54:8d:c0:9d:b5:81:43:57:2c:5c:9e:8a: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A0:71:45:7E:1C:55:7E:7F:B8:C8:CF:37:FE:FA:B0:2D:74:8F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d301defd-1d3c-366f-9ab4-5476d5e65088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:38:42:70:2a:15:dd:7a:ca:eb:d0:92:1e:20:2e:8a:4a:72: 44:6c:3c:69:d5:42:71:bb:f7:db:ef:2c:cb:53:f4:77:a6:8e: 32:78:9c:f3:96:ff:a8:20:8b:98:40:55:63:2b:6c:38:64:87: e1:dc:f2:a6:f0:0f:c9:2a:56:f0:23:02:b6:58:a3:2c:df:13: 4d:ab:63:e9:15:a0:6b:b7:b3:8b:11:35:cd:e4:5b:07:83:95: 96:e8:11:8d:9c:09:0b:54:09:9c:3e:ae:c3:5e:a8:4a:af:ef: 19:de:25:32:e4:00:5a:15:50:b8:be:f8:91:94:95:75:51:c2: 3a:79:1c:63:9d:e0:3a:23:cb:06:e3:24:b0:6c:d1:df:de:82: 06:92:2c:5e:02:82:d2:49:c2:23:57:1a:3f:85:77:dc:d6:0d: 21:91:92:37:78:fa:ea:7f:98:c5:31:38:fd:32:a5:10:ab:b0: bd:c2:b2:25:ad:63:c6:4f:90:3b:d0:4e:fa:5b:ed:e2:d7:e5: ea:3a:68:a0:30:5b:4f:06:f8:84:16:8f:af:dd:a7:a7:e8:30: 22:ad:82:01:b6:70:ab:e1:78:96:74:fb:34:3b:1c:24:43:df: 65:14:dc:47:e6:b8:26:30:5d:f0:93:99:33:d8:7d:c0:9d:0b: 97:c3:23:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5OiVqBYsmMp5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MGExYWUzZGMtNGM3Zi00ODUyLWJkZTMtZTQ5ZTc5MTFhM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT4oEgbF5DuqXKegBsCDaLWt8AGwynH9x858 YtHoVVb9bc9hxMM2d6zscKyVqbFrpQb1/v5qNVMu1HKvJwjhqV+COjvBAaq+yvyk 4klfWcnw2fZV33yrlTLJh73GIfJthR9px0Z9Axu4gqC8mNvoKhi8M/oolHOKuCKY 33VaOwSMPXJI5NfrX05+Uz/Asu0f9zgqSAjpQY2mdv83gSKDwvNI5I0R5Xq/MkAv q2OLkdYkLQrXWT+DKrEOdMq2oAK7jeHNmnmAkY2WYKVzTMW4+fRSGw6n3rrj1vdm O9A1BuLymDZlDhSRxdHAUJGKPACFfJZUjcCdtYFDVyxcnorffwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmgcUV+HFV+f7jIzzf++rAtdI8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDMwMWRlZmQtMWQzYy0z NjZmLTlhYjQtNTQ3NmQ1ZTY1MDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk4QnAqFd16yuvQkh4gLopKckRsPGnVQnG799vvLMtT9HemjjJ4nPOW /6ggi5hAVWMrbDhkh+Hc8qbwD8kqVvAjArZYoyzfE02rY+kVoGu3s4sRNc3kWweD lZboEY2cCQtUCZw+rsNeqEqv7xneJTLkAFoVULi++JGUlXVRwjp5HGOd4Dojywbj JLBs0d/eggaSLF4CgtJJwiNXGj+Fd9zWDSGRkjd4+up/mMUxOP0ypRCrsL3CsiWt Y8ZPkDvQTvpb7eLX5eo6aKAwW08G+IQWj6/dp6foMCKtggG2cKvheJZ0+zQ7HCRD 32UU3EfmuCYwXfCTmTPYfcCdC5fDI5A= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:23 2026 by rpki-client