$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa File: d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa (raw, json) Hash identifier: ruRKeGCTiwwqajz0s7Un3MvSkgUyfkL1Q4T7o7w3kGI= Subject key identifier: 4B:B4:31:7D:C4:10:87:C2:1D:FD:2C:11:9B:94:6D:51:A7:D7:E6:66 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3DFFCE5D959A53785435F300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36183 IP address blocks: 172.225.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ce:5d:95:9a:53:78:54:35:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=18795f3e-11f7-42a1-83f7-c8e4b54b3978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b7:a7:b3:44:30:d5:66:7c:d3:1a:8f:4c:f5: e0:51:94:ef:ff:35:19:cf:c9:3a:3f:7e:83:a5:45: 0d:a4:ed:81:c2:87:dd:d2:46:c0:38:de:02:00:0f: b5:7d:a3:9e:6c:72:01:59:70:9a:d0:34:a0:55:02: 2f:f0:01:9e:f2:5e:a9:2e:1a:dc:c3:22:d0:f0:fb: ed:e4:02:f0:fb:a7:ff:03:5f:15:db:28:75:35:6a: 1d:c5:94:08:7c:df:0d:a7:b7:cf:b8:ad:a9:cc:ab: 53:ae:e8:3d:0b:10:77:f3:e1:a6:e5:8f:d3:63:d8: 92:49:fd:e5:26:c1:74:ed:a2:f1:46:73:0e:f1:8f: b4:2c:b7:63:e1:05:4b:e5:7d:40:29:a0:44:d5:70: 51:9e:ea:ac:03:94:d8:3d:73:99:5c:3b:72:b1:8e: ce:de:da:de:b0:58:36:7f:aa:63:16:e8:58:91:d0: 9f:6a:ab:3d:56:0c:65:63:c5:8c:20:1a:08:84:68: 6c:1a:d4:6f:7c:d8:5b:3b:ad:8a:d8:d3:35:fd:d1: 4a:c7:06:19:9b:4f:c2:59:64:a4:ff:82:b2:d3:b7: ec:56:58:df:56:95:7c:90:49:d3:3d:6b:c8:60:9f: b7:be:13:e3:ed:13:0f:3d:03:05:44:18:6e:70:9b: 9c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:B4:31:7D:C4:10:87:C2:1D:FD:2C:11:9B:94:6D:51:A7:D7:E6:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d7ec25e8-0335-393a-a09e-c9c05d7074f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:fd:39:5a:71:23:24:5a:c4:72:32:66:09:f5:92:a5:97:94: 38:b4:4b:2f:a3:eb:39:d9:07:a5:cb:12:1e:3d:ad:35:4e:15: 01:f9:b6:4c:58:1a:86:a0:93:44:b1:fc:3d:e4:a3:46:e7:35: c3:1f:4e:d8:3c:34:95:2a:eb:52:f4:d8:a6:8e:35:f3:53:42: 9f:43:b8:ec:d7:b2:79:5f:2d:3f:07:48:70:0e:83:bd:ac:84: 0a:21:62:68:0b:c1:9f:d4:d2:b8:4d:a4:68:61:f2:73:8f:db: b3:a9:dc:b4:47:69:c8:b0:7e:ec:8f:63:82:d7:36:63:50:50: d2:ec:10:68:cb:d8:d4:b4:2f:ed:aa:2a:8a:e5:65:29:71:07: eb:d5:f6:7f:bf:3d:f2:4f:14:95:bd:0f:1f:11:77:64:62:8a: 76:ec:8d:cc:da:ef:58:c4:b1:d0:25:28:61:cb:4f:73:f7:73: 9a:33:9d:42:2f:c4:4f:6d:51:b2:33:8f:3b:cf:e6:e7:10:cf: 5d:2c:80:dc:46:9c:1f:80:a1:d0:c9:17:14:65:c2:a0:62:59: 16:02:6c:33:15:32:86:c3:fd:be:eb:cf:a5:4e:75:58:5c:25: 85:85:2a:38:c6:52:1e:d7:41:52:65:1c:0f:ad:3a:09:14:91: fb:5a:25:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/85dlZpTeFQ18wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MTg3OTVmM2UtMTFmNy00MmExLTgzZjctYzhlNGI1NGIzOTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbens0Qw1WZ80xqPTPXgUZTv/zUZz8k6P36D pUUNpO2Bwofd0kbAON4CAA+1faOebHIBWXCa0DSgVQIv8AGe8l6pLhrcwyLQ8Pvt 5ALw+6f/A18V2yh1NWodxZQIfN8Np7fPuK2pzKtTrug9CxB38+Gm5Y/TY9iSSf3l JsF07aLxRnMO8Y+0LLdj4QVL5X1AKaBE1XBRnuqsA5TYPXOZXDtysY7O3tresFg2 f6pjFuhYkdCfaqs9VgxlY8WMIBoIhGhsGtRvfNhbO62K2NM1/dFKxwYZm0/CWWSk /4Ky07fsVljfVpV8kEnTPWvIYJ+3vhPj7RMPPQMFRBhucJucgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu0MX3EEIfCHf0sEZuUbVGn1+ZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDdlYzI1ZTgtMDMzNS0z OTNhLWEwOWUtYzljMDVkNzA3NGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb9OVpxIyRaxHIyZgn1kqWXlDi0Sy+j6znZB6XLEh49rTVOFQH5tkxY Goagk0Sx/D3ko0bnNcMfTtg8NJUq61L02KaONfNTQp9DuOzXsnlfLT8HSHAOg72s hAohYmgLwZ/U0rhNpGhh8nOP27Op3LRHaciwfuyPY4LXNmNQUNLsEGjL2NS0L+2q KorlZSlxB+vV9n+/PfJPFJW9Dx8Rd2Riinbsjcza71jEsdAlKGHLT3P3c5oznUIv xE9tUbIzjzvP5ucQz10sgNxGnB+AodDJFxRlwqBiWRYCbDMVMobD/b7rz6VOdVhc JYWFKjjGUh7XQVJlHA+tOgkUkftaJa8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:53 2026 by rpki-client