$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa File: da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa (raw, json) Hash identifier: NoiDqdI9MHKqUSyRed1O+A0C4tXXUmD9KzwCJnkLoAg= Subject key identifier: 51:BB:3E:54:BF:7F:CA:8C:E4:68:E3:D5:7E:DD:E1:4B:A3:9D:0D:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3DFFCDA4B326EC77077410C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 36183 IP address blocks: 172.225.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:cd:a4:b3:26:ec:77:07:74:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=652a2083-8315-48f6-8228-773c30539b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d1:e0:b2:67:b2:6c:e9:e8:95:dc:b5:27:04: 07:64:bc:dc:eb:7a:dd:62:55:93:0e:2c:f0:56:bf: 16:2e:ed:c9:17:54:06:4d:a8:1d:59:ba:0f:78:64: 9e:ea:95:82:c9:aa:91:1a:c7:42:01:fc:80:f5:f7: a3:6d:2b:ac:cb:de:3b:a2:61:8a:73:d9:20:70:db: 50:24:57:ca:55:a5:e9:b8:5c:1e:ef:ef:50:63:eb: 55:4d:e2:e8:7a:8a:7f:12:24:ea:44:b6:5d:a9:cd: cb:5a:18:8d:a2:16:06:4a:02:12:fe:75:3e:8f:6a: 60:0c:24:8e:43:df:da:3c:86:29:94:e2:9a:14:9c: a8:d7:c3:ba:b4:65:5f:02:e8:1b:cb:a2:82:be:a9: 15:70:b5:c9:2b:92:40:a8:55:48:f6:d3:b2:11:32: 89:c3:40:b9:90:82:6b:80:47:89:d0:a8:2b:4f:d2: 8d:8b:bc:77:8e:56:df:6f:ad:0c:52:a2:1f:9a:b5: b4:9a:3b:0c:63:06:ba:d0:df:9d:54:b7:ee:22:b1: a8:1f:43:be:1f:78:eb:23:59:9e:2d:df:42:00:d4: 4d:5c:19:89:ee:c7:72:9c:6a:12:71:be:ec:39:bb: 4a:99:49:7f:ba:93:05:00:5c:2e:b1:7a:88:50:43: 35:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:BB:3E:54:BF:7F:CA:8C:E4:68:E3:D5:7E:DD:E1:4B:A3:9D:0D:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da4e492a-71e0-3f6f-a683-7df0cfdeb57c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1b:34:12:bb:ec:7c:64:9d:93:fc:c3:59:af:b6:40:12:a0: d7:2f:df:db:6b:11:c7:2d:6a:92:64:b8:c3:c8:c2:a7:00:ee: 55:da:ee:11:86:26:69:c9:51:f0:a9:b0:a3:dc:41:f0:b3:6c: 38:5d:cf:26:d8:f3:95:21:f0:0e:08:3b:b1:80:a5:f4:99:e0: 83:f3:66:ac:ff:45:ae:6c:86:ea:6a:fa:df:95:b4:d6:76:6b: 40:f4:57:5d:fa:45:6d:a4:47:f5:04:84:ec:ae:9e:16:67:7b: cc:80:3f:33:71:04:70:13:eb:5e:31:86:91:6d:cb:95:0f:35: 20:bf:27:93:e3:d2:7e:5c:07:79:87:66:53:14:4d:1d:d7:02: 63:28:79:9c:95:85:7d:ef:47:7c:2c:07:d7:ee:9b:b9:32:5b: ac:13:c7:1b:a6:be:38:30:72:5a:7d:67:3f:1e:6b:ed:01:e0: eb:35:87:62:66:92:6f:ab:39:9d:57:97:32:4f:88:fe:7a:4b: 9c:ec:f9:36:59:12:0b:81:7a:e1:f3:84:c0:f4:95:b0:1f:de: 70:42:ac:f4:33:21:71:5b:88:3e:36:ed:16:53:e1:a7:de:29: 9b:be:2d:dc:ef:f4:ec:be:0f:45:11:fc:19:2a:46:94:be:d7: c4:b6:33:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/82ksybsdwd0EMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NjUyYTIwODMtODMxNS00OGY2LTgyMjgtNzczYzMwNTM5YjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNHgsmeybOnoldy1JwQHZLzc63rdYlWTDizw Vr8WLu3JF1QGTagdWboPeGSe6pWCyaqRGsdCAfyA9fejbSusy947omGKc9kgcNtQ JFfKVaXpuFwe7+9QY+tVTeLoeop/EiTqRLZdqc3LWhiNohYGSgIS/nU+j2pgDCSO Q9/aPIYplOKaFJyo18O6tGVfAugby6KCvqkVcLXJK5JAqFVI9tOyETKJw0C5kIJr gEeJ0KgrT9KNi7x3jlbfb60MUqIfmrW0mjsMYwa60N+dVLfuIrGoH0O+H3jrI1me Ld9CANRNXBmJ7sdynGoScb7sObtKmUl/upMFAFwusXqIUEM10wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFG7PlS/f8qM5Gjj1X7d4UujnQ0QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE0ZTQ5MmEtNzFlMC0z ZjZmLWE2ODMtN2RmMGNmZGViNTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkbNBK77HxknZP8w1mvtkASoNcv39trEcctapJkuMPIwqcA7lXa7hGG JmnJUfCpsKPcQfCzbDhdzybY85Uh8A4IO7GApfSZ4IPzZqz/Ra5shupq+t+VtNZ2 a0D0V136RW2kR/UEhOyunhZne8yAPzNxBHAT614xhpFty5UPNSC/J5Pj0n5cB3mH ZlMUTR3XAmMoeZyVhX3vR3wsB9fum7kyW6wTxxumvjgwclp9Zz8ea+0B4Os1h2Jm km+rOZ1XlzJPiP56S5zs+TZZEguBeuHzhMD0lbAf3nBCrPQzIXFbiD427RZT4afe KZu+Ldzv9Oy+D0UR/BkqRpS+18S2M4o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:27 2026 by rpki-client