$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c4f951-535d-3872-bf1f-a301d0def506.roa File: f5c4f951-535d-3872-bf1f-a301d0def506.roa (raw, json) Hash identifier: H6SdgZtcy9UfYxFQVkXApw0Jp1x9xuLGL3GaQuFnqXc= Subject key identifier: E0:97:A9:FC:91:AB:BA:22:86:EC:86:E4:A6:D2:13:49:B2:03:10:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D3F65000E1729E81DEC040480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c4f951-535d-3872-bf1f-a301d0def506.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:65:00:0e:17:29:e8:1d:ec:04:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=fd139bc1-a614-401f-936c-efdee76d8b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:67:08:cb:65:a5:48:2e:d3:a7:2d:9a:a7: 64:c1:7a:1f:5b:09:ed:ab:63:7d:6e:7c:d5:04:d7: e4:78:0a:c7:a3:25:5c:5d:70:58:dc:d8:ab:a4:8a: 3c:2b:d1:45:51:73:a4:b7:e8:d7:07:18:7a:6f:bc: 59:1a:46:03:41:00:66:b8:0b:74:7a:d5:a9:7c:66: 65:a0:cc:55:0f:7b:35:41:25:b9:44:12:a8:e5:b0: da:d2:71:ea:2f:81:ed:2f:c8:38:26:b1:87:73:f9: cb:89:46:51:90:af:c7:18:66:30:2c:fa:43:3b:64: 50:d2:ec:6e:16:42:93:66:68:48:1c:f0:63:49:8a: 21:a9:7e:b8:91:e3:5c:af:8f:7f:3a:aa:dd:7d:7d: 47:66:5e:7c:a6:50:fc:9f:39:53:19:c0:83:ad:04: e4:a1:09:69:93:cb:08:46:6f:e3:41:b5:27:c8:a4: b7:5c:af:a5:aa:02:ac:d1:ba:a5:22:18:bf:70:6a: 1d:ea:59:68:90:66:fc:a6:9a:3b:cf:9d:ba:a8:5a: 2f:17:03:59:d0:20:9a:90:6c:c7:ca:5f:3b:8a:1d: 4c:ea:02:78:7f:00:59:de:d1:93:71:b5:25:f9:80: 82:2e:05:19:a3:81:34:51:b0:80:f4:97:7f:fd:04: 59:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:A9:FC:91:AB:BA:22:86:EC:86:E4:A6:D2:13:49:B2:03:10:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5c4f951-535d-3872-bf1f-a301d0def506.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d8:88:e5:bd:32:7f:55:06:14:73:36:38:ba:e9:1e:b8:27: e7:ad:04:16:a5:2e:ee:d0:e5:c2:ed:7d:46:1f:e5:c2:7e:9a: 4d:3a:c5:e0:a4:57:55:76:eb:9a:0d:7a:7a:c4:34:9b:b7:66: 34:c5:d3:14:94:04:bb:10:0b:d9:60:8a:69:07:25:00:f6:45: 61:87:d0:a1:7b:19:a9:f8:80:32:31:4f:fe:8d:36:38:f1:21: 06:8e:aa:c4:de:f0:f5:66:0e:be:4e:6e:6e:81:91:d3:e4:d2: c2:d5:55:f5:49:ae:d0:f6:e4:12:37:f7:be:ce:eb:32:7d:8d: ba:ca:09:72:85:b3:b5:27:d8:38:24:ea:69:fe:e9:04:ed:22: af:2c:b3:d5:82:04:00:ae:9c:ea:f1:75:45:45:26:10:93:ad: 9f:bf:96:f1:0b:28:6b:51:f5:8c:eb:fd:4d:56:cf:04:bc:d6: 17:04:cc:54:45:63:6f:69:da:98:6b:9e:96:30:f2:32:bf:f2: 61:30:c6:4f:78:09:ac:ea:87:e3:c3:19:24:f0:6f:c0:72:8b: 84:98:cc:9c:30:44:b6:99:5c:a8:9c:32:e2:e5:d1:6c:d3:f5: 6c:a9:42:eb:89:d5:ee:bb:d0:97:a9:a2:bf:80:ee:aa:89:d2: 6e:ce:61:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZQAOFynoHewEBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmQxMzliYzEtYTYxNC00MDFmLTkzNmMtZWZkZWU3NmQ4YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKVnCMtlpUgu06ctmqdkwXofWwntq2N9bnzV BNfkeArHoyVcXXBY3NirpIo8K9FFUXOkt+jXBxh6b7xZGkYDQQBmuAt0etWpfGZl oMxVD3s1QSW5RBKo5bDa0nHqL4HtL8g4JrGHc/nLiUZRkK/HGGYwLPpDO2RQ0uxu FkKTZmhIHPBjSYohqX64keNcr49/OqrdfX1HZl58plD8nzlTGcCDrQTkoQlpk8sI Rm/jQbUnyKS3XK+lqgKs0bqlIhi/cGod6llokGb8ppo7z526qFovFwNZ0CCakGzH yl87ih1M6gJ4fwBZ3tGTcbUl+YCCLgUZo4E0UbCA9Jd//QRZywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCXqfyRq7oihuyG5KbSE0myAxA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjVjNGY5NTEtNTM1ZC0z ODcyLWJmMWYtYTMwMWQwZGVmNTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnYiOW9Mn9VBhRzNji66R64J+etBBalLu7Q5cLtfUYf5cJ+mk06xeCk V1V265oNenrENJu3ZjTF0xSUBLsQC9lgimkHJQD2RWGH0KF7Gan4gDIxT/6NNjjx IQaOqsTe8PVmDr5Obm6BkdPk0sLVVfVJrtD25BI3977O6zJ9jbrKCXKFs7Un2Dgk 6mn+6QTtIq8ss9WCBACunOrxdUVFJhCTrZ+/lvELKGtR9Yzr/U1WzwS81hcEzFRF Y29p2phrnpYw8jK/8mEwxk94Cazqh+PDGSTwb8Byi4SYzJwwRLaZXKicMuLl0WzT 9WypQuuJ1e670Jepor+A7qqJ0m7OYXo= -----END CERTIFICATE-----Generated at Thu Mar 26 03:53:10 2026 by rpki-client