$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa File: fa0fbb5a-951e-372c-89bc-dc308489326b.roa (raw, json) Hash identifier: bBPkxWdd3bYYZ+XPeN6ul45jQ+ABueZZXrpTwxjdmIU= Subject key identifier: 88:8C:81:F7:6D:A4:B1:61:73:EA:BA:CF:8E:79:53:E9:3F:07:87:3A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D39CF93580AB494E2368F6F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 36183 IP address blocks: 172.225.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:93:58:0a:b4:94:e2:36:8f:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=68bc5211-b29e-478c-80d6-7981a4be6dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ce:30:ab:c1:70:82:8d:22:d0:f4:d7:e1:92: de:e4:b1:dc:c5:67:9b:dc:9e:4b:cf:7c:47:5f:ca: 8a:eb:e0:d2:1f:67:82:70:0d:cd:4d:11:f9:6f:45: 58:eb:0a:80:9b:18:e1:77:6d:61:ae:5a:d3:5d:ec: 06:9f:9b:45:39:cb:b8:c1:05:45:53:a6:7d:0c:3d: 78:28:6b:46:e2:23:34:37:6c:45:ab:16:3f:10:6b: 56:bc:2d:12:1b:ab:15:49:1d:fd:2c:37:72:de:00: ec:27:e4:2e:a6:d9:2f:3c:c0:24:ac:83:48:d1:b1: a2:f7:13:04:e3:40:18:2c:a4:fc:80:36:bc:27:af: 81:cd:f4:e2:fe:29:66:59:0d:06:b7:f4:85:66:a2: f8:69:d8:a0:92:6d:ac:1f:57:68:cf:8b:8e:37:94: 89:e5:02:c5:42:03:8c:f7:9b:56:a2:bf:bf:2d:b0: f7:96:df:b9:e4:8b:33:a5:d7:e5:65:54:36:76:42: 75:17:6a:9b:b9:05:82:3a:1e:dc:8f:9c:5d:7c:be: d1:7f:7a:d7:0b:24:29:de:71:a9:55:51:c6:20:a1: 2e:cc:b0:9a:64:21:73:8c:0e:41:13:07:ca:46:5e: 59:a6:94:96:4e:ee:02:7a:b6:3d:86:1c:dd:4b:f8: e3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:8C:81:F7:6D:A4:B1:61:73:EA:BA:CF:8E:79:53:E9:3F:07:87:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c0:53:df:52:0e:8e:01:2b:5c:75:47:c4:e4:e7:21:c9:af: e9:88:58:9b:4c:cf:b0:38:33:e3:56:8b:f6:b6:3a:58:1b:55: 63:22:63:d5:58:c9:19:09:56:1f:6d:bd:53:f4:d4:2d:a4:fd: 61:d8:7d:e4:2e:46:a5:e0:c3:35:5c:c3:64:5f:d6:27:a3:e7: f5:0f:b4:7f:d6:25:4e:08:38:6d:af:b4:da:1c:b2:32:2e:ee: 35:84:c8:1b:39:ed:7c:c9:44:99:7a:cd:f6:38:89:38:77:8d: a3:77:64:9c:8c:b8:a3:b5:66:d4:a4:dc:86:b4:c8:9b:9f:a3: 83:b6:2f:9e:43:28:a0:55:aa:12:2f:8c:cb:6a:d9:4f:31:ba: 75:8d:16:4d:8d:d8:54:3d:f4:cd:24:83:da:b3:d7:a8:b4:e9: e7:a5:39:82:1d:07:e1:ac:cc:6f:b0:04:c7:f2:5f:00:61:93: de:ff:25:59:e3:65:4a:61:a3:54:2f:a4:3a:20:77:b5:f9:a9: c7:51:1d:7c:be:f7:f4:88:9d:c5:30:e6:1a:dd:f3:2f:f3:2b: 13:de:49:e5:f1:5f:ee:70:31:41:5b:ff:c8:7f:22:47:1f:05: 74:90:d5:7e:28:05:db:81:b4:a2:b5:b8:08:be:a8:21:ee:86: 05:82:a2:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5NYCrSU4jaPb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NjhiYzUyMTEtYjI5ZS00NzhjLTgwZDYtNzk4MWE0YmU2ZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns4wq8Fwgo0i0PTX4ZLe5LHcxWeb3J5Lz3xH X8qK6+DSH2eCcA3NTRH5b0VY6wqAmxjhd21hrlrTXewGn5tFOcu4wQVFU6Z9DD14 KGtG4iM0N2xFqxY/EGtWvC0SG6sVSR39LDdy3gDsJ+QuptkvPMAkrINI0bGi9xME 40AYLKT8gDa8J6+BzfTi/ilmWQ0Gt/SFZqL4adigkm2sH1doz4uON5SJ5QLFQgOM 95tWor+/LbD3lt+55IszpdflZVQ2dkJ1F2qbuQWCOh7cj5xdfL7Rf3rXCyQp3nGp VVHGIKEuzLCaZCFzjA5BEwfKRl5ZppSWTu4CerY9hhzdS/jjYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiMgfdtpLFhc+q6z455U+k/B4c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmEwZmJiNWEtOTUxZS0z NzJjLTg5YmMtZGMzMDg0ODkzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjAU99SDo4BK1x1R8Tk5yHJr+mIWJtMz7A4M+NWi/a2OlgbVWMiY9VY yRkJVh9tvVP01C2k/WHYfeQuRqXgwzVcw2Rf1iej5/UPtH/WJU4IOG2vtNocsjIu 7jWEyBs57XzJRJl6zfY4iTh3jaN3ZJyMuKO1ZtSk3Ia0yJufo4O2L55DKKBVqhIv jMtq2U8xunWNFk2N2FQ99M0kg9qz16i06eelOYIdB+GszG+wBMfyXwBhk97/JVnj ZUpho1QvpDogd7X5qcdRHXy+9/SIncUw5hrd8y/zKxPeSeXxX+5wMUFb/8h/Ikcf BXSQ1X4oBduBtKK1uAi+qCHuhgWCors= -----END CERTIFICATE-----Generated at Thu Mar 26 10:21:00 2026 by rpki-client