$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/25745a6d-3b40-303f-a454-9abd1cfd32d8.roa File: 25745a6d-3b40-303f-a454-9abd1cfd32d8.roa (raw, json) Hash identifier: caA+utzzk9tLxPqzEd5jBsmuyXwqrZkkxwutX6CKvp0= Subject key identifier: 1E:38:F7:E7:AE:53:8B:23:2F:65:E5:B6:90:9D:07:43:91:A4:38:E1 Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Certificate serial: 010D0C9F4328584D7F9AA43A4BF87CF25E3DE300 Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/25745a6d-3b40-303f-a454-9abd1cfd32d8.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 6540 IP address blocks: 172.111.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:a4:3a:4b:f8:7c:f2:5e:3d:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=0a065390-e420-4b97-be41-af3e163c4458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:36:85:73:ff:2c:f6:2f:67:b5:f8:72:60:96: ae:5e:a2:d5:21:7b:45:9d:30:5c:31:fa:7c:38:31: 1e:36:44:cf:12:d2:67:8b:d1:0c:e9:0e:4c:af:80: c8:4e:f4:89:87:b8:d7:b4:e3:48:83:02:6b:d4:a5: 8d:d8:aa:23:8f:bc:09:42:96:d1:f7:c5:6f:c3:0c: 00:dc:03:97:11:f6:ee:0d:10:0e:27:54:d0:37:c6: e2:a0:bd:64:d0:f9:9b:be:34:7b:d1:13:20:f2:71: 4e:65:35:68:e6:80:14:50:22:b4:a6:ec:17:69:51: 76:8d:5b:b2:b0:11:84:98:1b:5d:88:ec:84:6b:00: fa:a4:83:05:1a:c2:2f:f1:5c:0c:93:92:d8:4c:66: 7c:ec:bb:b4:f9:87:8a:b7:83:b8:7f:14:38:3e:4f: 1d:e7:56:15:a3:18:0c:87:a5:28:39:92:80:5b:a1: b3:37:89:3d:0f:c6:be:b9:68:74:fc:e1:70:c7:15: 44:52:dc:d3:f7:08:e0:cb:e4:98:97:95:86:5c:42: 9f:ee:2d:50:85:bd:c8:3a:21:87:39:1b:76:a5:f5: 3c:8e:4a:70:b5:c4:fb:3d:78:ce:1e:f3:bc:c9:b9: ec:c3:74:23:4d:45:dc:5f:2d:fe:1c:34:c7:af:3b: 81:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:38:F7:E7:AE:53:8B:23:2F:65:E5:B6:90:9D:07:43:91:A4:38:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/25745a6d-3b40-303f-a454-9abd1cfd32d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl X509v3 Authority Key Identifier: keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer sbgp-ipAddrBlock: critical IPv4: 172.111.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:67:6a:cc:04:98:ec:c7:4c:b6:dc:ef:59:2a:43:14:05:c4: 44:cd:f8:6c:18:11:17:6b:60:e1:df:27:3b:ad:d7:2d:11:13: 9b:fb:e1:43:2b:d9:09:d6:39:c3:fa:41:85:8e:d2:f6:71:a5: ed:d6:7a:71:65:e2:94:d9:bc:34:88:d6:7d:f9:f0:cc:05:f4: d9:45:43:4e:18:5d:f9:6f:0f:49:20:e6:46:36:69:bd:eb:92: f1:ec:5d:bc:64:66:d4:7a:a7:18:76:78:07:be:9e:bc:31:3b: 74:ca:aa:34:8f:c2:9a:ef:b7:c9:bc:9e:c3:62:51:69:8c:30: 3a:08:84:31:01:fc:36:5f:1a:c2:41:86:05:58:29:aa:78:6f: 50:cc:67:3c:42:bf:ad:96:6f:b4:36:d9:fa:41:0e:6a:62:d6: 80:a3:3a:7e:1c:5f:1d:31:d5:a3:36:07:17:04:09:6b:d9:e5: 62:a4:39:0d:7d:f3:7e:b2:f9:11:ba:89:ab:7c:4a:62:60:4b: 24:58:65:c8:65:1c:c8:1a:00:b8:ea:5d:d4:29:4c:98:6f:94: 6a:3e:94:29:2e:4d:82:cb:c2:7b:f7:f9:9d:7c:58:f4:c7:d1: 61:0c:ce:96:03:18:76:46:17:13:b1:0d:f9:a1:50:f1:a2:70: 3c:2e:41:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mqQ6S/h88l494wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4 ZjNjMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MGEwNjUzOTAtZTQyMC00Yjk3LWJlNDEtYWYzZTE2M2M0NDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDaFc/8s9i9ntfhyYJauXqLVIXtFnTBcMfp8 ODEeNkTPEtJni9EM6Q5Mr4DITvSJh7jXtONIgwJr1KWN2Kojj7wJQpbR98VvwwwA 3AOXEfbuDRAOJ1TQN8bioL1k0PmbvjR70RMg8nFOZTVo5oAUUCK0puwXaVF2jVuy sBGEmBtdiOyEawD6pIMFGsIv8VwMk5LYTGZ87Lu0+YeKt4O4fxQ4Pk8d51YVoxgM h6UoOZKAW6GzN4k9D8a+uWh0/OFwxxVEUtzT9wjgy+SYl5WGXEKf7i1Qhb3IOiGH ORt2pfU8jkpwtcT7PXjOHvO8ybnsw3QjTUXcXy3+HDTHrzuBvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB449+euU4sjL2XltpCdB0ORpDjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvMjU3NDVhNmQtM2I0MC0z MDNmLWE0NTQtOWFiZDFjZmQzMmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1 NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBnaswEmOzHTLbc71kqQxQFxETN+GwYERdrYOHfJzut1y0RE5v74UMr 2QnWOcP6QYWO0vZxpe3WenFl4pTZvDSI1n358MwF9NlFQ04YXflvD0kg5kY2ab3r kvHsXbxkZtR6pxh2eAe+nrwxO3TKqjSPwprvt8m8nsNiUWmMMDoIhDEB/DZfGsJB hgVYKap4b1DMZzxCv62Wb7Q22fpBDmpi1oCjOn4cXx0x1aM2BxcECWvZ5WKkOQ19 836y+RG6iat8SmJgSyRYZchlHMgaALjqXdQpTJhvlGo+lCkuTYLLwnv3+Z18WPTH 0WEMzpYDGHZGFxOxDfmhUPGicDwuQbg= -----END CERTIFICATE-----Generated at Fri Apr 17 17:15:22 2026 by rpki-client