$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/32351243-8de6-3690-a27f-b2f65aeec70e.roa File: 32351243-8de6-3690-a27f-b2f65aeec70e.roa (raw, json) Hash identifier: KhwHXQAQa43sldvPGkjwlq1Pn9Z8UpSh0i9sXcwfb8o= Subject key identifier: 3C:C1:8B:B3:4A:FC:4E:8E:87:47:99:33:0B:70:B3:4A:71:EC:98:A1 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584E1E44593308771E0A67182C80 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/32351243-8de6-3690-a27f-b2f65aeec70e.roa Signing time: Tue 09 Jun 2026 21:00:12 +0000 ROA not before: Tue 09 Jun 2026 21:00:12 +0000 ROA not after: Mon 07 Sep 2026 21:00:12 +0000 asID: 20115 IP address blocks: 172.222.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1e:44:59:33:08:77:1e:0a:67:18:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Jun 9 21:00:12 2026 GMT Not After : Sep 7 21:00:12 2026 GMT Subject: CN=b8cb8280-7b15-4702-9881-a4593fd6685e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3a:76:4b:93:0c:9c:35:16:c7:64:e6:1a:b7: db:b7:4e:68:20:cf:7d:46:e8:52:ed:2b:cb:24:5a: 41:9e:a6:7f:b6:c9:6c:5c:5c:c3:e6:c2:89:35:75: 4f:65:ab:8f:39:03:b1:5f:36:5f:db:dd:2b:95:1c: 10:10:f8:fb:2a:90:d7:4d:8a:19:8c:60:01:75:7d: f2:bd:84:f2:84:e1:e8:b7:5d:c7:2d:dd:c4:cf:4c: ba:6b:3b:62:d7:9d:02:f3:cf:72:90:96:6b:35:33: e6:78:d0:88:cf:14:43:af:ed:a3:d9:3b:40:10:68: 44:ab:0b:c1:6f:1f:cf:a7:db:0e:c2:c9:b7:64:54: be:4f:12:03:04:37:61:9c:4e:9b:80:bb:f1:a4:90: eb:b6:4d:89:d6:64:82:4f:3c:10:35:32:43:3e:b1: ae:d3:d2:50:ab:a7:34:d4:03:14:00:66:05:00:c1: 70:96:0c:53:c9:e2:5f:c4:22:42:88:6e:ec:8e:03: ff:38:df:e3:86:c3:4b:61:b1:c2:4b:6c:2e:cb:e7: ba:08:c3:f2:c5:a4:75:f9:d0:92:5b:b2:ad:04:66: 41:e3:3b:7f:a8:6d:57:9f:fa:14:95:4d:9b:ce:50: ed:6c:d9:d1:28:1a:03:0a:e1:31:23:7c:c5:40:b7: f8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C1:8B:B3:4A:FC:4E:8E:87:47:99:33:0B:70:B3:4A:71:EC:98:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/32351243-8de6-3690-a27f-b2f65aeec70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.222.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:5b:2b:39:1c:43:9a:a4:b4:a9:ad:a7:2a:92:72:05:78:55: 3c:16:18:54:15:28:c0:78:6d:3a:39:3b:b7:3a:70:27:1e:55: d1:2e:98:67:53:63:d5:16:0c:55:7b:29:f5:d3:50:d9:5d:19: 24:f8:ff:6e:a5:53:a2:3f:a9:fa:23:0c:21:5e:1b:f5:54:ce: 44:ab:b2:b5:ec:85:86:13:41:ee:2c:42:0b:2d:88:ee:03:be: f6:94:4a:f2:99:a8:2c:40:91:d2:42:10:a1:59:58:bf:37:65: 16:2a:64:6e:71:7f:a7:9d:89:00:66:29:8b:ea:df:8e:d8:06: f1:4a:c9:76:07:97:f4:64:30:75:94:ac:80:42:68:91:0e:95: 15:7f:7a:23:b6:95:89:64:54:0d:08:12:d4:f9:8f:5b:69:6e: 37:a9:db:8f:06:d3:3a:2f:e7:93:d7:96:51:dd:63:11:bc:37: 90:d3:f0:2e:0d:a2:e3:3a:4e:86:ce:8c:ef:9e:cc:e2:f5:e7: 34:0e:cc:b7:50:34:bf:1d:79:c5:e4:33:c7:cf:51:2c:ba:12: 5a:74:2d:db:98:4c:e0:ad:37:75:de:56:9f:ba:3a:43:c6:3b: 54:93:e3:4a:c2:41:60:1c:bd:7b:11:bf:9a:a0:b9:3b:52:bb: 7b:34:88:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRFkzCHceCmcYLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk YjhjYjgyODAtN2IxNS00NzAyLTk4ODEtYTQ1OTNmZDY2ODVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTp2S5MMnDUWx2TmGrfbt05oIM99RuhS7SvL JFpBnqZ/tslsXFzD5sKJNXVPZauPOQOxXzZf290rlRwQEPj7KpDXTYoZjGABdX3y vYTyhOHot13HLd3Ez0y6azti150C889ykJZrNTPmeNCIzxRDr+2j2TtAEGhEqwvB bx/Pp9sOwsm3ZFS+TxIDBDdhnE6bgLvxpJDrtk2J1mSCTzwQNTJDPrGu09JQq6c0 1AMUAGYFAMFwlgxTyeJfxCJCiG7sjgP/ON/jhsNLYbHCS2wuy+e6CMPyxaR1+dCS W7KtBGZB4zt/qG1Xn/oUlU2bzlDtbNnRKBoDCuExI3zFQLf4CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzBi7NK/E6Oh0eZMwtws0px7JihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvMzIzNTEyNDMtOGRlNi0z NjkwLWEyN2YtYjJmNjVhZWVjNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRbKzkcQ5qktKmtpyqScgV4VTwWGFQVKMB4bTo5O7c6cCceVdEumGdT Y9UWDFV7KfXTUNldGST4/26lU6I/qfojDCFeG/VUzkSrsrXshYYTQe4sQgstiO4D vvaUSvKZqCxAkdJCEKFZWL83ZRYqZG5xf6ediQBmKYvq347YBvFKyXYHl/RkMHWU rIBCaJEOlRV/eiO2lYlkVA0IEtT5j1tpbjep248G0zov55PXllHdYxG8N5DT8C4N ouM6TobOjO+ezOL15zQOzLdQNL8decXkM8fPUSy6Elp0LduYTOCtN3XeVp+6OkPG O1ST40rCQWAcvXsRv5qguTtSu3s0iP0= -----END CERTIFICATE-----Generated at Sat Jun 13 20:39:46 2026 by rpki-client