$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa File: 1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa (raw, json) Hash identifier: cdSth3Obos2kMWCrC3uOdatFKIyw4ICPS8zCASPrB0w= Subject key identifier: BE:5F:B6:12:AC:C4:8D:70:E2:AE:01:3D:43:A1:AA:78:05:32:63:CA Certificate issuer: /CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f Certificate serial: 010D0C9F4328584D75D525222B98E8E65EE5ED40 Authority key identifier: 19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 397553 IP address blocks: 172.111.60.0/22 maxlen: 22 172.111.60.0/24 maxlen: 24 172.111.61.0/24 maxlen: 24 172.111.62.0/24 maxlen: 24 172.111.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:25:22:2b:98:e8:e6:5e:e5:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1665ff60-5477-4f7b-afe6-350c2fd5af8f Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=9e63ca64-977c-4262-915e-25577e4cd2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a2:96:72:3b:1c:c3:f8:ca:29:84:4f:d8:2c: 35:02:a8:26:12:c2:d6:ab:3c:6f:07:9a:60:56:a4: 74:db:b5:e4:20:93:af:95:13:a6:b9:f7:72:ee:72: 4c:42:5d:1b:fb:a3:0e:6d:cb:32:a1:51:63:d6:f3: f5:09:5c:04:d0:e3:26:1b:b8:c1:89:5c:f4:e2:fe: 8c:8c:00:c5:cd:47:d6:0d:ef:65:ef:14:d5:3a:a9: a9:a9:13:58:3e:cc:02:af:8f:b2:51:42:86:46:24: 43:8c:db:71:6f:9d:5a:b8:62:34:51:a0:98:b9:11: 02:d8:d0:37:82:86:c6:c0:5d:e2:0b:83:81:29:3c: 42:f8:9b:85:22:a4:f0:e4:4e:1c:fa:6a:62:14:be: 4e:bd:eb:b7:5f:1a:66:46:68:bb:49:15:73:6a:b3: 0e:71:1e:cb:4c:2f:6b:ce:7b:b8:ad:6f:6c:17:5f: 28:89:08:2d:f1:d6:be:94:5f:1a:e8:a5:9e:03:8c: a9:72:e8:da:1e:d1:94:44:03:f0:52:45:10:ce:1c: e0:e4:d9:57:18:71:b3:ab:7b:80:02:28:0d:ce:64: 6d:3e:f3:35:73:54:10:0b:d5:dd:90:29:9d:dd:4f: 9d:5f:69:59:6a:fa:7e:ea:31:d6:4c:d9:e0:4d:b3: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:5F:B6:12:AC:C4:8D:70:E2:AE:01:3D:43:A1:AA:78:05:32:63:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1ad31859-2e9d-3159-81e0-8dcc7a21e8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f/1665ff60-5477-4f7b-afe6-350c2fd5af8f.crl X509v3 Authority Key Identifier: keyid:19:07:59:66:D4:29:5B:B7:68:E9:C7:B0:5A:0B:2D:32:7E:46:AA:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1665ff60-5477-4f7b-afe6-350c2fd5af8f.cer sbgp-ipAddrBlock: critical IPv4: 172.111.60.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:55:c4:43:b9:69:87:46:d6:da:bc:33:a0:3e:2a:15:73:d0: ba:67:71:65:37:75:36:e9:a7:23:80:f1:8d:9f:74:ef:28:f1: 97:b9:8d:a7:27:6a:3d:de:28:18:7f:c8:c2:4c:a3:20:7d:21: 1d:52:8b:80:67:13:22:7c:66:11:0c:ae:4f:cc:6e:9e:2f:67: 4b:58:e3:95:e6:eb:4c:ed:6f:7b:08:5e:38:2e:dc:24:22:5b: 28:85:b3:7a:74:96:16:f2:aa:31:47:f3:79:4a:6d:36:92:9a: 73:17:b2:19:9d:d8:76:6d:52:c7:75:67:b5:6b:1c:ba:1e:fa: fc:99:2b:c0:1d:f0:d3:5d:ca:86:f9:a2:3c:2a:aa:97:b1:b8: 50:49:f8:25:01:5c:11:76:e7:56:bb:45:14:b4:df:0e:5f:42: 23:24:09:ab:e0:71:39:90:2d:e0:b9:95:0c:a1:82:f3:8d:d2: 63:b1:f1:e0:8f:d1:da:70:40:ac:11:4b:91:09:4f:c2:bd:9d: ed:32:b3:08:80:bc:90:ff:6e:a1:73:e3:77:81:ce:3f:21:ba: af:60:1a:67:83:35:7b:3a:68:39:97:b7:4e:9f:82:12:55:a0: 58:c5:09:1e:18:a3:ca:de:f0:eb:4e:b5:4b:34:fa:c8:ca:7e: 9a:31:1a:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111SUiK5jo5l7l7UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTY2NWZmNjAtNTQ3Ny00ZjdiLWFmZTYtMzUwYzJmZDVh ZjhmMB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk OWU2M2NhNjQtOTc3Yy00MjYyLTkxNWUtMjU1NzdlNGNkMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6KWcjscw/jKKYRP2Cw1AqgmEsLWqzxvB5pg VqR027XkIJOvlROmufdy7nJMQl0b+6MObcsyoVFj1vP1CVwE0OMmG7jBiVz04v6M jADFzUfWDe9l7xTVOqmpqRNYPswCr4+yUUKGRiRDjNtxb51auGI0UaCYuREC2NA3 gobGwF3iC4OBKTxC+JuFIqTw5E4c+mpiFL5Oveu3XxpmRmi7SRVzarMOcR7LTC9r znu4rW9sF18oiQgt8da+lF8a6KWeA4ypcujaHtGURAPwUkUQzhzg5NlXGHGzq3uA AigNzmRtPvM1c1QQC9XdkCmd3U+dX2lZavp+6jHWTNngTbMa9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5fthKsxI1w4q4BPUOhqngFMmPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1 ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBjMmZkNWFmOGYvMWFkMzE4NTktMmU5ZC0z MTU5LTgxZTAtOGRjYzdhMjFlOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTY2NWZmNjAtNTQ3Ny00ZjdiLWFm ZTYtMzUwYzJmZDVhZjhmLzE2NjVmZjYwLTU0NzctNGY3Yi1hZmU2LTM1MGMyZmQ1 YWY4Zi5jcmwwHwYDVR0jBBgwFoAUGQdZZtQpW7do6cewWgstMn5Gqq0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xNjY1ZmY2MC01NDc3LTRmN2ItYWZlNi0zNTBj MmZkNWFmOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrG88MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFVxEO5aYdG1tq8M6A+KhVz0LpncWU3dTbppyOA8Y2fdO8o8Ze5jacn aj3eKBh/yMJMoyB9IR1Si4BnEyJ8ZhEMrk/Mbp4vZ0tY45Xm60ztb3sIXjgu3CQi WyiFs3p0lhbyqjFH83lKbTaSmnMXshmd2HZtUsd1Z7VrHLoe+vyZK8Ad8NNdyob5 ojwqqpexuFBJ+CUBXBF251a7RRS03w5fQiMkCavgcTmQLeC5lQyhgvON0mOx8eCP 0dpwQKwRS5EJT8K9ne0yswiAvJD/bqFz43eBzj8huq9gGmeDNXs6aDmXt06fghJV oFjFCR4Yo8re8OtOtUs0+sjKfpoxGsU= -----END CERTIFICATE-----Generated at Fri Apr 17 23:37:50 2026 by rpki-client