$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa File: f5ac55ac-f810-3544-90b5-8f6795c65f87.roa (raw, json) Hash identifier: dp+/l0b3xoLr7bAxfFbqYfdv0/6lmsscaT1eTBAjZrY= Subject key identifier: D9:12:61:B4:11:33:A7:EE:C3:64:57:C1:38:BC:20:ED:A9:59:F9:B8 Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db Certificate serial: 010D0C9F4328584D7A051F415B29FE70D22432CE Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 262287 IP address blocks: 172.111.12.0/22 maxlen: 24 204.9.36.0/23 maxlen: 24 204.9.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:1f:41:5b:29:fe:70:d2:24:32:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=6157bad5-994a-42be-9cd8-5b951a1fe24a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:fe:9f:91:e6:29:4f:cc:52:1a:d2:c7:20: 64:e6:c0:76:b9:86:53:f1:e4:00:e6:93:22:89:e4: 92:89:bb:48:be:f8:c6:66:9b:af:34:fa:ac:d9:9a: d5:4f:32:92:88:8c:a7:35:86:73:1c:67:d0:04:1b: 5b:bf:d2:66:b8:4a:ba:62:20:40:46:0c:25:96:45: eb:2f:c4:1b:ff:b4:c2:95:ca:05:bb:7c:10:a7:ce: 57:b7:9e:45:d2:45:af:65:ea:46:c0:ff:23:ad:52: a0:6a:64:d3:89:f8:85:ce:4e:08:48:1b:de:0b:8a: ad:f9:4a:a1:56:3a:96:d8:3c:a4:bb:68:b9:3f:1b: f1:56:6e:7e:07:8b:59:13:3c:e3:5b:54:06:77:7b: 07:35:cf:98:3d:6e:48:43:d4:3d:5a:a7:48:5b:26: 14:99:38:e2:19:7f:52:5f:32:c0:61:0c:cd:ca:fd: ef:16:2d:23:16:c3:0e:05:94:24:1a:60:77:9f:10: a3:74:ec:a5:6e:eb:15:cf:8a:49:0d:e7:b2:e7:f1: 6f:f4:d4:c9:72:1c:d6:31:0f:a3:5e:92:5b:c7:1a: 3a:64:0f:d1:38:74:27:fb:e5:0f:cf:2a:30:9d:c1: ec:cb:b0:bb:15:fe:bd:39:a9:c1:68:f7:e9:90:d8: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:12:61:B4:11:33:A7:EE:C3:64:57:C1:38:BC:20:ED:A9:59:F9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/f5ac55ac-f810-3544-90b5-8f6795c65f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl X509v3 Authority Key Identifier: keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer sbgp-ipAddrBlock: critical IPv4: 172.111.12.0/22 204.9.36.0-204.9.38.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4a:87:a3:f7:fb:c6:da:d5:5c:82:8e:dd:48:30:0d:03:19: 1f:4a:ac:b4:0c:06:fe:14:48:c2:07:84:10:5d:79:8e:cf:c7: a4:de:7f:6a:3c:65:72:ea:51:67:b5:6b:c9:99:06:73:bb:39: 1f:c0:85:ae:07:36:5c:0e:4e:14:f7:7a:8f:60:b9:51:07:66: 27:12:09:40:37:91:e1:e5:d3:62:44:a5:57:e0:5c:49:d6:a7: 0d:ea:ee:d4:08:39:1f:fd:d3:27:34:8d:a1:c5:4f:26:ea:61: 45:a7:50:89:8e:dd:6f:47:ac:4d:dd:c1:5a:34:39:f3:07:4e: 64:37:eb:c7:95:c2:b1:e5:4e:7a:78:5a:38:ef:c9:75:8c:b6: cb:c7:d2:53:e4:19:e1:72:f3:2e:81:e1:a4:ee:55:4b:a6:f5: 7e:03:ec:55:7c:50:0f:70:ee:b3:70:a3:df:c5:15:04:0a:38: 96:2e:fa:ce:64:08:3a:7b:10:6b:15:f8:d9:02:fe:98:fd:16: d2:bd:9b:e1:e1:0e:7c:99:3a:0f:3e:d4:2a:f0:f3:90:13:c2: a4:e1:0f:87:52:6e:78:20:c4:ee:48:e1:60:ba:e0:39:39:2e: 68:cb:37:4c:13:99:04:fe:fb:42:5d:77:88:a9:c4:b0:21:f3: eb:a1:a4:43 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWE16BR9BWyn+cNIkMs4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1 NmRiMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NjE1N2JhZDUtOTk0YS00MmJlLTljZDgtNWI5NTFhMWZlMjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggb+n5HmKU/MUhrSxyBk5sB2uYZT8eQA5pMi ieSSibtIvvjGZpuvNPqs2ZrVTzKSiIynNYZzHGfQBBtbv9JmuEq6YiBARgwllkXr L8Qb/7TClcoFu3wQp85Xt55F0kWvZepGwP8jrVKgamTTifiFzk4ISBveC4qt+Uqh VjqW2Dyku2i5PxvxVm5+B4tZEzzjW1QGd3sHNc+YPW5IQ9Q9WqdIWyYUmTjiGX9S XzLAYQzNyv3vFi0jFsMOBZQkGmB3nxCjdOylbusVz4pJDeey5/Fv9NTJchzWMQ+j XpJbxxo6ZA/ROHQn++UPzyowncHsy7C7Ff69OanBaPfpkNjiSQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFNkSYbQRM6fuw2RXwTi8IO2pWfm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4 NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvZjVhYzU1YWMtZjgxMC0z NTQ0LTkwYjUtOGY2Nzk1YzY1Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj NzZmMjU2ZGIuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCrG8MMAwD BALMCSQDBADMCSYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAcEqHo/f7xtrVXIKO3UgwDQMZH0qstAwG/hRI wgeEEF15js/HpN5/ajxlcupRZ7VryZkGc7s5H8CFrgc2XA5OFPd6j2C5UQdmJxIJ QDeR4eXTYkSlV+BcSdanDeru1Ag5H/3TJzSNocVPJuphRadQiY7db0esTd3BWjQ5 8wdOZDfrx5XCseVOenhaOO/JdYy2y8fSU+QZ4XLzLoHhpO5VS6b1fgPsVXxQD3Du s3Cj38UVBAo4li76zmQIOnsQaxX42QL+mP0W0r2b4eEOfJk6Dz7UKvDzkBPCpOEP h1JueCDE7kjhYLrgOTkuaMs3TBOZBP77Ql13iKnEsCHz66GkQw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:19:20 2026 by rpki-client