$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa File: 042fdff5-d209-3f15-8e0f-8658e95971ec.roa (raw, json) Hash identifier: utzTL7knp/oSYIGakAr1F511SYtPvKF79B2zW3JPfl4= Subject key identifier: 54:86:67:6A:51:8D:1E:59:DD:0B:94:03:27:E9:0F:4A:03:31:8E:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D571FBDEF50C04A1CADBF4F40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 36183 IP address blocks: 172.224.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:bd:ef:50:c0:4a:1c:ad:bf:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=c766c706-b89d-4a9f-a1c6-738aca2f76a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:06:c4:8b:29:da:0f:ef:b7:c2:20:83:9f:23: 1f:34:8d:6d:c1:02:d8:5f:75:d6:1b:61:29:50:80: e4:0b:eb:09:16:7e:9d:95:b8:23:fe:79:6d:7d:84: 0f:cc:90:ee:1d:3a:2c:6c:7e:78:d1:5d:67:bb:61: 4a:46:9b:5d:26:bc:59:6b:81:50:9b:c9:43:e4:e2: 32:c4:21:bb:48:ed:51:82:7a:61:83:58:f1:82:4e: bc:3e:14:92:e0:05:3c:b7:8b:40:59:6b:38:0d:d7: 65:07:0a:54:36:46:8b:4f:65:db:bf:63:7d:8a:df: 07:d2:38:f4:97:6e:47:94:43:78:d3:b8:0d:13:d9: 18:1c:70:e9:cc:b3:33:05:30:0e:b4:c4:01:6d:04: 1c:a2:ac:94:dc:90:b7:f1:64:e5:68:40:b0:51:a7: fd:80:64:e8:31:f3:f3:be:24:b7:3d:b8:31:55:3c: d1:fe:7e:b2:4c:72:81:68:ac:8c:90:46:54:40:f3: b9:fc:a3:f4:69:6d:24:16:cd:8b:a9:03:4b:fd:6d: f8:6a:b4:b6:9c:19:65:18:51:8f:62:1a:a0:ce:df: 50:8a:e7:3d:37:8a:e5:c0:b7:d5:8f:e9:21:6a:46: 97:42:fa:3b:d0:21:16:33:94:5a:ca:be:d6:c9:64: 8a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:86:67:6A:51:8D:1E:59:DD:0B:94:03:27:E9:0F:4A:03:31:8E:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/042fdff5-d209-3f15-8e0f-8658e95971ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:36:65:1b:66:f6:de:8d:cf:7e:4c:35:2f:4e:e5:37:25:30: 7a:32:7d:3b:10:05:a2:06:30:67:ed:08:53:27:4e:1e:40:a3: 30:6a:19:74:db:04:af:48:66:58:50:d7:b3:dc:f3:41:6c:f9: 31:df:d3:ff:ce:41:b7:c0:b4:33:d3:fa:f5:1a:c3:93:94:03: e4:6f:36:69:e6:11:14:15:a3:b9:af:88:71:4f:af:97:86:5d: e0:cb:5c:af:80:19:be:f6:30:af:ab:9b:8a:84:c2:80:aa:fe: 03:4d:e3:8f:96:d1:d4:cc:af:e4:b7:29:76:48:24:e5:0a:97: e8:cc:06:ac:10:d6:a9:dc:a7:5f:77:be:dd:ae:0e:2a:84:f9: 89:a9:3c:3b:36:46:33:87:08:4f:46:4b:5d:bc:92:78:77:be: 50:78:f9:b5:7b:6f:6a:81:b9:2d:76:fb:ff:77:fd:51:ee:fe: 11:0a:ca:a3:36:e0:fb:f8:94:f9:21:27:1b:af:ee:38:57:d7: 0d:a4:be:e3:00:dc:03:22:e2:cf:77:e5:f7:4e:17:4f:c8:ea: 39:5c:53:d3:20:20:02:d2:f1:9d:19:1e:f1:dc:0b:59:54:7f: d9:d5:21:2d:22:c8:9c:47:13:81:0d:9e:ea:15:c6:d3:99:44: 16:05:e6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH73vUMBKHK2/T0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk Yzc2NmM3MDYtYjg5ZC00YTlmLWExYzYtNzM4YWNhMmY3NmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgbEiynaD++3wiCDnyMfNI1twQLYX3XWG2Ep UIDkC+sJFn6dlbgj/nltfYQPzJDuHTosbH540V1nu2FKRptdJrxZa4FQm8lD5OIy xCG7SO1Rgnphg1jxgk68PhSS4AU8t4tAWWs4DddlBwpUNkaLT2Xbv2N9it8H0jj0 l25HlEN407gNE9kYHHDpzLMzBTAOtMQBbQQcoqyU3JC38WTlaECwUaf9gGToMfPz viS3PbgxVTzR/n6yTHKBaKyMkEZUQPO5/KP0aW0kFs2LqQNL/W34arS2nBllGFGP Yhqgzt9Qiuc9N4rlwLfVj+khakaXQvo70CEWM5Rayr7WyWSKgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSGZ2pRjR5Z3QuUAyfpD0oDMY4FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDQyZmRmZjUtZDIwOS0z ZjE1LThlMGYtODY1OGU5NTk3MWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIY2ZRtm9t6Nz35MNS9O5TclMHoyfTsQBaIGMGftCFMnTh5AozBqGXTb BK9IZlhQ17Pc80Fs+THf0//OQbfAtDPT+vUaw5OUA+RvNmnmERQVo7mviHFPr5eG XeDLXK+AGb72MK+rm4qEwoCq/gNN44+W0dTMr+S3KXZIJOUKl+jMBqwQ1qncp193 vt2uDiqE+YmpPDs2RjOHCE9GS128knh3vlB4+bV7b2qBuS12+/93/VHu/hEKyqM2 4Pv4lPkhJxuv7jhX1w2kvuMA3AMi4s935fdOF0/I6jlcU9MgIALS8Z0ZHvHcC1lU f9nVIS0iyJxHE4ENnuoVxtOZRBYF5iU= -----END CERTIFICATE-----Generated at Fri Apr 17 03:48:35 2026 by rpki-client