$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa File: 16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa (raw, json) Hash identifier: 44Vn4kGOhXe4GUqKgZDOXUwv+RnBv+dSem6o5e8tFTI= Subject key identifier: 17:A8:C0:42:B6:48:87:D6:D8:F5:2D:87:54:86:EE:50:86:3D:EF:BD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D571FB9E0A7DE63F6D9111300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 36183 IP address blocks: 172.224.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b9:e0:a7:de:63:f6:d9:11:13:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=1bec544a-29df-4379-b3c2-807cefa0b280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:81:84:28:78:8f:51:f3:08:a0:59:70:35:76: 65:93:35:60:11:99:af:73:f8:fc:1e:a1:cc:c8:0e: 62:2d:24:3f:5b:52:3e:00:9d:ba:96:11:3c:5e:c2: 3f:df:06:24:91:c2:f0:ba:19:72:c2:14:a6:f0:fb: 55:a0:9f:fd:9a:ed:74:68:d5:0e:e6:fa:25:c4:fc: 17:63:e8:30:31:6c:fb:f2:bd:d4:ea:f7:bf:74:ce: cc:a6:17:54:06:8a:e2:9f:95:27:33:0b:16:d0:3c: 5d:7d:dd:88:6d:e0:1f:c9:3b:d7:09:b8:83:99:65: 66:99:60:c2:93:23:66:12:40:3a:fe:6a:fc:e0:ec: 8b:1e:ee:64:84:81:8e:d7:59:bd:d4:9f:88:62:51: 6f:ac:78:59:01:0d:0e:2a:25:12:99:f2:57:ee:b7: 65:52:7e:6b:fc:96:a3:0c:bb:df:55:3c:67:72:ec: d7:9a:15:3f:b4:d0:38:52:de:42:51:fa:16:d3:da: 6b:b2:5c:11:1e:72:93:e4:7a:0b:73:1a:b9:c0:cd: 4d:f5:5b:ca:ba:e9:fc:af:46:3a:ab:9d:1b:51:4b: ad:2a:fa:52:04:ae:bd:7b:7d:93:e2:4a:25:1b:b6: 6f:8c:c8:a0:10:a3:f7:a7:3c:67:eb:39:24:a8:24: 15:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A8:C0:42:B6:48:87:D6:D8:F5:2D:87:54:86:EE:50:86:3D:EF:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16987aa2-d008-3aa1-808f-cfde9c5ff8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:d3:f9:30:42:73:bf:29:77:6b:7a:b3:76:40:35:f9:64:13: a5:fa:7d:b9:8e:cd:82:c1:3d:22:c1:f1:fd:a0:0b:56:67:7f: 98:62:de:0d:79:b2:db:7c:73:08:09:93:0e:46:a4:a8:6b:b9: f1:df:9a:70:d8:2f:cb:4d:b9:0d:55:fa:74:83:44:fc:9b:1f: 87:ac:e9:4b:94:75:25:4c:c7:db:44:17:9a:7c:e6:89:1f:e1: 2e:ea:a2:f7:63:fb:7d:1b:1f:9f:ff:53:65:d4:94:ab:95:cf: a8:94:98:18:34:e3:1c:89:c2:4a:94:43:65:0a:f5:70:55:b5: 19:a4:ae:4f:4d:26:85:3e:40:fe:d5:af:95:45:2a:41:06:9d: 73:4a:0c:a4:76:33:ec:23:cd:a5:29:71:c4:3e:18:b2:e0:d7: fd:a4:46:5b:99:c1:97:a6:e3:da:a0:2b:2d:b7:c9:63:9e:53: 62:c0:9d:a7:6b:04:61:89:8e:ac:bc:1e:7b:91:08:82:9c:ed: 19:51:cd:1b:64:0b:89:3b:1e:d1:0b:7f:36:4d:52:3e:7e:81: 85:c2:a3:76:6c:ba:55:88:21:09:be:c0:25:92:d1:f0:88:5b: af:72:7f:37:40:0f:a6:b4:69:51:70:05:91:c2:f2:eb:78:e3: 19:30:5f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7ngp95j9tkREwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MWJlYzU0NGEtMjlkZi00Mzc5LWIzYzItODA3Y2VmYTBiMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYGEKHiPUfMIoFlwNXZlkzVgEZmvc/j8HqHM yA5iLSQ/W1I+AJ26lhE8XsI/3wYkkcLwuhlywhSm8PtVoJ/9mu10aNUO5volxPwX Y+gwMWz78r3U6ve/dM7MphdUBorin5UnMwsW0Dxdfd2IbeAfyTvXCbiDmWVmmWDC kyNmEkA6/mr84OyLHu5khIGO11m91J+IYlFvrHhZAQ0OKiUSmfJX7rdlUn5r/Jaj DLvfVTxncuzXmhU/tNA4Ut5CUfoW09prslwRHnKT5HoLcxq5wM1N9VvKuun8r0Y6 q50bUUutKvpSBK69e32T4kolG7ZvjMigEKP3pzxn6zkkqCQVYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeowEK2SIfW2PUth1SG7lCGPe+9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTY5ODdhYTItZDAwOC0z YWExLTgwOGYtY2ZkZTljNWZmOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPT+TBCc78pd2t6s3ZANflkE6X6fbmOzYLBPSLB8f2gC1Znf5hi3g15 stt8cwgJkw5GpKhrufHfmnDYL8tNuQ1V+nSDRPybH4es6UuUdSVMx9tEF5p85okf 4S7qovdj+30bH5//U2XUlKuVz6iUmBg04xyJwkqUQ2UK9XBVtRmkrk9NJoU+QP7V r5VFKkEGnXNKDKR2M+wjzaUpccQ+GLLg1/2kRluZwZem49qgKy23yWOeU2LAnadr BGGJjqy8HnuRCIKc7RlRzRtkC4k7HtELfzZNUj5+gYXCo3ZsulWIIQm+wCWS0fCI W69yfzdAD6a0aVFwBZHC8ut44xkwX5c= -----END CERTIFICATE-----Generated at Fri Apr 17 11:39:08 2026 by rpki-client