$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa File: 28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa (raw, json) Hash identifier: ZjZ9/C1X+9JAuCe+Bka5qMwALjdjaPbdPux1apMP6Hs= Subject key identifier: BA:03:43:42:95:6D:FB:AD:F1:B5:E6:F2:1F:29:F8:DE:1D:6E:52:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D71A51C7F69A3E067CE9A8C40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 173.223.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1c:7f:69:a3:e0:67:ce:9a:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=bde01157-3771-4b2f-bb72-00e0fbb197e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:ff:18:58:e7:2c:e6:0f:ec:46:b3:5d:65: 6f:ee:50:4d:74:89:55:5c:94:78:9f:54:4c:2e:58: 97:91:2d:08:a0:09:2c:00:87:28:cb:4c:9f:c3:d8: 90:0c:73:3b:80:be:03:3e:77:cd:28:3c:07:38:f0: 8b:3c:ab:38:0f:3d:6d:51:d4:ac:70:6a:d5:c1:51: f1:7a:a4:a3:2d:b7:2b:d3:47:8e:4e:46:a2:ec:08: ed:0d:8a:0c:22:75:2d:d3:ef:f6:0c:fd:93:11:6a: 13:bf:05:e5:da:dc:d6:5a:48:e6:a4:48:a6:65:bb: 52:75:94:b8:1c:93:2e:ae:8a:dd:c1:1e:31:48:4a: fb:5b:fe:42:41:38:c3:56:ea:ea:5e:10:d8:10:0f: e1:b3:d6:a3:96:1d:07:17:68:a6:ab:fa:86:e3:38: ea:25:96:4a:62:89:9a:ae:06:e4:24:46:a0:91:0d: 3c:f9:a3:f1:93:f8:85:c7:fc:5b:18:4a:a0:18:73: 60:e4:ff:06:ab:cf:40:d3:0d:e7:58:3d:78:d5:5f: b1:47:68:48:33:72:85:1b:c4:dc:66:6e:47:2c:50: 2a:c4:3c:0e:8d:59:a8:eb:1b:a0:de:02:97:a6:b6: 93:f6:14:02:f2:bb:bc:52:56:1c:93:53:df:28:f8: 50:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:03:43:42:95:6D:FB:AD:F1:B5:E6:F2:1F:29:F8:DE:1D:6E:52:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28a48fa5-e9d6-364f-9eed-e43a33a4e287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.223.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:37:ad:9a:59:64:67:9e:95:da:c9:b3:e1:47:01:cc:ec:6c: 53:fc:3c:b7:0f:a4:10:01:3e:18:13:25:81:de:8f:9d:d0:3e: c1:b6:5c:d3:18:cf:6e:48:72:ad:e9:4c:f2:a4:48:09:aa:27: e5:7e:e3:52:ee:21:ed:5a:a1:d0:a9:ad:0a:06:c1:f9:fe:3b: ef:70:d1:75:57:00:5c:78:01:ab:dd:8b:54:58:5f:f9:c2:20: 8e:5b:cf:ba:99:80:c7:48:33:6d:18:8a:e9:c8:a9:7b:84:4a: a0:1d:ab:3a:c7:9c:b1:f8:f4:00:3a:7a:eb:a3:2f:1a:0f:d1: d0:e9:56:d4:d0:73:d8:62:bd:0b:e8:b4:14:96:42:a1:db:a0: 11:43:99:1f:7a:86:df:8d:e8:46:44:1a:77:33:db:23:8b:12: d0:3c:2f:c6:4e:fe:4c:19:3d:e9:4d:52:19:76:03:e1:e0:b1: 26:d5:f4:3e:bf:af:6a:f5:4b:f4:dd:f2:5b:03:d4:f2:6d:c0: ab:78:da:f2:e2:e6:ff:fd:3f:53:5e:63:54:6f:26:54:07:be: 2c:56:35:8f:3b:24:f2:53:65:2e:67:89:2b:0b:2a:f5:ae:10: 32:25:7a:4e:f0:c4:76:da:55:2d:c5:19:c2:39:a3:7d:0e:2c: d4:89:4c:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRx/aaPgZ86ajEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk YmRlMDExNTctMzc3MS00YjJmLWJiNzItMDBlMGZiYjE5N2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ7/GFjnLOYP7EazXWVv7lBNdIlVXJR4n1RM LliXkS0IoAksAIcoy0yfw9iQDHM7gL4DPnfNKDwHOPCLPKs4Dz1tUdSscGrVwVHx eqSjLbcr00eOTkai7AjtDYoMInUt0+/2DP2TEWoTvwXl2tzWWkjmpEimZbtSdZS4 HJMurordwR4xSEr7W/5CQTjDVurqXhDYEA/hs9ajlh0HF2imq/qG4zjqJZZKYoma rgbkJEagkQ08+aPxk/iFx/xbGEqgGHNg5P8Gq89A0w3nWD141V+xR2hIM3KFG8Tc Zm5HLFAqxDwOjVmo6xug3gKXpraT9hQC8ru8UlYck1PfKPhQNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoDQ0KVbfut8bXm8h8p+N4dblJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhhNDhmYTUtZTlkNi0z NjRmLTllZWQtZTQzYTMzYTRlMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd9wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM3rZpZZGeeldrJs+FHAczsbFP8PLcPpBABPhgTJYHej53QPsG2XNMY z25Icq3pTPKkSAmqJ+V+41LuIe1aodCprQoGwfn+O+9w0XVXAFx4Aavdi1RYX/nC II5bz7qZgMdIM20YiunIqXuESqAdqzrHnLH49AA6euujLxoP0dDpVtTQc9hivQvo tBSWQqHboBFDmR96ht+N6EZEGncz2yOLEtA8L8ZO/kwZPelNUhl2A+HgsSbV9D6/ r2r1S/Td8lsD1PJtwKt42vLi5v/9P1NeY1RvJlQHvixWNY87JPJTZS5niSsLKvWu EDIlek7wxHbaVS3FGcI5o30OLNSJTCs= -----END CERTIFICATE-----Generated at Fri Apr 17 05:28:22 2026 by rpki-client