$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa File: 3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa (raw, json) Hash identifier: zSYsbgj9UP7cTUITQp2k34IPDtQdFV2+V7RtAhZptWk= Subject key identifier: 63:12:3E:BE:97:0F:9D:1D:27:99:31:28:90:B4:E5:EC:F3:12:AF:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E1A144641DA2ABE7127A7FC20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 36183 IP address blocks: 172.225.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:46:41:da:2a:be:71:27:a7:fc:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=207a0ac1-bdda-428f-83c5-daba2cdb2c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b0:5d:d7:4e:82:70:40:c0:d9:24:83:5a:98: 63:0f:35:50:65:7e:dc:4e:ea:4e:9a:8c:9f:a6:82: c6:88:6c:5d:17:e7:53:3f:a6:75:3a:3b:a0:53:12: 47:88:28:17:f3:88:7a:64:5f:b0:dc:54:ea:0f:54: 00:dd:71:ad:f7:7e:8c:07:d2:61:99:18:58:c8:bb: d4:4c:8b:d5:75:f9:e8:b4:d2:32:2e:eb:b6:71:c8: 3e:41:69:0b:aa:19:76:a1:66:f4:33:64:f2:55:a3: a5:57:3c:b2:28:9f:cd:64:87:06:1d:a5:ed:4f:34: 2e:fb:79:75:14:7a:11:a1:1c:d4:26:19:df:24:e2: 61:8a:1f:35:47:f7:f9:aa:a3:4f:70:4e:52:5e:c6: 44:43:43:81:e2:5a:61:90:02:88:94:4a:64:94:d3: 56:59:03:62:c2:d9:fa:97:9c:12:ee:ad:69:a3:f6: 12:62:2d:b4:92:a5:7c:60:9b:74:63:b8:52:c5:ee: 59:03:ec:02:d7:8c:81:b2:6e:0f:7d:03:80:29:90: 83:6b:79:5b:34:cb:7a:1d:cd:04:78:31:8f:58:da: de:28:cf:00:b2:84:a1:05:51:28:c3:17:be:e8:e6: 26:9a:25:41:cc:39:69:2b:1d:a7:5e:05:5d:2d:cc: 68:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:12:3E:BE:97:0F:9D:1D:27:99:31:28:90:B4:E5:EC:F3:12:AF:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a1:54:68:be:b0:ca:63:05:85:04:f9:13:4a:15:1d:30:0e: 4a:f3:d9:24:87:33:c0:48:34:34:1d:fe:24:06:7d:45:fd:3a: bf:07:42:a2:d8:ac:36:64:d0:ac:29:ce:f6:a9:fc:8b:7e:a6: 7a:90:7d:c6:df:1e:7b:aa:cc:64:69:65:c0:cf:86:0a:c6:5a: 4f:be:2d:50:d7:d6:e3:12:fa:b5:84:da:3e:95:68:28:b7:6c: 61:00:13:80:86:c0:c7:01:7a:7d:2d:ef:2a:07:7b:0b:63:e0: f6:65:ba:30:46:bf:07:04:bb:b3:fd:75:a5:96:25:b5:51:46: 87:f1:16:e7:4e:5f:18:a0:06:e8:bf:e6:6d:29:de:82:e6:7d: 1e:53:3b:d7:2c:d8:57:87:42:a3:fa:a1:95:62:86:21:0a:d0: 2a:ea:2f:34:a1:1d:5b:84:ab:13:6e:66:51:62:1b:b0:c7:61: 6c:6c:4f:63:70:30:8b:c9:49:71:4a:eb:54:30:6a:e1:68:b5: 32:bb:7b:18:08:14:a6:8c:a8:6e:04:79:29:7f:9d:15:47:02: 93:33:68:0f:6c:b0:5a:79:0b:15:91:04:63:5a:1e:d7:c3:89: 04:92:a3:9f:53:d3:26:59:1d:c1:35:26:02:fe:47:78:1f:9a: ab:83:1c:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aFEZB2iq+cSen/CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk MjA3YTBhYzEtYmRkYS00MjhmLTgzYzUtZGFiYTJjZGIyYzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLBd106CcEDA2SSDWphjDzVQZX7cTupOmoyf poLGiGxdF+dTP6Z1OjugUxJHiCgX84h6ZF+w3FTqD1QA3XGt936MB9JhmRhYyLvU TIvVdfnotNIyLuu2ccg+QWkLqhl2oWb0M2TyVaOlVzyyKJ/NZIcGHaXtTzQu+3l1 FHoRoRzUJhnfJOJhih81R/f5qqNPcE5SXsZEQ0OB4lphkAKIlEpklNNWWQNiwtn6 l5wS7q1po/YSYi20kqV8YJt0Y7hSxe5ZA+wC14yBsm4PfQOAKZCDa3lbNMt6Hc0E eDGPWNreKM8AsoShBVEowxe+6OYmmiVBzDlpKx2nXgVdLcxoTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMSPr6XD50dJ5kxKJC05ezzEq9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk3N2M1ZTAtOTdmZS0z ODEzLWE5OWMtNTE1ZDU4ZWMwYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGhVGi+sMpjBYUE+RNKFR0wDkrz2SSHM8BINDQd/iQGfUX9Or8HQqLY rDZk0Kwpzvap/It+pnqQfcbfHnuqzGRpZcDPhgrGWk++LVDX1uMS+rWE2j6VaCi3 bGEAE4CGwMcBen0t7yoHewtj4PZlujBGvwcEu7P9daWWJbVRRofxFudOXxigBui/ 5m0p3oLmfR5TO9cs2FeHQqP6oZVihiEK0CrqLzShHVuEqxNuZlFiG7DHYWxsT2Nw MIvJSXFK61QwauFotTK7exgIFKaMqG4EeSl/nRVHApMzaA9ssFp5CxWRBGNaHtfD iQSSo59T0yZZHcE1JgL+R3gfmquDHFk= -----END CERTIFICATE-----Generated at Sat Jun 13 10:15:44 2026 by rpki-client