$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa File: 3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa (raw, json) Hash identifier: xLKTnq+mWAr9zwbl3DTZd66GV4XgObRgui+KdkrBf3U= Subject key identifier: 89:D8:5C:96:45:F8:FF:37:55:DB:A8:A6:AD:EC:93:D0:64:1F:26:89 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D4D5A7EACE05865BCF42C5300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.226.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:7e:ac:e0:58:65:bc:f4:2c:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=3031a59d-85a5-4d01-9764-783776910c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:3a:02:1c:64:ff:7c:ed:e0:19:6c:34:49: 67:48:61:c8:c1:0e:da:64:c2:81:b2:d8:b3:ee:a0: 28:3a:e4:54:bd:95:b2:c1:a1:92:5b:98:1b:40:37: 61:18:32:1f:48:82:fe:bf:16:65:96:3e:a4:b3:51: 44:5d:fa:fa:cd:68:91:4d:f3:11:58:54:90:de:ad: 5f:18:0a:e6:6d:ab:4b:00:8b:68:16:89:19:46:96: ae:8e:26:bc:89:f8:52:d0:ec:7b:8c:54:25:b3:94: af:e6:93:4d:62:75:9e:44:9e:e0:49:78:68:a0:f1: 6d:89:ac:60:c8:86:f0:47:ee:ee:2d:e8:e1:34:43: 28:07:b7:f8:cb:aa:ac:b7:a9:82:a6:fe:4c:79:5e: 78:69:82:97:fc:c3:80:78:ec:a9:85:0b:68:69:b4: 67:b7:74:87:91:9d:65:d6:bd:d1:c7:b6:16:56:18: 24:a7:b8:f0:b9:8e:d3:06:44:55:19:23:c8:5e:b0: 2a:11:37:5e:20:29:7b:7b:c8:8e:1e:74:74:0c:9c: 40:da:83:74:d0:5a:3f:10:d5:a1:e1:09:be:65:cb: c3:5c:06:a3:2e:13:9f:8c:3d:79:79:31:b7:ff:4c: 07:61:6e:bb:d4:45:44:be:b1:99:cf:5d:90:12:d4: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D8:5C:96:45:F8:FF:37:55:DB:A8:A6:AD:EC:93:D0:64:1F:26:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9b:e8:37:64:fe:63:28:c5:20:f3:c3:12:53:ca:33:df:69: ab:0f:7c:3c:7b:34:ce:5f:a2:5e:54:32:b8:e2:22:75:39:38: 70:87:ee:42:9f:93:ae:1a:2f:82:9b:94:42:aa:35:0b:3c:57: 0b:a3:da:49:1f:1d:1a:7e:66:3e:a2:0a:dd:44:43:8f:30:bc: d3:e4:14:87:fd:f1:3a:7e:77:53:6d:e6:fe:fd:ba:1f:a7:ec: d3:74:11:4b:d6:39:64:2b:53:43:37:e2:9c:67:6b:58:22:5c: d5:d9:72:17:d7:10:74:dc:98:e7:f9:e6:2e:42:4f:47:75:7c: 1b:2f:5e:e7:6d:a5:60:26:27:5d:24:48:8a:96:c2:72:82:89: 48:ec:3a:60:d6:c8:6c:1d:77:f1:7e:00:5c:4c:8b:cc:65:d2: b1:d2:fa:eb:79:60:1f:02:49:19:6c:17:61:4c:bc:ea:6e:b1: 02:2e:6e:15:73:6d:0a:c2:bd:42:26:d3:1f:85:d8:44:71:1e: 46:bf:a4:49:6f:85:d3:58:12:c1:22:41:03:44:f1:1d:96:84: a6:36:1b:6f:ac:f6:3c:9e:e8:a2:70:2f:d1:57:ca:88:dd:1e: f2:71:f7:62:dd:18:a1:17:f7:7e:2d:11:90:12:84:dc:3a:bc: 33:ed:16:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWn6s4FhlvPQsUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk MzAzMWE1OWQtODVhNS00ZDAxLTk3NjQtNzgzNzc2OTEwYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlws6Ahxk/3zt4BlsNElnSGHIwQ7aZMKBstiz 7qAoOuRUvZWywaGSW5gbQDdhGDIfSIL+vxZllj6ks1FEXfr6zWiRTfMRWFSQ3q1f GArmbatLAItoFokZRpaujia8ifhS0Ox7jFQls5Sv5pNNYnWeRJ7gSXhooPFtiaxg yIbwR+7uLejhNEMoB7f4y6qst6mCpv5MeV54aYKX/MOAeOyphQtoabRnt3SHkZ1l 1r3Rx7YWVhgkp7jwuY7TBkRVGSPIXrAqETdeICl7e8iOHnR0DJxA2oN00Fo/ENWh 4Qm+ZcvDXAajLhOfjD15eTG3/0wHYW671EVEvrGZz12QEtTrhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInYXJZF+P83Vduopq3sk9BkHyaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NiMmIwMmYtNDg2Ni0z MWE2LWJkZjUtM2Q5M2Q0MGFkZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyb6Ddk/mMoxSDzwxJTyjPfaasPfDx7NM5fol5UMrjiInU5OHCH7kKf k64aL4KblEKqNQs8Vwuj2kkfHRp+Zj6iCt1EQ48wvNPkFIf98Tp+d1Nt5v79uh+n 7NN0EUvWOWQrU0M34pxna1giXNXZchfXEHTcmOf55i5CT0d1fBsvXudtpWAmJ10k SIqWwnKCiUjsOmDWyGwdd/F+AFxMi8xl0rHS+ut5YB8CSRlsF2FMvOpusQIubhVz bQrCvUIm0x+F2ERxHka/pElvhdNYEsEiQQNE8R2WhKY2G2+s9jye6KJwL9FXyojd HvJx92LdGKEX934tEZAShNw6vDPtFtE= -----END CERTIFICATE-----Generated at Fri Apr 17 13:00:14 2026 by rpki-client