$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d8238de-e984-3877-b0e7-850c69ba4dbc.roa File: 3d8238de-e984-3877-b0e7-850c69ba4dbc.roa (raw, json) Hash identifier: 8/UzXv/G1bj2veQGhg1Hg5BW/BX009I+Vagok0HRq+A= Subject key identifier: D8:00:56:B4:BB:F6:81:DA:8A:9B:F8:50:08:04:63:35:AC:D5:1E:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D71A51BC9489225076F668380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d8238de-e984-3877-b0e7-850c69ba4dbc.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 173.222.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1b:c9:48:92:25:07:6f:66:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=8189e82f-4625-4c12-8e2d-400da1f87dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fa:f3:4c:ec:32:36:52:b4:ff:c9:38:4a:a5: 1d:29:04:0b:7c:fa:2b:29:70:7a:63:2a:64:53:76: 90:dd:ec:68:d5:ef:28:37:00:f5:7c:ca:ed:c7:2f: 01:96:8c:2e:fb:44:a0:2f:45:71:f0:93:73:fc:34: c3:1a:4b:e1:37:27:b9:c0:0e:81:c9:b8:4f:db:c9: b8:b6:28:04:42:94:9f:5c:73:ec:a2:6f:f8:04:28: 7e:5e:ca:e1:9e:93:6d:7c:47:a1:00:d7:bf:c4:44: 23:76:c9:41:40:67:9f:76:bb:cd:bf:81:fe:f1:0a: c8:23:32:0f:ca:27:8d:63:2b:92:09:2f:a2:b5:9e: 69:5f:5d:2f:e9:85:f4:3c:c3:7d:51:28:2c:6f:0c: a9:00:c3:5f:b7:44:9e:90:27:e8:ce:67:81:71:37: c6:14:e5:33:7b:d7:d0:03:a6:72:86:d6:19:e2:c3: 3b:93:7b:70:b3:cb:10:e2:6b:2b:f0:88:0e:ee:df: 02:2c:16:1a:e4:52:8f:82:30:ac:24:9e:67:06:69: 0f:bc:a9:e4:cb:7d:a0:29:3e:f9:6c:63:4d:85:c6: 8b:e9:82:80:b5:d3:e6:d4:dc:5d:7c:8b:84:fb:94: a0:c5:c4:9a:f2:e2:c4:02:88:05:3f:c9:96:59:da: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:00:56:B4:BB:F6:81:DA:8A:9B:F8:50:08:04:63:35:AC:D5:1E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d8238de-e984-3877-b0e7-850c69ba4dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:73:f5:df:70:e8:86:ae:90:d0:b8:d8:98:ec:bd:58:8f:04: 91:66:41:f1:c5:2b:90:ad:00:61:ba:27:6d:7d:4b:c1:ea:bc: 5e:21:3b:2d:e5:b3:09:af:88:57:63:51:67:d0:5c:85:2d:73: 01:fa:4c:4e:33:1e:31:14:e6:09:8b:94:a1:d9:5c:ae:4b:8e: 8c:46:54:cc:4a:1e:d5:67:76:a5:5b:aa:b9:17:0d:ab:34:8b: 84:ef:b3:4f:40:a1:4f:59:9f:e8:4b:ee:5c:5d:b7:74:a9:b2: 05:96:23:e4:34:34:db:af:5e:b4:47:85:17:c4:b6:53:11:3c: 6c:5a:36:99:9c:d4:dc:ef:5d:3b:86:14:44:fb:22:0f:a5:51: d9:50:57:1d:30:43:39:00:6f:20:fc:bb:f3:92:a7:ba:2a:3c: c4:db:b6:a7:41:c2:f2:ab:9f:4b:57:94:6b:26:91:3f:4e:e0: b4:6d:19:52:9b:07:59:a5:ea:20:b9:7c:5b:73:ac:dd:09:43: 73:88:4c:6f:80:77:3b:9d:f2:9c:37:0c:5e:42:8c:20:a4:93: f7:e8:33:b0:98:99:3a:18:e4:69:a5:9d:34:de:99:7b:3c:9d: bd:aa:ce:0e:48:ee:4a:a9:7a:89:3e:26:56:a3:5f:b3:51:54: 12:24:c6:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRvJSJIlB29mg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ODE4OWU4MmYtNDYyNS00YzEyLThlMmQtNDAwZGExZjg3ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPrzTOwyNlK0/8k4SqUdKQQLfPorKXB6Yypk U3aQ3exo1e8oNwD1fMrtxy8Blowu+0SgL0Vx8JNz/DTDGkvhNye5wA6BybhP28m4 tigEQpSfXHPsom/4BCh+XsrhnpNtfEehANe/xEQjdslBQGefdrvNv4H+8QrIIzIP yieNYyuSCS+itZ5pX10v6YX0PMN9USgsbwypAMNft0SekCfozmeBcTfGFOUze9fQ A6ZyhtYZ4sM7k3tws8sQ4msr8IgO7t8CLBYa5FKPgjCsJJ5nBmkPvKnky32gKT75 bGNNhcaL6YKAtdPm1NxdfIuE+5SgxcSa8uLEAogFP8mWWdq5SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgAVrS79oHaipv4UAgEYzWs1R40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Q4MjM4ZGUtZTk4NC0z ODc3LWIwZTctODUwYzY5YmE0ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBz9d9w6IaukNC42JjsvViPBJFmQfHFK5CtAGG6J219S8HqvF4hOy3l swmviFdjUWfQXIUtcwH6TE4zHjEU5gmLlKHZXK5LjoxGVMxKHtVndqVbqrkXDas0 i4Tvs09AoU9Zn+hL7lxdt3SpsgWWI+Q0NNuvXrRHhRfEtlMRPGxaNpmc1NzvXTuG FET7Ig+lUdlQVx0wQzkAbyD8u/OSp7oqPMTbtqdBwvKrn0tXlGsmkT9O4LRtGVKb B1ml6iC5fFtzrN0JQ3OITG+Adzud8pw3DF5CjCCkk/foM7CYmToY5GmlnTTemXs8 nb2qzg5I7kqpeok+JlajX7NRVBIkxns= -----END CERTIFICATE-----Generated at Fri Apr 17 10:08:47 2026 by rpki-client