$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2f5402-80c6-3aa4-b762-aa80a170b213.roa File: 3f2f5402-80c6-3aa4-b762-aa80a170b213.roa (raw, json) Hash identifier: 8EyUWq152uFLVEMNucrS3kwGqappay5SYDN5AI4URyI= Subject key identifier: A2:EF:1A:03:C1:10:10:0D:26:39:18:DC:24:7A:0D:39:0D:4C:66:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E1FA9ABB6B36E5967F94B7180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2f5402-80c6-3aa4-b762-aa80a170b213.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 36183 IP address blocks: 172.225.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:ab:b6:b3:6e:59:67:f9:4b:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=c9749ddc-1274-41fc-abd4-efe9ad299867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:85:88:13:75:a0:99:12:d4:81:7e:da:7f: 52:0d:16:8c:44:ea:d2:1a:f9:03:56:4a:9f:f5:fe: 3d:48:d3:eb:a0:32:15:96:90:c4:80:d2:38:a9:77: e4:8a:99:cc:73:3d:4c:64:2a:21:f8:32:c9:fb:e3: ca:db:bb:dd:74:28:57:88:43:8e:8e:e6:b8:6f:8c: f6:74:0e:e5:46:e0:5a:8f:69:79:4a:1b:5f:fc:33: 2e:1f:ad:af:43:ca:4a:5c:22:52:4a:1e:7a:5e:02: d4:e5:26:e9:2e:00:5b:6b:da:9f:84:1c:dc:5b:7c: 79:4c:df:6a:b7:20:55:f9:20:20:65:8c:f1:81:a4: ab:5c:cf:7e:8b:41:da:fa:ed:ea:b3:c1:d4:cf:31: 1c:22:9c:03:5d:d3:82:e4:12:4d:04:f5:fb:f3:40: 01:d6:62:23:b5:dd:76:79:84:f0:55:7e:26:6c:50: 82:7f:5a:93:38:57:9d:f6:ac:78:94:e6:b5:70:28: cc:3b:02:1d:7f:2c:ae:30:0a:94:5f:ca:4b:c3:31: 99:29:4b:11:74:03:68:fe:a6:5f:a9:a7:99:7c:09: b2:07:28:b9:b5:f8:05:67:80:21:56:52:2b:89:78: b5:c2:13:cd:5f:e8:59:00:d3:4a:c7:46:e8:11:3e: c2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EF:1A:03:C1:10:10:0D:26:39:18:DC:24:7A:0D:39:0D:4C:66:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2f5402-80c6-3aa4-b762-aa80a170b213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a4:90:7e:18:32:e2:54:b5:f7:7d:3c:cc:70:10:34:03:50: bd:48:bd:7f:64:1a:81:11:53:6e:f7:9e:87:93:6e:2d:55:61: 02:fd:e8:a7:d2:20:3b:4c:03:d5:cd:7e:09:51:48:60:6e:79: f2:5e:61:b5:75:6f:b5:87:80:08:b1:a2:e6:4f:1c:6f:a2:c2: 25:af:70:49:3e:09:97:54:5c:e7:8e:21:72:55:f3:78:9d:a8: 9d:fc:31:e7:3f:fd:5c:a7:0c:88:be:3b:58:e7:fa:8e:a3:c8: 8b:18:0a:aa:c4:a0:c4:ef:78:a2:3b:8f:83:64:a6:9e:dc:fb: ab:03:a0:eb:c4:a1:fc:27:63:05:c3:b1:f1:be:59:e2:c1:6f: b7:5e:78:a6:41:6b:e6:a7:5c:01:c2:cd:0a:91:67:91:04:e7: 18:e1:bf:d0:d7:8f:92:3b:b8:91:d5:7a:77:0a:b6:7f:b9:a0: 30:a2:e4:44:c3:9b:82:3a:41:5d:4c:1b:68:e1:02:27:ab:cb: a4:57:a8:2e:43:0a:67:53:50:7b:fa:f8:c1:77:03:84:ef:ad: 59:5c:1a:6e:12:ad:a0:b9:ac:13:55:0a:22:99:c0:be:81:ad: d8:a2:52:6d:54:d9:ae:5c:1c:42:7a:85:a2:24:f7:43:61:da: e9:79:ce:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqau2s25ZZ/lLcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk Yzk3NDlkZGMtMTI3NC00MWZjLWFiZDQtZWZlOWFkMjk5ODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA+FiBN1oJkS1IF+2n9SDRaMROrSGvkDVkqf 9f49SNProDIVlpDEgNI4qXfkipnMcz1MZCoh+DLJ++PK27vddChXiEOOjua4b4z2 dA7lRuBaj2l5Shtf/DMuH62vQ8pKXCJSSh56XgLU5SbpLgBba9qfhBzcW3x5TN9q tyBV+SAgZYzxgaSrXM9+i0Ha+u3qs8HUzzEcIpwDXdOC5BJNBPX780AB1mIjtd12 eYTwVX4mbFCCf1qTOFed9qx4lOa1cCjMOwIdfyyuMAqUX8pLwzGZKUsRdANo/qZf qaeZfAmyByi5tfgFZ4AhVlIriXi1whPNX+hZANNKx0boET7C7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLvGgPBEBANJjkY3CR6DTkNTGaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YyZjU0MDItODBjNi0z YWE0LWI3NjItYWE4MGExNzBiMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqkkH4YMuJUtfd9PMxwEDQDUL1IvX9kGoERU273noeTbi1VYQL96KfS IDtMA9XNfglRSGBuefJeYbV1b7WHgAixouZPHG+iwiWvcEk+CZdUXOeOIXJV83id qJ38Mec//VynDIi+O1jn+o6jyIsYCqrEoMTveKI7j4Nkpp7c+6sDoOvEofwnYwXD sfG+WeLBb7deeKZBa+anXAHCzQqRZ5EE5xjhv9DXj5I7uJHVencKtn+5oDCi5ETD m4I6QV1MG2jhAiery6RXqC5DCmdTUHv6+MF3A4TvrVlcGm4SraC5rBNVCiKZwL6B rdiiUm1U2a5cHEJ6haIk90Nh2ul5zkQ= -----END CERTIFICATE-----Generated at Sat Jun 13 17:13:59 2026 by rpki-client