$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa File: 4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa (raw, json) Hash identifier: QPxS4Qm5X1w50DOYWlmGR7ERqnZ/x3jVUuVN0Pivwo8= Subject key identifier: 3D:77:9A:8E:8E:2D:13:91:DA:19:C8:22:23:8F:65:86:24:60:44:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D571FBD60C25CF79A89B23380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 36183 IP address blocks: 172.224.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:bd:60:c2:5c:f7:9a:89:b2:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=051e19c2-5a57-4f9c-97d7-40bfee8c526b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:e5:88:d1:ba:3f:29:0d:c0:b6:00:74:02: 7b:9b:41:52:03:b9:d8:72:67:a6:fd:aa:eb:56:52: 7f:b9:4b:98:d0:13:e9:21:85:be:45:58:60:25:8d: bd:2b:09:c9:76:30:d2:e3:ee:fc:d5:32:29:14:d9: 89:c5:88:33:9e:94:e0:b1:2a:89:62:0e:76:ea:ca: 5b:18:43:79:e8:59:62:8a:47:15:21:ec:cd:c3:d4: 7d:3a:17:31:a2:28:e8:14:8a:24:44:d4:57:24:29: b6:f4:00:99:d3:30:98:fa:49:9d:92:08:ef:5f:8d: bb:8f:0a:8d:77:67:82:c7:ea:81:fd:ca:d9:b3:ab: 99:ba:ab:8c:a7:fc:a6:70:9c:ff:71:9b:8a:ce:95: ed:f9:27:90:87:39:d5:cb:bb:b3:e0:43:a2:c9:e7: 51:f3:91:90:14:bf:6b:82:72:d1:5c:14:4f:61:f0: a4:34:97:dc:ab:f4:2a:22:8e:35:6b:69:8c:b0:12: 4b:29:56:89:d6:4c:e6:69:b4:53:b3:72:8f:90:75: 2b:02:fd:88:52:cb:0f:13:39:b1:ea:63:71:de:c0: 59:9b:61:2a:a1:fb:8d:a1:e4:cd:c2:ec:82:4b:f4: 2e:a4:f5:9c:f3:ff:1f:e2:62:75:e2:96:ae:02:69: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:77:9A:8E:8E:2D:13:91:DA:19:C8:22:23:8F:65:86:24:60:44:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:03:ad:f4:85:b7:f8:df:b1:50:3a:b4:34:b2:c2:66:0a:1f: 44:26:ce:cc:12:f1:d5:45:87:55:0b:4a:50:8e:f9:ab:43:24: 26:72:f0:55:36:0c:83:6a:41:ae:e6:2f:c1:90:f2:dd:8d:67: 3f:d9:92:e4:83:17:0c:c2:5a:e8:79:f2:e6:03:35:6d:8c:9b: bc:66:c2:22:e5:56:13:5b:aa:71:79:1d:56:dc:9f:7e:14:b4: 16:b7:4d:01:10:8a:bd:0d:23:5b:57:0f:0b:8b:45:d7:d0:76: f4:d7:82:8e:09:1a:ae:84:f6:0f:99:25:35:45:7c:bc:12:87: fa:2d:b8:5a:4f:88:ed:21:16:17:e9:d2:a6:86:7a:ff:fe:9b: 4a:c3:7d:79:fd:2a:97:af:34:b6:6c:96:1a:9f:b4:24:7e:5d: 1f:2b:75:93:f6:d1:7e:ff:e1:03:39:ab:5c:62:e9:bb:a6:0a: df:16:28:6d:ec:4e:4b:4b:84:8d:1e:6a:3f:2c:7e:70:e0:bf: 1f:66:7d:34:a9:48:20:a1:56:6b:24:57:35:9c:12:17:27:1f: a7:62:88:0a:6c:be:7d:78:a9:8d:54:d6:59:20:a0:8a:3b:59: e8:1c:1e:fc:13:59:80:05:f5:c6:35:0e:a0:2b:24:9f:41:10: 24:23:0b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH71gwlz3momyM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MDUxZTE5YzItNWE1Ny00ZjljLTk3ZDctNDBiZmVlOGM1MjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSrliNG6PykNwLYAdAJ7m0FSA7nYcmem/arr VlJ/uUuY0BPpIYW+RVhgJY29KwnJdjDS4+781TIpFNmJxYgznpTgsSqJYg526spb GEN56FliikcVIezNw9R9OhcxoijoFIokRNRXJCm29ACZ0zCY+kmdkgjvX427jwqN d2eCx+qB/crZs6uZuquMp/ymcJz/cZuKzpXt+SeQhznVy7uz4EOiyedR85GQFL9r gnLRXBRPYfCkNJfcq/QqIo41a2mMsBJLKVaJ1kzmabRTs3KPkHUrAv2IUssPEzmx 6mNx3sBZm2EqofuNoeTNwuyCS/QupPWc8/8f4mJ14pauAmmWEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD13mo6OLROR2hnIIiOPZYYkYEShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI0YmIxZDMtZTM3OC0z ZDI3LWEyOGEtNWRhYjFjNDM3NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIDrfSFt/jfsVA6tDSywmYKH0QmzswS8dVFh1ULSlCO+atDJCZy8FU2 DINqQa7mL8GQ8t2NZz/ZkuSDFwzCWuh58uYDNW2Mm7xmwiLlVhNbqnF5HVbcn34U tBa3TQEQir0NI1tXDwuLRdfQdvTXgo4JGq6E9g+ZJTVFfLwSh/otuFpPiO0hFhfp 0qaGev/+m0rDfXn9KpevNLZslhqftCR+XR8rdZP20X7/4QM5q1xi6bumCt8WKG3s TktLhI0eaj8sfnDgvx9mfTSpSCChVmskVzWcEhcnH6diiApsvn14qY1U1lkgoIo7 WegcHvwTWYAF9cY1DqArJJ9BECQjC1Q= -----END CERTIFICATE-----Generated at Fri Apr 17 07:32:46 2026 by rpki-client