$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5932c9aa-296b-350c-b040-d42012679d4b.roa File: 5932c9aa-296b-350c-b040-d42012679d4b.roa (raw, json) Hash identifier: POr0wTFbJMekmOm2q+lfJM9mCRpysgEkbJxGrh3rCZc= Subject key identifier: E8:AA:85:67:D3:54:EC:3A:75:2C:5A:65:C2:A8:10:CE:A7:F8:60:47 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E1A1445E6CB8CE1142F6D8740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5932c9aa-296b-350c-b040-d42012679d4b.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 36183 IP address blocks: 172.225.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:45:e6:cb:8c:e1:14:2f:6d:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=40035d04-d22b-4d87-a2a2-faff018d35f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8a:5d:1a:58:96:56:72:f6:61:89:f1:d0:26: 48:18:c8:f0:31:5a:c5:05:af:f6:aa:74:20:9f:53: 5a:4d:d7:7e:5a:6d:e3:dd:10:51:63:8b:7f:f7:36: 04:b5:f5:d5:a1:c2:b2:01:3a:b1:e9:75:79:c8:b1: 66:2d:35:06:ad:c4:9f:46:35:05:ca:cb:bc:18:fa: 3e:2b:16:fa:7c:a7:b6:14:71:8a:5b:38:5d:d3:98: 93:8a:f0:a0:05:44:a0:05:4b:c5:2f:ea:16:9c:dc: cd:7a:f9:e2:02:08:93:94:d1:e8:47:bb:db:0b:17: 59:c6:17:71:e4:d6:c7:84:b4:fd:80:49:f0:7a:df: 9b:c6:db:94:51:d5:b0:19:6b:1e:e7:c1:79:b8:1d: ba:e3:cc:21:84:99:94:12:e0:27:ac:47:cd:1c:7c: fb:51:8e:5d:db:bd:d8:16:48:8f:9e:4e:46:ef:dd: 7e:34:25:75:60:78:88:3b:21:4e:ff:31:5e:5d:0e: 51:df:65:59:d2:74:c4:ec:9e:8e:2c:fd:fb:cf:71: 2f:30:70:3d:99:7e:72:ef:21:ef:e3:4f:68:f8:d6: ba:1b:a9:2b:c4:e9:b1:71:f2:cf:1a:17:f3:cc:21: 7f:67:3c:05:3b:e7:77:43:b7:9b:1b:e7:34:42:59: 39:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AA:85:67:D3:54:EC:3A:75:2C:5A:65:C2:A8:10:CE:A7:F8:60:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5932c9aa-296b-350c-b040-d42012679d4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2c:0a:10:d1:58:e5:98:c9:df:94:4e:88:af:a4:4c:47:2d: a1:fc:58:73:b9:6a:b1:2b:e4:2b:4e:0c:c8:31:c3:1e:79:a4: b5:78:77:4e:06:fb:84:aa:13:53:30:e7:3f:01:0e:3c:29:18: b4:03:b0:c4:47:a4:74:42:6e:5a:96:6e:d9:da:fa:18:25:72: eb:bc:56:01:73:a9:0a:a2:c3:d5:aa:3f:54:19:83:eb:bb:cc: 00:13:6b:3c:79:1d:fa:a4:eb:6b:83:d5:c6:7d:08:be:ce:da: 56:41:50:bc:26:ab:99:6e:73:68:d6:6b:86:6c:cf:07:77:37: 38:0b:70:8f:bf:32:a5:ac:ab:5c:7a:39:ee:54:cb:89:0b:cc: bb:3b:2d:8d:fe:e6:85:76:d8:b2:a6:bb:66:72:42:6c:52:a8: af:8c:8f:d7:e5:ca:9f:b3:48:16:c2:82:78:41:66:dd:f4:55: 51:68:f8:16:2c:f2:dc:c6:65:70:c2:10:6b:4a:21:b8:53:26: aa:8a:39:5a:33:51:03:3c:a3:89:ea:1a:ef:dc:7a:bf:56:28: 9a:51:94:7b:34:86:bb:f0:d8:84:d2:a3:9f:0f:ee:3d:e3:da: 21:3f:9e:9e:32:1d:08:4d:d2:9b:35:b6:7b:6f:55:92:87:a0: b5:ed:80:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aFEXmy4zhFC9th0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk NDAwMzVkMDQtZDIyYi00ZDg3LWEyYTItZmFmZjAxOGQzNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIpdGliWVnL2YYnx0CZIGMjwMVrFBa/2qnQg n1NaTdd+Wm3j3RBRY4t/9zYEtfXVocKyATqx6XV5yLFmLTUGrcSfRjUFysu8GPo+ Kxb6fKe2FHGKWzhd05iTivCgBUSgBUvFL+oWnNzNevniAgiTlNHoR7vbCxdZxhdx 5NbHhLT9gEnwet+bxtuUUdWwGWse58F5uB2648whhJmUEuAnrEfNHHz7UY5d273Y FkiPnk5G791+NCV1YHiIOyFO/zFeXQ5R32VZ0nTE7J6OLP37z3EvMHA9mX5y7yHv 409o+Na6G6krxOmxcfLPGhfzzCF/ZzwFO+d3Q7ebG+c0Qlk5AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiqhWfTVOw6dSxaZcKoEM6n+GBHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTkzMmM5YWEtMjk2Yi0z NTBjLWIwNDAtZDQyMDEyNjc5ZDRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEksChDRWOWYyd+UToivpExHLaH8WHO5arEr5CtODMgxwx55pLV4d04G +4SqE1Mw5z8BDjwpGLQDsMRHpHRCblqWbtna+hglcuu8VgFzqQqiw9WqP1QZg+u7 zAATazx5Hfqk62uD1cZ9CL7O2lZBULwmq5luc2jWa4Zszwd3NzgLcI+/MqWsq1x6 Oe5Uy4kLzLs7LY3+5oV22LKmu2ZyQmxSqK+Mj9flyp+zSBbCgnhBZt30VVFo+BYs 8tzGZXDCEGtKIbhTJqqKOVozUQM8o4nqGu/cer9WKJpRlHs0hrvw2ITSo58P7j3j 2iE/np4yHQhN0ps1tntvVZKHoLXtgAE= -----END CERTIFICATE-----Generated at Sat Jun 13 22:55:38 2026 by rpki-client