$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa File: 5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa (raw, json) Hash identifier: 1Oy9W5AxpEKV7r8nkBDNx6sozl1p5i2Xye8rL0pYpCQ= Subject key identifier: 87:39:F2:6D:23:F4:B7:BD:0A:35:D2:C7:5A:79:32:85:40:3C:CE:14 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E1A1446F892533CC4F7EAC380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 36183 IP address blocks: 172.225.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:46:f8:92:53:3c:c4:f7:ea:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=2c1b180c-681d-4929-8320-1324d650ec29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6e:ec:7e:72:9c:7a:76:38:47:dc:dd:51:d4: c3:b0:76:58:89:e9:83:39:97:a6:2f:5b:30:22:5f: 42:fa:93:1e:b8:af:75:03:13:50:58:27:fa:20:65: e6:57:75:f5:e7:7a:25:2d:23:53:ee:62:a5:b2:23: da:30:ef:07:20:ff:3a:21:13:f0:e7:a4:36:19:94: 1c:d1:3d:8c:94:79:32:7c:ae:0e:c9:d7:14:59:f6: f4:8d:fa:07:32:86:ef:54:e8:e2:ee:8c:87:5e:65: eb:4e:61:f9:3e:35:bd:08:51:0c:ed:46:b7:e4:ca: 08:68:7c:6e:7b:a4:7c:ff:2f:92:8e:3f:7a:cf:b8: 00:52:ca:49:18:ed:25:80:d1:2b:d1:5f:98:20:d3: f4:a7:59:10:a8:e5:52:13:09:f4:6d:fd:0f:90:fa: b1:8d:44:58:3d:cd:de:0a:a9:0b:ac:54:e0:91:79: 1f:02:f0:18:5a:e0:4c:7d:5d:c1:98:bb:3d:0d:f6: 57:ee:ec:3c:10:a1:65:4c:cb:3c:80:aa:26:78:22: 2a:9a:fc:b5:78:45:11:bd:ef:c9:c7:b5:ef:22:a3: 75:7c:d3:21:9c:1a:ed:46:44:e6:d5:24:a8:61:96: e8:6b:d8:54:67:ce:a3:23:ac:de:93:37:b2:c8:e6: ee:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:39:F2:6D:23:F4:B7:BD:0A:35:D2:C7:5A:79:32:85:40:3C:CE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:24:07:0b:97:cd:9c:d9:56:21:45:e5:28:ed:0a:3f:0c:be: c5:28:8d:a8:4a:58:b8:1d:24:f8:ea:b5:e3:2c:c3:95:cb:c9: 27:c4:f1:cd:a2:57:d0:20:89:8e:47:30:ca:17:9a:72:46:24: 44:84:0e:09:d2:50:a3:f8:9d:fe:7e:30:e0:68:91:69:b5:18: 69:71:ba:0a:ef:73:77:ab:e6:3e:46:1d:60:88:65:d3:e7:d6: 1e:42:74:52:db:4f:55:69:6c:82:84:79:85:e0:0f:52:74:b8: 63:ee:0b:1f:e2:63:9d:fc:ed:81:bd:23:3a:c7:d1:8d:e0:9f: bc:e6:25:41:31:5b:14:56:03:4b:f0:df:90:d0:a2:f5:64:c3: d1:49:ce:5d:61:5f:a2:c3:9e:1d:05:50:d6:11:c1:54:df:ed: d5:2f:51:a9:ce:b8:d1:dd:63:e2:ec:6d:b8:ae:eb:ee:10:25: e8:c4:d0:aa:88:7e:40:f4:e7:c8:29:fc:32:81:34:82:42:e5: e1:d3:1f:68:09:97:48:56:dc:a1:0a:d9:3f:55:2e:78:77:16: 9b:a8:03:25:1a:bf:47:45:25:99:6c:44:b4:e2:63:24:92:8a: e8:fa:03:df:11:59:92:d5:c5:62:b7:da:22:1d:41:1f:15:a2: ea:90:1a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4aFEb4klM8xPfqw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk MmMxYjE4MGMtNjgxZC00OTI5LTgzMjAtMTMyNGQ2NTBlYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt27sfnKcenY4R9zdUdTDsHZYiemDOZemL1sw Il9C+pMeuK91AxNQWCf6IGXmV3X153olLSNT7mKlsiPaMO8HIP86IRPw56Q2GZQc 0T2MlHkyfK4OydcUWfb0jfoHMobvVOji7oyHXmXrTmH5PjW9CFEM7Ua35MoIaHxu e6R8/y+Sjj96z7gAUspJGO0lgNEr0V+YINP0p1kQqOVSEwn0bf0PkPqxjURYPc3e CqkLrFTgkXkfAvAYWuBMfV3BmLs9DfZX7uw8EKFlTMs8gKomeCIqmvy1eEURve/J x7XvIqN1fNMhnBrtRkTm1SSoYZboa9hUZ86jI6zekzeyyObueQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc58m0j9Le9CjXSx1p5MoVAPM4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM0Y2VjYWEtMTAxZC0z ZTMxLTkwYzctYmNlZWVlNTQxNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkkBwuXzZzZViFF5SjtCj8MvsUojahKWLgdJPjqteMsw5XLySfE8c2i V9AgiY5HMMoXmnJGJESEDgnSUKP4nf5+MOBokWm1GGlxugrvc3er5j5GHWCIZdPn 1h5CdFLbT1VpbIKEeYXgD1J0uGPuCx/iY5387YG9IzrH0Y3gn7zmJUExWxRWA0vw 35DQovVkw9FJzl1hX6LDnh0FUNYRwVTf7dUvUanOuNHdY+Lsbbiu6+4QJejE0KqI fkD058gp/DKBNIJC5eHTH2gJl0hW3KEK2T9VLnh3FpuoAyUav0dFJZlsRLTiYySS iuj6A98RWZLVxWK32iIdQR8VouqQGj0= -----END CERTIFICATE-----Generated at Sat Jun 13 09:59:38 2026 by rpki-client