$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f34b0a4-fc4e-324c-891e-8639fce7838b.roa File: 5f34b0a4-fc4e-324c-891e-8639fce7838b.roa (raw, json) Hash identifier: QqL/8/ulRI7V9VSfG12PLvFwAm2hvUM2m64RTnuq+J8= Subject key identifier: F6:7C:D1:4E:18:DF:0E:DA:A8:97:14:15:08:B0:0F:38:B8:11:B9:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D6C0FC2C9A26F03BB18C13640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f34b0a4-fc4e-324c-891e-8639fce7838b.roa Signing time: Tue 07 Apr 2026 01:00:23 +0000 ROA not before: Tue 07 Apr 2026 01:00:23 +0000 ROA not after: Mon 06 Jul 2026 01:00:23 +0000 asID: 36183 IP address blocks: 172.224.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6c:0f:c2:c9:a2:6f:03:bb:18:c1:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 7 01:00:23 2026 GMT Not After : Jul 6 01:00:23 2026 GMT Subject: CN=2768de39-7c69-4111-b24b-53741005529c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:68:ec:17:af:cb:2c:39:bf:18:07:e0:cd: 3a:7b:9b:64:ec:c0:5f:77:73:be:ba:38:34:d5:aa: 89:a9:9b:f0:9a:ba:52:25:d4:aa:35:fd:da:a0:a7: aa:73:d7:1e:1c:b4:76:85:6f:1a:5f:a2:d2:1c:33: 82:14:e0:4a:d0:74:48:8f:81:37:3b:7d:db:98:47: d0:ca:30:cb:28:bd:47:16:1e:2e:fd:9f:4e:c6:e2: 0a:57:8a:e7:0e:1f:97:52:ca:30:db:76:ab:95:38: bc:0f:1d:96:1c:11:3f:78:1e:1d:18:c0:09:22:23: f0:87:5f:a6:a9:f9:18:a2:35:49:fa:0c:13:86:1b: 88:de:ae:44:72:ea:6c:a3:83:b8:59:fb:f8:36:fe: 83:37:09:82:bf:e1:73:f1:e0:f0:3e:73:a0:ee:c1: 49:37:a5:48:0e:44:70:95:41:61:a8:7e:9d:28:3e: 0a:1b:a1:96:a3:5d:ac:a8:6d:f3:78:23:cd:db:e8: 3e:d1:71:18:27:ba:90:57:da:24:83:fa:d1:6d:18: 6d:06:77:f0:ab:20:3c:8e:91:46:25:dd:31:92:33: ff:ac:5d:81:10:df:3c:4f:8c:c8:96:31:89:a5:e2: f5:27:33:5e:de:56:28:14:c3:38:c1:50:84:a9:1a: d8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:7C:D1:4E:18:DF:0E:DA:A8:97:14:15:08:B0:0F:38:B8:11:B9:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f34b0a4-fc4e-324c-891e-8639fce7838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5e:17:91:03:fd:5c:98:12:95:4f:b1:64:bb:0a:33:f4:3d: 28:d0:4f:db:02:44:c9:bb:5d:e9:64:f2:23:41:93:67:2f:a4: cf:c5:a9:2f:5d:30:0c:70:24:af:db:b7:86:8a:ac:d7:95:e6: c1:0a:d0:8e:ec:a2:19:04:a9:11:61:2e:9c:ff:9b:46:27:2b: cc:10:09:3f:eb:32:f5:e8:b4:ab:30:5d:b1:86:76:8c:aa:0c: 77:8a:11:b9:20:81:92:e3:18:f0:41:18:8c:ff:c7:78:ed:68: ee:21:f9:e1:0e:8c:eb:95:e0:fe:18:38:2c:c9:4b:1b:b4:13: ee:56:a8:ba:2f:d8:8c:20:ff:0f:db:6f:71:ad:30:a1:e5:77: c9:3e:8f:29:19:69:aa:1e:b8:4a:e2:22:7b:6c:b9:8c:ea:10: 78:f4:7a:2d:1a:13:72:17:66:14:fc:cc:69:94:fa:cf:00:17: 5e:0c:69:dd:c5:42:2c:2e:18:fa:c0:34:27:56:1e:d1:b6:30: 3c:48:7b:86:c4:30:25:ec:79:91:e1:fd:8f:ed:5d:d4:20:24: 1a:ee:1e:96:81:49:26:e2:64:56:b9:fc:52:08:0b:ac:f2:12: ea:32:3c:9d:21:b5:70:50:34:6a:e0:fe:36:6f:28:1c:8b:eb: ce:ab:c5:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1sD8LJom8DuxjBNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNzAxMDAyM1oXDTI2MDcwNjAxMDAyM1owLzEtMCsGA1UEAxMk Mjc2OGRlMzktN2M2OS00MTExLWIyNGItNTM3NDEwMDU1MjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/5o7Bevyyw5vxgH4M06e5tk7MBfd3O+ujg0 1aqJqZvwmrpSJdSqNf3aoKeqc9ceHLR2hW8aX6LSHDOCFOBK0HRIj4E3O33bmEfQ yjDLKL1HFh4u/Z9OxuIKV4rnDh+XUsow23arlTi8Dx2WHBE/eB4dGMAJIiPwh1+m qfkYojVJ+gwThhuI3q5Ecupso4O4Wfv4Nv6DNwmCv+Fz8eDwPnOg7sFJN6VIDkRw lUFhqH6dKD4KG6GWo12sqG3zeCPN2+g+0XEYJ7qQV9okg/rRbRhtBnfwqyA8jpFG Jd0xkjP/rF2BEN88T4zIljGJpeL1JzNe3lYoFMM4wVCEqRrYQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZ80U4Y3w7aqJcUFQiwDzi4Ebl9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWYzNGIwYTQtZmM0ZS0z MjRjLTg5MWUtODYzOWZjZTc4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5eF5ED/VyYEpVPsWS7CjP0PSjQT9sCRMm7Xelk8iNBk2cvpM/FqS9d MAxwJK/bt4aKrNeV5sEK0I7sohkEqRFhLpz/m0YnK8wQCT/rMvXotKswXbGGdoyq DHeKEbkggZLjGPBBGIz/x3jtaO4h+eEOjOuV4P4YOCzJSxu0E+5WqLov2Iwg/w/b b3GtMKHld8k+jykZaaoeuEriIntsuYzqEHj0ei0aE3IXZhT8zGmU+s8AF14Mad3F QiwuGPrANCdWHtG2MDxIe4bEMCXseZHh/Y/tXdQgJBruHpaBSSbiZFa5/FIIC6zy EuoyPJ0htXBQNGrg/jZvKByL686rxU8= -----END CERTIFICATE-----Generated at Fri Apr 17 16:26:22 2026 by rpki-client