$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f3f9bb1-f3f9-30d1-8df3-6ad1e3bf14b4.roa File: 7f3f9bb1-f3f9-30d1-8df3-6ad1e3bf14b4.roa (raw, json) Hash identifier: 1RopomHfZ3VJ+tV2UHmZ3x6JK5wRT7HBh3QjxIMIafU= Subject key identifier: 34:B9:85:70:66:B2:91:E2:E2:2C:04:1C:4F:60:4E:7C:33:E3:AF:BA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E210F7189E8D227321D1F1700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f3f9bb1-f3f9-30d1-8df3-6ad1e3bf14b4.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 36183 IP address blocks: 172.225.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0f:71:89:e8:d2:27:32:1d:1f:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=8513025c-2bee-4af2-a693-9ff2995fceba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:30:f2:4b:4c:62:b7:5a:7e:9b:42:81:82: 59:5c:e2:6a:3a:01:bc:e8:1d:ae:d4:b0:67:c0:eb: e1:13:aa:ae:f6:7b:00:1c:21:6e:bc:83:42:cf:c8: 4b:e5:38:ea:8c:ba:af:e3:ee:4b:5c:ef:7f:7f:4f: 81:5f:8d:3a:94:92:aa:44:08:0d:9a:87:85:b6:fd: e0:aa:4b:c2:fe:61:04:20:30:2d:65:a9:43:b5:5b: bf:e8:59:ff:d8:b1:6b:00:10:89:34:2c:f3:bb:58: fa:e5:20:dc:49:41:1d:b4:f8:30:f1:46:79:9e:fb: b7:bc:ac:a9:06:99:ae:ac:ca:43:20:25:23:f9:48: 46:56:82:74:aa:42:0c:3a:24:20:b8:e7:bc:9f:05: 13:89:b2:58:95:a7:85:ee:1d:02:06:00:ad:ce:a1: 0a:e9:05:a5:f1:d9:65:53:96:00:e1:bf:c2:8b:65: ef:ec:8f:6c:c3:d3:3e:e1:02:d4:0e:9e:97:47:f9: d6:95:67:33:2a:ef:01:68:05:c1:60:7b:b6:1a:42: 34:00:37:e9:d6:c9:83:24:d0:6e:12:1b:af:24:bc: fb:99:c3:ab:f1:97:a7:2f:33:45:01:00:83:97:1e: ef:7d:ff:72:45:56:a1:9e:ee:5a:8b:70:74:b1:cb: 11:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:B9:85:70:66:B2:91:E2:E2:2C:04:1C:4F:60:4E:7C:33:E3:AF:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7f3f9bb1-f3f9-30d1-8df3-6ad1e3bf14b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:dd:d3:e1:b2:ed:59:f2:83:d0:82:88:db:18:80:34:a5:b9: c7:67:33:84:df:c1:cc:b8:bd:29:9e:5c:de:92:11:a2:a3:cc: e9:80:29:d6:ab:b8:4b:f0:e7:4f:4a:11:ea:ad:a4:09:da:bd: a0:55:0d:30:84:8a:e1:5e:2f:8b:3d:bf:55:37:69:8f:1a:62: d8:00:75:b4:9d:16:33:2c:bb:a0:fa:ca:8b:e4:1f:d5:fe:15: 0b:dd:3a:fd:61:a8:1f:dd:87:28:de:d3:b9:a3:94:9e:09:74: 90:16:0c:76:68:0a:20:f0:be:91:7f:b0:a7:de:2d:00:0e:4a: 09:b6:4f:51:85:6f:64:89:ef:0b:af:c1:cf:a7:e9:12:13:b6: 37:6d:4e:15:99:a7:ec:1b:20:a4:6c:31:61:f7:46:50:3d:e2: 3c:a2:1b:88:74:fc:f3:43:1c:c2:c4:b8:c2:0b:0c:fb:42:42: d6:99:3d:58:be:0c:b2:26:31:28:95:dc:ec:8b:1e:e5:76:b5: e3:87:0e:20:bc:a0:4b:2e:64:f8:6b:89:18:31:80:28:f7:2a: 8a:f2:3d:dc:d5:96:bc:d6:ea:09:8c:36:bb:50:20:b6:6c:77: b8:9d:30:1b:95:94:13:d7:6e:f1:0c:c8:19:94:4f:89:aa:ba: 14:5d:a8:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hD3GJ6NInMh0fFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk ODUxMzAyNWMtMmJlZS00YWYyLWE2OTMtOWZmMjk5NWZjZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr8w8ktMYrdafptCgYJZXOJqOgG86B2u1LBn wOvhE6qu9nsAHCFuvINCz8hL5TjqjLqv4+5LXO9/f0+BX406lJKqRAgNmoeFtv3g qkvC/mEEIDAtZalDtVu/6Fn/2LFrABCJNCzzu1j65SDcSUEdtPgw8UZ5nvu3vKyp BpmurMpDICUj+UhGVoJ0qkIMOiQguOe8nwUTibJYlaeF7h0CBgCtzqEK6QWl8dll U5YA4b/Ci2Xv7I9sw9M+4QLUDp6XR/nWlWczKu8BaAXBYHu2GkI0ADfp1smDJNBu EhuvJLz7mcOr8ZenLzNFAQCDlx7vff9yRVahnu5ai3B0scsRrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDS5hXBmspHi4iwEHE9gTnwz46+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2YzZjliYjEtZjNmOS0z MGQxLThkZjMtNmFkMWUzYmYxNGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELd0+Gy7Vnyg9CCiNsYgDSlucdnM4Tfwcy4vSmeXN6SEaKjzOmAKdar uEvw509KEeqtpAnavaBVDTCEiuFeL4s9v1U3aY8aYtgAdbSdFjMsu6D6yovkH9X+ FQvdOv1hqB/dhyje07mjlJ4JdJAWDHZoCiDwvpF/sKfeLQAOSgm2T1GFb2SJ7wuv wc+n6RITtjdtThWZp+wbIKRsMWH3RlA94jyiG4h0/PNDHMLEuMILDPtCQtaZPVi+ DLImMSiV3OyLHuV2teOHDiC8oEsuZPhriRgxgCj3KoryPdzVlrzW6gmMNrtQILZs d7idMBuVlBPXbvEMyBmUT4mquhRdqMc= -----END CERTIFICATE-----Generated at Sat Jun 13 20:41:12 2026 by rpki-client