$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa File: 884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa (raw, json) Hash identifier: pkFWDc4lkItN3i6KQdcaj/7NCTVFI7Io+kubmveZE/Q= Subject key identifier: F9:C7:1B:DD:B7:1F:63:A5:97:D0:95:C1:E9:69:E9:3A:1F:D0:E3:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D55BB85DFD0E8E06161327740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 36183 IP address blocks: 172.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:85:df:d0:e8:e0:61:61:32:77:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ffb4e889-a3fd-4248-9073-9e937be92561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e6:2c:12:15:25:0a:95:6c:24:8f:38:67:0e: 70:5d:0e:00:1e:91:8f:9b:12:0f:7c:3f:07:b0:e7: e5:5d:45:19:ac:80:af:e4:5b:9d:0b:36:df:ce:fc: 81:f5:50:d6:3a:4a:ee:e7:a6:23:e4:fe:83:9a:bd: bd:0e:4f:c4:46:d4:d1:31:25:c3:f8:1c:48:f0:fd: 52:c4:a4:7f:61:a1:64:4c:47:aa:f7:68:1f:23:b0: da:43:6a:95:d2:bb:d3:19:86:1e:92:09:c7:62:ef: 17:b8:e3:03:23:40:24:f0:d0:59:0c:90:2c:2f:d9: fc:bd:f0:df:aa:e6:41:e4:d0:c0:37:a6:45:81:12: 74:f6:70:60:36:f2:0c:83:21:70:d0:7a:07:96:46: e4:22:4d:24:84:ae:35:e0:ab:47:2c:6c:2b:c8:7f: 2a:2b:1f:65:08:4a:75:02:7a:99:e0:08:67:10:f2: 89:a3:e7:42:4f:65:ef:c4:b4:5f:ca:30:8b:b9:c6: 6f:13:94:e4:ee:da:dd:99:a4:bc:f1:01:d5:d3:b9: 15:00:2c:1e:90:89:51:d0:a6:d6:82:5f:a4:ad:da: 6f:86:39:33:e7:db:4f:dc:7e:5d:69:b7:53:3f:27: df:94:04:76:64:dd:3e:15:d3:92:a7:9b:aa:94:02: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C7:1B:DD:B7:1F:63:A5:97:D0:95:C1:E9:69:E9:3A:1F:D0:E3:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5e:8b:98:28:ca:b8:b9:1f:31:9e:a9:25:a2:dd:b8:fc:83: 58:3f:00:68:28:d4:56:85:25:38:77:59:b9:4e:0b:f4:97:32: 18:9e:2b:a6:42:79:2f:ec:2d:47:8e:b1:6c:3a:10:bb:4c:1e: b8:00:68:2e:6f:96:bd:31:8b:e1:25:cc:16:54:66:28:3d:8f: 5c:6c:55:23:e0:9f:00:55:13:cc:69:c7:9c:01:d8:46:53:61: d9:7a:d7:de:d1:bb:03:b5:28:d0:eb:e4:80:fe:c9:f4:34:42: 73:2f:8b:14:d6:79:39:9b:72:25:92:97:1d:00:5d:15:bb:1a: e5:f6:7d:0d:ea:25:82:1d:06:3a:41:dd:bf:30:92:c1:14:18: 6e:5e:91:0e:3a:9a:8a:c7:32:e5:89:43:b2:73:f8:15:f3:d9: cd:f6:ee:b9:24:9f:e5:bd:c3:82:7a:bc:55:15:7f:05:8a:69: 66:37:49:a2:fa:bd:db:0f:6c:4a:7d:cb:6c:6e:c8:91:84:73: 74:11:e6:77:5f:3c:9b:83:90:62:fd:3a:8a:85:9b:bc:66:03: 3b:62:5c:34:1a:60:a6:50:b1:8d:7c:57:91:dc:ba:b8:1e:c8: 01:7b:99:9a:e6:27:7c:e2:df:9b:ab:27:23:8b:ee:cd:e3:b1: c7:c0:4b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu4Xf0OjgYWEyd0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZmZiNGU4ODktYTNmZC00MjQ4LTkwNzMtOWU5MzdiZTkyNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOYsEhUlCpVsJI84Zw5wXQ4AHpGPmxIPfD8H sOflXUUZrICv5FudCzbfzvyB9VDWOkru56Yj5P6Dmr29Dk/ERtTRMSXD+BxI8P1S xKR/YaFkTEeq92gfI7DaQ2qV0rvTGYYekgnHYu8XuOMDI0Ak8NBZDJAsL9n8vfDf quZB5NDAN6ZFgRJ09nBgNvIMgyFw0HoHlkbkIk0khK414KtHLGwryH8qKx9lCEp1 AnqZ4AhnEPKJo+dCT2XvxLRfyjCLucZvE5Tk7trdmaS88QHV07kVACwekIlR0KbW gl+krdpvhjkz59tP3H5dabdTPyfflAR2ZN0+FdOSp5uqlAJ/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnHG923H2Oll9CVwelp6Tof0OM9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg0ZTFiYjQtZjZlOS0z MDdlLWE0OWUtNTFlN2E2Y2EzZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVei5goyri5HzGeqSWi3bj8g1g/AGgo1FaFJTh3WblOC/SXMhieK6ZC eS/sLUeOsWw6ELtMHrgAaC5vlr0xi+ElzBZUZig9j1xsVSPgnwBVE8xpx5wB2EZT Ydl6197RuwO1KNDr5ID+yfQ0QnMvixTWeTmbciWSlx0AXRW7GuX2fQ3qJYIdBjpB 3b8wksEUGG5ekQ46morHMuWJQ7Jz+BXz2c327rkkn+W9w4J6vFUVfwWKaWY3SaL6 vdsPbEp9y2xuyJGEc3QR5ndfPJuDkGL9OoqFm7xmAztiXDQaYKZQsY18V5Hcurge yAF7mZrmJ3zi35urJyOL7s3jscfAS7Y= -----END CERTIFICATE-----Generated at Fri Apr 17 14:48:36 2026 by rpki-client