$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa File: 8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa (raw, json) Hash identifier: zP5cgweWkNwjSsyXrZNKhuS32YC6FLaZ8Lyf1lqGPrI= Subject key identifier: DC:56:AC:95:41:AB:DB:6D:ED:FE:F3:94:EF:2A:BB:46:DF:DB:43:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C6192A2DE0604C063DA50E780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa Signing time: Thu 01 Jan 2026 14:00:38 +0000 ROA not before: Thu 01 Jan 2026 14:00:38 +0000 ROA not after: Wed 01 Apr 2026 13:00:38 +0000 asID: 36183 IP address blocks: 172.225.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:61:92:a2:de:06:04:c0:63:da:50:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 1 14:00:38 2026 GMT Not After : Apr 1 13:00:38 2026 GMT Subject: CN=077f2253-805f-4aaf-a96e-87e0887c65fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:54:61:53:ad:37:e5:fc:e3:57:fc:4a:0e:e5: 2f:fc:a7:73:66:4e:30:47:83:02:ef:78:0c:01:f8: 17:9b:47:7d:cb:3e:70:e1:4b:fe:ac:c6:30:7a:80: f7:28:d5:6b:37:aa:b1:49:42:88:d5:26:7c:18:22: 68:a4:07:d3:ef:09:ae:db:72:bc:51:22:3b:73:17: ba:06:02:e5:8d:b4:92:dd:c9:ab:1d:e1:72:3b:34: 3c:f9:e2:60:f5:50:4b:ad:50:02:ba:84:bb:73:32: 5c:76:7e:fc:53:31:92:23:34:88:f7:39:0f:ca:f5: 3e:0f:7b:68:b9:81:dc:da:1f:6c:80:2a:fc:8d:3e: 5f:16:42:66:f4:bd:0e:7a:5d:1d:16:22:e7:67:9c: 0c:05:3f:67:a4:26:93:4b:5a:56:0d:18:3e:d6:6f: 4a:76:0f:d1:e2:17:98:7f:47:a9:f0:ce:8a:09:44: 78:49:8c:24:bc:57:18:bb:b6:d2:2b:b0:09:02:10: 00:79:14:cb:af:67:30:d9:97:ab:11:2c:eb:a8:92: c3:07:bb:78:97:a0:14:70:c8:07:b1:4a:e0:b9:a7: 19:94:ca:ce:db:e4:4e:33:7a:50:8c:e8:18:db:2f: be:29:b8:e1:98:a5:ad:fb:f2:09:66:e3:e0:ff:19: 90:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:56:AC:95:41:AB:DB:6D:ED:FE:F3:94:EF:2A:BB:46:DF:DB:43:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8f409cf4-2cdc-3e2f-83e2-1e9d15027893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:53:8c:e9:be:88:b5:b7:7e:28:8f:f0:44:4a:9f:5c:37:db: c3:5f:c6:7d:11:33:fa:af:12:a4:d5:2d:ad:32:a7:eb:f4:30: 69:f9:bb:f0:3a:2a:2a:7c:f7:4f:ac:79:60:8e:d8:7a:5f:23: 2d:ba:dc:24:a6:e6:91:0b:9a:5e:2e:70:07:7b:45:d5:fd:37: 36:d2:bb:9e:04:b0:1e:27:12:f6:96:3b:19:fb:01:9e:ae:a2: 42:87:62:4f:b6:18:67:a9:45:7e:46:c2:92:c5:76:87:1a:e9: c3:ef:55:1d:fd:e7:92:34:13:29:d8:aa:a8:9e:aa:ca:71:5f: 1d:bc:58:35:3c:20:55:53:7f:1c:be:c1:58:05:2d:2e:8c:47: 26:89:99:1f:a6:b2:98:65:5f:49:24:58:12:84:63:21:04:e5: 31:67:ff:20:38:eb:da:e9:da:32:94:d7:bd:f6:81:f4:40:f2: 17:e5:d5:7a:f4:46:51:4d:64:ba:7a:76:4b:25:d8:e7:3a:6e: 3f:0a:d2:a5:dc:d8:97:a8:f1:11:ee:e8:d7:7e:9e:a9:5e:3e: e8:fb:1f:51:d4:75:82:34:2e:dc:60:be:4f:10:b4:28:b4:78: 27:63:6a:85:0c:2e:7d:ec:dc:9b:c4:d3:80:c1:49:3e:64:06: 3e:18:b9:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExhkqLeBgTAY9pQ54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwMTE0MDAzOFoXDTI2MDQwMTEzMDAzOFowLzEtMCsGA1UEAxMk MDc3ZjIyNTMtODA1Zi00YWFmLWE5NmUtODdlMDg4N2M2NWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFRhU6035fzjV/xKDuUv/KdzZk4wR4MC73gM AfgXm0d9yz5w4Uv+rMYweoD3KNVrN6qxSUKI1SZ8GCJopAfT7wmu23K8USI7cxe6 BgLljbSS3cmrHeFyOzQ8+eJg9VBLrVACuoS7czJcdn78UzGSIzSI9zkPyvU+D3to uYHc2h9sgCr8jT5fFkJm9L0Oel0dFiLnZ5wMBT9npCaTS1pWDRg+1m9Kdg/R4heY f0ep8M6KCUR4SYwkvFcYu7bSK7AJAhAAeRTLr2cw2ZerESzrqJLDB7t4l6AUcMgH sUrguacZlMrO2+ROM3pQjOgY2y++KbjhmKWt+/IJZuPg/xmQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxWrJVBq9tt7f7zlO8qu0bf20MzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGY0MDljZjQtMmNkYy0z ZTJmLTgzZTItMWU5ZDE1MDI3ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRTjOm+iLW3fiiP8ERKn1w328Nfxn0RM/qvEqTVLa0yp+v0MGn5u/A6 Kip890+seWCO2HpfIy263CSm5pELml4ucAd7RdX9NzbSu54EsB4nEvaWOxn7AZ6u okKHYk+2GGepRX5GwpLFdoca6cPvVR3955I0EynYqqieqspxXx28WDU8IFVTfxy+ wVgFLS6MRyaJmR+msphlX0kkWBKEYyEE5TFn/yA469rp2jKU1732gfRA8hfl1Xr0 RlFNZLp6dksl2Oc6bj8K0qXc2Jeo8RHu6Nd+nqlePuj7H1HUdYI0Ltxgvk8QtCi0 eCdjaoUMLn3s3JvE04DBST5kBj4YuWM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:44:28 2026 by rpki-client