$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa File: 9a77e582-a25b-3deb-82c7-35a938a9f125.roa (raw, json) Hash identifier: nMO8JtO7MhuEiiqR8vawssUYgG4Rv88BsAaGXHXah1U= Subject key identifier: BB:5F:E9:04:DB:FF:14:27:F7:55:E4:D8:09:E8:69:F1:C0:A0:C1:56 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A86E5A8D5FD8058E46800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 63949 IP address blocks: 172.235.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:86:e5:a8:d5:fd:80:58:e4:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=293c1ce8-c944-4e14-a0f5-a0daad5b3ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:bf:97:eb:65:f1:98:25:68:74:8c:e4:1f: 41:35:87:a8:e9:a2:f5:52:6d:15:4e:35:a4:1b:9f: ac:fe:f0:b8:0c:6a:5a:2d:73:d5:4d:2f:2f:e1:27: 64:e9:6d:a5:b5:de:56:7c:3d:68:e0:ab:b5:de:b8: 84:32:c1:80:8f:e7:23:76:77:54:9d:16:90:4e:97: 9e:b2:bf:49:a2:a2:89:9c:3a:28:5d:15:05:67:0c: b6:b6:b3:3d:dc:e8:51:5d:43:20:b1:58:cc:cc:c1: ab:a4:5c:9e:a8:ca:7a:b7:c3:f9:87:51:9a:b6:0e: 36:c3:98:27:31:19:d5:5c:a6:71:4a:41:50:61:4a: 05:7d:9a:83:4d:60:11:74:d9:04:db:40:bf:3d:7c: ff:a1:d4:a0:61:b0:4e:80:d6:86:af:da:6a:a3:10: 61:79:5c:8f:e6:f6:f3:1e:7d:5b:b8:32:89:e5:6a: 60:35:d5:c0:d7:23:1e:f0:09:61:76:78:60:ab:9f: ae:92:f2:21:4b:b8:78:d8:02:be:63:f4:f5:b7:8a: ac:0e:42:78:9d:20:67:a7:21:9f:6f:fb:b3:9a:9d: d2:6a:9d:fa:ee:0c:6f:8f:a3:0c:a1:14:16:39:4b: 21:e2:61:64:26:f1:73:01:d9:ae:5b:c0:f6:73:b7: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5F:E9:04:DB:FF:14:27:F7:55:E4:D8:09:E8:69:F1:C0:A0:C1:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9e:90:a6:2c:5b:2d:db:f6:f7:26:49:88:9d:e5:00:c0:91: d1:82:19:96:7c:1f:49:fc:e9:a2:aa:16:b8:38:ea:59:cf:63: 05:94:12:96:32:3e:4e:a9:10:24:cd:e1:41:6e:9a:28:10:8a: d1:38:ca:8d:77:46:e8:20:34:52:3a:50:a9:ab:bd:e6:61:b6: 8e:dd:e7:9b:df:de:b0:40:65:e3:69:24:33:d1:4e:9b:2d:aa: 97:51:d0:af:4e:96:e3:5a:94:e5:8b:c0:95:b1:34:b6:95:75: 8f:fd:4b:20:84:05:8f:f9:2a:3f:1c:02:21:07:6b:c1:56:ff: e5:b9:24:78:c1:a0:85:07:76:0a:68:b2:56:14:dc:48:46:f3: f8:63:70:bd:ee:96:ad:cc:99:82:f8:98:9c:d4:3d:71:68:4a: 3c:7c:af:fd:be:32:0a:9e:08:d5:b8:65:31:a6:ff:58:2d:ff: e8:17:95:15:b3:c7:5d:94:47:da:90:8a:11:8c:f3:8a:db:e5: 54:57:5f:ba:d6:6a:da:81:5c:9a:f1:8f:e9:a1:7a:89:ea:e3: 05:b3:dc:c4:79:85:34:bf:8d:57:50:50:37:ef:a7:77:e3:ba: 44:9c:c0:e4:a3:6e:a3:3f:48:54:74:44:46:12:02:17:14:91: 9d:d8:f8:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moblqNX9gFjkaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MjkzYzFjZTgtYzk0NC00ZTE0LWEwZjUtYTBkYWFkNWIzZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F2/l+tl8ZglaHSM5B9BNYeo6aL1Um0VTjWk G5+s/vC4DGpaLXPVTS8v4Sdk6W2ltd5WfD1o4Ku13riEMsGAj+cjdndUnRaQTpee sr9JoqKJnDooXRUFZwy2trM93OhRXUMgsVjMzMGrpFyeqMp6t8P5h1Gatg42w5gn MRnVXKZxSkFQYUoFfZqDTWARdNkE20C/PXz/odSgYbBOgNaGr9pqoxBheVyP5vbz Hn1buDKJ5WpgNdXA1yMe8Alhdnhgq5+ukvIhS7h42AK+Y/T1t4qsDkJ4nSBnpyGf b/uzmp3Sap367gxvj6MMoRQWOUsh4mFkJvFzAdmuW8D2c7fgpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtf6QTb/xQn91Xk2AnoafHAoMFWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWE3N2U1ODItYTI1Yi0z ZGViLTgyYzctMzVhOTM4YTlmMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeekKYsWy3b9vcmSYid5QDAkdGCGZZ8H0n86aKqFrg46lnPYwWUEpYy Pk6pECTN4UFumigQitE4yo13RuggNFI6UKmrveZhto7d55vf3rBAZeNpJDPRTpst qpdR0K9OluNalOWLwJWxNLaVdY/9SyCEBY/5Kj8cAiEHa8FW/+W5JHjBoIUHdgpo slYU3EhG8/hjcL3ulq3MmYL4mJzUPXFoSjx8r/2+MgqeCNW4ZTGm/1gt/+gXlRWz x12UR9qQihGM84rb5VRXX7rWatqBXJrxj+mheonq4wWz3MR5hTS/jVdQUDfvp3fj ukScwOSjbqM/SFR0REYSAhcUkZ3Y+Co= -----END CERTIFICATE-----Generated at Fri Apr 17 01:50:48 2026 by rpki-client