$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d1f61e8-931a-3797-8823-c5068f5cc61e.roa File: 9d1f61e8-931a-3797-8823-c5068f5cc61e.roa (raw, json) Hash identifier: jIV2Qhp6ERWOtEftk4FRgg1aVxVwEFuu7zOjx/TO7Eg= Subject key identifier: 34:F5:8B:27:EA:42:7F:73:31:06:06:75:2F:FD:48:1B:A9:E2:4C:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D80FA3395D988BEED637BEC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d1f61e8-931a-3797-8823-c5068f5cc61e.roa Signing time: Tue 14 Apr 2026 12:49:10 +0000 ROA not before: Tue 14 Apr 2026 12:49:10 +0000 ROA not after: Mon 13 Jul 2026 12:49:10 +0000 asID: 20940 IP address blocks: 184.28.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:fa:33:95:d9:88:be:ed:63:7b:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 12:49:10 2026 GMT Not After : Jul 13 12:49:10 2026 GMT Subject: CN=ffd8a90a-05fe-4c7a-8121-57a2e727c6f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:66:8e:02:68:80:58:7b:ee:00:85:57:5f:50: 1a:5c:c2:93:94:55:3e:ab:00:16:1d:0a:bb:d0:76: 7e:7b:61:d8:8a:2f:fd:eb:2d:21:df:e9:04:39:51: 60:c5:e1:1c:d5:1b:f5:b9:4c:32:77:aa:79:4e:e3: c8:d0:0a:65:bf:19:89:90:8d:41:13:f7:36:e7:66: 93:7b:bb:44:62:33:69:48:4a:7b:24:fe:72:4c:c5: 2e:8f:9b:1c:a2:14:87:64:12:ba:3c:33:4e:62:2c: f4:98:a0:7d:e9:a0:21:fa:9f:cf:89:c3:69:55:57: b2:51:86:45:67:d3:64:9e:78:7a:aa:83:56:62:32: 58:74:6d:00:5e:d8:ea:32:7f:1f:92:49:8c:ed:39: 2e:cc:1e:8b:c3:d3:c1:19:88:19:88:b2:be:57:dd: da:b4:98:3a:a0:ac:2f:5b:80:e5:7a:79:10:13:60: c7:6b:45:9e:60:e6:5c:44:b4:b3:66:0a:f4:39:d5: e3:b5:6f:03:3c:41:8a:76:0e:86:4c:b1:06:6b:ed: f1:d7:d5:c0:8b:c2:b0:a2:60:78:2c:fb:c7:48:8b: 20:fc:17:d1:f0:f1:17:77:87:8b:dc:0c:54:a9:25: 02:ee:62:b1:af:e3:cf:f4:89:f1:6c:c0:b1:1b:d7: a1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F5:8B:27:EA:42:7F:73:31:06:06:75:2F:FD:48:1B:A9:E2:4C:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9d1f61e8-931a-3797-8823-c5068f5cc61e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:66:2f:74:40:27:62:c3:e5:de:3d:cb:83:1c:5b:e1:3e:58: ce:75:b7:3d:d0:82:bf:2d:a8:a7:c0:de:b3:a4:5b:0a:1f:f3: e5:6c:79:de:0c:ea:34:00:45:0b:49:66:c8:ce:1a:dd:9a:b4: 55:5b:c1:97:ef:fa:8c:13:c0:9f:5a:83:d8:93:58:a7:de:46: e4:66:29:cf:52:87:f8:cc:15:c9:9a:d3:fb:71:ec:6a:d3:21: ec:b2:99:7e:fc:22:7e:61:87:3f:d3:45:f8:fe:f0:cb:b1:4d: e8:d0:5e:34:40:44:a8:f5:4b:09:86:85:44:50:55:04:40:73: 59:53:bf:b4:9d:fe:6c:0c:e5:cc:45:0c:d7:be:17:1b:f4:cf: 22:be:46:88:05:f4:11:cf:7f:58:f9:b3:54:98:36:78:c0:82: 8b:c7:5d:db:b5:f5:de:5f:24:1e:54:41:c6:7e:60:3b:04:e9: bb:e8:ad:aa:18:33:61:95:d5:04:40:fc:23:60:a5:f6:30:07: 09:2d:3c:45:f4:3f:65:4c:1e:cd:db:22:46:0f:5e:81:21:b4: 36:33:91:80:a8:6a:c0:f8:ef:ed:ae:84:04:83:48:a9:2f:89: 76:6d:0c:ff:05:d5:09:fc:72:21:b4:2d:a2:bf:cb:f3:ce:b5: e3:f3:21:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A+jOV2Yi+7WN77IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDEyNDkxMFoXDTI2MDcxMzEyNDkxMFowLzEtMCsGA1UEAxMk ZmZkOGE5MGEtMDVmZS00YzdhLTgxMjEtNTdhMmU3MjdjNmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWaOAmiAWHvuAIVXX1AaXMKTlFU+qwAWHQq7 0HZ+e2HYii/96y0h3+kEOVFgxeEc1Rv1uUwyd6p5TuPI0AplvxmJkI1BE/c252aT e7tEYjNpSEp7JP5yTMUuj5scohSHZBK6PDNOYiz0mKB96aAh+p/PicNpVVeyUYZF Z9Nknnh6qoNWYjJYdG0AXtjqMn8fkkmM7TkuzB6Lw9PBGYgZiLK+V93atJg6oKwv W4DlenkQE2DHa0WeYOZcRLSzZgr0OdXjtW8DPEGKdg6GTLEGa+3x19XAi8KwomB4 LPvHSIsg/BfR8PEXd4eL3AxUqSUC7mKxr+PP9InxbMCxG9ehFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT1iyfqQn9zMQYGdS/9SBup4kxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWQxZjYxZTgtOTMxYS0z Nzk3LTg4MjMtYzUwNjhmNWNjNjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBzcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1mL3RAJ2LD5d49y4McW+E+WM51tz3Qgr8tqKfA3rOkWwof8+Vsed4M 6jQARQtJZsjOGt2atFVbwZfv+owTwJ9ag9iTWKfeRuRmKc9Sh/jMFcma0/tx7GrT IeyymX78In5hhz/TRfj+8MuxTejQXjRARKj1SwmGhURQVQRAc1lTv7Sd/mwM5cxF DNe+Fxv0zyK+RogF9BHPf1j5s1SYNnjAgovHXdu19d5fJB5UQcZ+YDsE6bvoraoY M2GV1QRA/CNgpfYwBwktPEX0P2VMHs3bIkYPXoEhtDYzkYCoasD47+2uhASDSKkv iXZtDP8F1Qn8ciG0LaK/y/POtePzIe0= -----END CERTIFICATE-----Generated at Fri Apr 17 03:55:25 2026 by rpki-client