$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa File: a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa (raw, json) Hash identifier: HJMes+sZblg9qV5xQl3GaD0mQupUHnAmDe74gKN6tro= Subject key identifier: 3C:D6:B1:C9:1D:16:32:7A:55:6A:F8:D7:EE:85:7E:14:2C:2E:3A:4B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E2D9F2B63E8292473BCFBAB01 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 36183 IP address blocks: 172.225.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:2b:63:e8:29:24:73:bc:fb:ab:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=033289e6-9b0f-4027-8564-ae803d2cc979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:32:b9:47:a5:e4:9b:db:1e:74:c4:4c:7d: 8c:fa:2a:9b:54:c4:f4:48:5d:f5:62:c1:32:37:18: 9b:35:72:dc:fd:39:c7:be:d0:d3:98:31:95:9b:0c: 8a:87:ae:c0:16:05:31:49:3a:d8:1a:1a:53:25:af: 70:55:65:e2:4b:a1:78:e7:09:f5:de:83:29:50:2c: ec:02:4b:e1:ff:d0:29:4a:30:72:cd:70:92:76:11: 4b:94:44:9e:67:b8:32:2e:f9:d0:d3:b1:00:4d:08: 79:6e:66:46:cc:e0:59:15:81:c4:54:d4:b6:fd:70: 43:e7:b3:c2:43:a1:5b:77:fb:c7:43:a4:1e:ec:e7: 48:8f:b9:0b:90:91:06:af:4c:a2:ed:f2:e3:51:e3: 85:ad:eb:a6:2a:a3:0e:34:86:0f:76:e1:3b:36:f6: e9:49:ad:8f:a7:48:71:df:76:3e:9e:2e:aa:a6:c6: 6c:b0:54:51:4b:e6:d2:3b:d0:98:fc:38:96:aa:39: 16:af:bc:37:68:ff:9d:55:4c:cb:a1:38:d2:38:2b: fc:d3:b0:be:eb:d8:81:46:28:1a:47:90:e1:45:d7: 14:82:5f:c8:08:db:82:8b:ad:65:8c:77:d4:50:13: 9a:38:0a:93:d3:5f:cc:1c:0e:f0:d7:6f:c1:05:b7: 12:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D6:B1:C9:1D:16:32:7A:55:6A:F8:D7:EE:85:7E:14:2C:2E:3A:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a6db1dd4-a9a2-3398-bac3-b9bea3c6338e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b5:e8:42:e0:0f:57:ff:bd:60:44:6d:5f:21:51:ee:b9:eb: 49:90:45:81:b8:1c:f4:a2:8f:c7:86:a5:ac:f7:9a:03:49:2e: 4b:a1:37:ce:1e:e4:fd:63:67:35:84:75:75:91:a6:51:a6:37: aa:e5:94:21:2d:75:c5:8b:be:43:83:01:ca:2b:2d:85:14:79: 3d:43:35:1e:a3:e5:f4:ea:ff:5d:48:bf:1e:35:f8:19:ed:17: ac:25:93:66:71:0e:9d:0c:a7:02:b2:96:46:35:46:be:7a:1a: a8:c9:49:3b:37:3e:95:17:c0:a2:7c:3e:06:75:05:4f:03:7d: 7e:95:30:aa:7b:19:5d:3e:97:f1:47:80:a8:52:e7:8e:b4:14: c1:ee:1f:85:6c:53:f8:43:69:bb:24:9d:c2:51:d7:49:42:ea: 91:6d:17:02:82:9e:95:29:22:7d:64:de:cd:88:0c:77:b9:1b: 22:38:62:3e:ea:83:67:b2:7f:74:c8:c0:46:e5:a6:c5:46:8d: a8:1b:19:3f:25:c2:79:e4:6d:2f:86:e3:09:9b:eb:9d:b9:b8: 79:5f:d7:d4:1b:be:14:06:f9:6a:3e:e7:9c:49:98:ee:81:8a: 3c:55:76:f0:16:40:2f:c3:fb:03:b8:c6:57:d6:75:4e:af:fa: 0b:6e:16:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnytj6Ckkc7z7qwEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MDMzMjg5ZTYtOWIwZi00MDI3LTg1NjQtYWU4MDNkMmNjOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdsyuUel5JvbHnTETH2M+iqbVMT0SF31YsEy NxibNXLc/TnHvtDTmDGVmwyKh67AFgUxSTrYGhpTJa9wVWXiS6F45wn13oMpUCzs Akvh/9ApSjByzXCSdhFLlESeZ7gyLvnQ07EATQh5bmZGzOBZFYHEVNS2/XBD57PC Q6Fbd/vHQ6Qe7OdIj7kLkJEGr0yi7fLjUeOFreumKqMONIYPduE7NvbpSa2Pp0hx 33Y+ni6qpsZssFRRS+bSO9CY/DiWqjkWr7w3aP+dVUzLoTjSOCv807C+69iBRiga R5DhRdcUgl/ICNuCi61ljHfUUBOaOAqT01/MHA7w12/BBbcSkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzWsckdFjJ6VWr41+6FfhQsLjpLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTZkYjFkZDQtYTlhMi0z Mzk4LWJhYzMtYjliZWEzYzYzMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm16ELgD1f/vWBEbV8hUe6560mQRYG4HPSij8eGpaz3mgNJLkuhN84e 5P1jZzWEdXWRplGmN6rllCEtdcWLvkODAcorLYUUeT1DNR6j5fTq/11Ivx41+Bnt F6wlk2ZxDp0MpwKylkY1Rr56GqjJSTs3PpUXwKJ8PgZ1BU8DfX6VMKp7GV0+l/FH gKhS5460FMHuH4VsU/hDabskncJR10lC6pFtFwKCnpUpIn1k3s2IDHe5GyI4Yj7q g2eyf3TIwEblpsVGjagbGT8lwnnkbS+G4wmb6525uHlf19QbvhQG+Wo+55xJmO6B ijxVdvAWQC/D+wO4xlfWdU6v+gtuFj8= -----END CERTIFICATE-----Generated at Wed Jun 17 13:41:27 2026 by rpki-client