$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9183d6-6f07-3250-a423-e983a72c151e.roa File: af9183d6-6f07-3250-a423-e983a72c151e.roa (raw, json) Hash identifier: Y/XDo9ZKRLeCEn3ArI41MdZl3UcIkd5Y8783Xh6GxuU= Subject key identifier: CF:A9:EB:ED:6F:19:0D:A0:1F:9D:21:F8:DF:C0:53:BD:F7:F1:D7:B6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D71A51BA60E414D28925EA700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9183d6-6f07-3250-a423-e983a72c151e.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 173.222.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1b:a6:0e:41:4d:28:92:5e:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=34ae5335-4fb8-4194-bc0d-c3f91b959730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:2f:e3:b5:30:2e:17:d3:ee:66:79:a9:55: 1c:6e:e1:f5:57:91:3c:84:41:50:9c:b7:ec:5b:0f: 2a:3a:75:b2:1d:65:23:e7:02:33:aa:74:bd:59:2a: 3f:8f:11:c2:41:80:a4:b2:3a:d4:26:91:7b:e3:a3: 24:8f:51:30:ea:b0:20:36:69:8e:23:33:ce:58:f3: 21:a5:7f:80:cd:41:e9:73:13:1f:ef:96:b9:ed:a9: 1d:88:7a:47:10:b2:18:50:5e:44:11:01:b7:a8:bc: 00:7b:4b:32:7d:89:3e:88:43:ed:76:3d:7d:61:40: b0:a7:f0:c4:fd:fe:d3:ca:62:f2:f4:90:77:3f:fb: 1c:8d:31:ee:3f:02:be:cf:4c:4b:a1:17:97:4f:c1: 62:67:e2:38:f4:cf:39:d7:89:5b:0e:f8:e0:58:82: 07:f8:4e:bc:bd:21:66:e9:ac:7a:6a:7f:71:93:de: 94:14:df:d6:b1:b8:d1:46:42:e2:7a:de:37:43:eb: 60:27:de:63:18:cf:4a:04:f4:be:98:00:fa:4a:c3: cb:d2:1b:db:ed:d4:8f:13:ff:8c:a8:fd:e9:a4:f0: f4:5c:c9:b3:93:88:82:d0:ec:ad:a2:77:eb:54:1f: ab:ea:6c:b2:e6:30:d5:17:91:90:f2:aa:d8:0a:2f: 16:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:EB:ED:6F:19:0D:A0:1F:9D:21:F8:DF:C0:53:BD:F7:F1:D7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af9183d6-6f07-3250-a423-e983a72c151e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:29:0f:fd:93:1c:81:eb:f2:13:2c:99:f6:e5:91:90:63:1a: a3:ae:d7:83:e8:ed:82:ae:ed:31:f7:21:34:b6:9d:53:e9:e4: 5e:52:4c:30:cd:5c:ff:82:01:45:b6:2c:24:ec:d1:41:ac:18: 40:d6:8f:9e:31:04:ac:53:e7:c2:3d:95:0e:43:e2:61:66:c0: 52:74:b5:70:a0:89:a4:93:d9:ea:43:0e:c2:f3:f4:1b:50:1f: 25:4d:dc:de:f3:eb:85:2f:98:bb:73:93:9f:9e:ee:d0:87:23: d6:a6:73:a3:e3:08:8c:7b:db:1e:ef:9b:ce:13:61:64:b3:c8: a6:42:f1:e0:b0:05:eb:f9:bd:34:2e:7d:70:40:66:2c:3e:e4: c4:bc:fe:5e:1c:27:91:af:a6:70:a9:41:d6:7c:f5:57:4e:27: 5a:db:43:68:25:67:f7:4b:7b:e2:ee:8a:9a:d0:f0:0f:71:1c: f9:76:0a:e9:e6:70:38:7b:9d:22:34:86:6d:2a:a9:40:14:6a: 52:a3:17:4b:6a:7a:3b:52:1d:d4:59:10:22:9d:a5:38:50:81: 3e:ac:05:9e:8a:f5:06:f3:02:03:14:79:9e:20:65:9d:35:e2: 6e:69:d4:bd:82:97:24:cb:37:6b:10:bd:c2:e4:ba:60:2e:76: f8:d4:b9:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRumDkFNKJJepwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MzRhZTUzMzUtNGZiOC00MTk0LWJjMGQtYzNmOTFiOTU5NzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+8v47UwLhfT7mZ5qVUcbuH1V5E8hEFQnLfs Ww8qOnWyHWUj5wIzqnS9WSo/jxHCQYCksjrUJpF746Mkj1Ew6rAgNmmOIzPOWPMh pX+AzUHpcxMf75a57akdiHpHELIYUF5EEQG3qLwAe0syfYk+iEPtdj19YUCwp/DE /f7TymLy9JB3P/scjTHuPwK+z0xLoReXT8FiZ+I49M8514lbDvjgWIIH+E68vSFm 6ax6an9xk96UFN/WsbjRRkLiet43Q+tgJ95jGM9KBPS+mAD6SsPL0hvb7dSPE/+M qP3ppPD0XMmzk4iC0OytonfrVB+r6myy5jDVF5GQ8qrYCi8WLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+p6+1vGQ2gH50h+N/AU7338de2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWY5MTgzZDYtNmYwNy0z MjUwLWE0MjMtZTk4M2E3MmMxNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd6IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkpD/2THIHr8hMsmfblkZBjGqOu14Po7YKu7TH3ITS2nVPp5F5STDDN XP+CAUW2LCTs0UGsGEDWj54xBKxT58I9lQ5D4mFmwFJ0tXCgiaST2epDDsLz9BtQ HyVN3N7z64UvmLtzk5+e7tCHI9amc6PjCIx72x7vm84TYWSzyKZC8eCwBev5vTQu fXBAZiw+5MS8/l4cJ5GvpnCpQdZ89VdOJ1rbQ2glZ/dLe+LuiprQ8A9xHPl2Cunm cDh7nSI0hm0qqUAUalKjF0tqejtSHdRZECKdpThQgT6sBZ6K9QbzAgMUeZ4gZZ01 4m5p1L2ClyTLN2sQvcLkumAudvjUufM= -----END CERTIFICATE-----Generated at Fri Apr 17 11:40:50 2026 by rpki-client