$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa File: b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa (raw, json) Hash identifier: GICqDCHNQqmNJ8O0mRxpkSzPlCLB6fxU6jkT+NI5g8o= Subject key identifier: F2:E2:A1:17:D1:63:75:10:8E:D9:13:8F:E4:B3:19:98:B7:9E:31:5F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D571FBDD800527D5B11B96A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 36183 IP address blocks: 172.224.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:bd:d8:00:52:7d:5b:11:b9:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=1690081e-6ad1-4a50-b300-52e30e7fda61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7f:54:17:05:98:c0:e2:c7:61:32:fd:a9:68: f5:6d:a5:0c:a4:dc:0c:8e:55:6c:52:4a:41:a2:4c: 6c:7e:ce:d6:c7:a1:31:41:5d:82:d6:9c:42:73:33: 20:ca:f8:11:25:c2:c2:6f:49:c7:ea:b9:90:bb:ca: fe:c9:2d:4c:24:cb:45:4e:8d:17:7b:2e:21:75:9a: 9f:95:f7:98:35:2e:7b:7c:2f:f2:aa:e0:88:3a:fa: d3:37:f9:67:68:2f:bf:c2:36:21:65:67:82:05:aa: d8:32:e8:78:03:ae:c5:b3:8c:f0:37:94:d6:1d:1c: 47:38:d0:c5:62:01:c8:df:c3:a9:a5:5f:94:1d:a3: 18:5a:08:d8:5f:22:d1:23:94:d4:9e:96:ed:64:97: 61:c4:77:b8:95:0b:f7:e3:0f:97:8c:f4:16:dd:81: db:1d:61:10:cb:3f:b4:dc:e4:06:ac:b3:fe:ec:24: 8e:85:d6:83:70:74:45:10:a2:14:fa:4b:42:2f:c7: ea:02:1c:7d:68:8f:88:2b:ad:07:bd:7d:90:9f:1a: 21:1a:97:04:d6:f4:ce:3a:75:fa:ff:6f:a8:a8:0a: 2a:c0:1f:13:d2:6f:78:e3:8a:5c:60:f2:db:8c:13: 12:28:e5:e1:40:e5:39:d1:91:cc:89:02:84:a9:05: 19:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E2:A1:17:D1:63:75:10:8E:D9:13:8F:E4:B3:19:98:B7:9E:31:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:09:0c:e3:ec:5f:e4:1a:9c:a6:d6:19:e7:62:da:54:15:6a: a8:fc:73:64:b3:7b:90:95:50:02:2a:06:c2:e0:51:a0:fe:ad: 7c:fb:b8:12:ef:9d:ad:5b:d3:8c:db:08:c7:f6:76:9c:cf:ce: 81:8f:24:1f:d5:a1:cd:30:ca:99:8d:63:76:25:82:07:c5:14: 03:3d:f3:a8:01:19:f8:15:71:00:05:65:9f:0d:c2:26:f3:9f: 70:c1:06:97:2f:76:54:98:40:36:ed:6a:82:6d:d3:c0:93:4c: 96:5e:3d:5f:5f:c2:df:68:4e:9c:cd:83:d5:8e:42:c3:18:9c: d9:79:a4:f3:6a:ee:03:4a:04:cb:bd:88:1a:9b:96:3a:c5:fb: 8f:c1:7b:39:97:67:e9:31:f1:11:e3:5c:f3:07:22:fa:ac:33: a9:c6:24:88:2e:70:a7:47:7c:01:44:f9:06:a9:03:d2:1e:1d: ee:bd:b4:68:9c:b0:e1:7c:aa:51:78:ab:4c:13:44:7b:1b:69: d4:c1:b5:05:06:63:62:c9:6d:17:68:b2:ba:ff:bd:cd:92:dd: d4:f0:bc:e4:87:83:af:99:c3:31:3b:f9:0c:15:59:14:53:52: 47:d9:b9:35:da:4a:dc:7c:e8:d2:b8:ac:f6:7d:af:c6:c1:5d: 2c:3f:00:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH73YAFJ9WxG5aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk MTY5MDA4MWUtNmFkMS00YTUwLWIzMDAtNTJlMzBlN2ZkYTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn9UFwWYwOLHYTL9qWj1baUMpNwMjlVsUkpB okxsfs7Wx6ExQV2C1pxCczMgyvgRJcLCb0nH6rmQu8r+yS1MJMtFTo0Xey4hdZqf lfeYNS57fC/yquCIOvrTN/lnaC+/wjYhZWeCBarYMuh4A67Fs4zwN5TWHRxHONDF YgHI38OppV+UHaMYWgjYXyLRI5TUnpbtZJdhxHe4lQv34w+XjPQW3YHbHWEQyz+0 3OQGrLP+7CSOhdaDcHRFEKIU+ktCL8fqAhx9aI+IK60HvX2QnxohGpcE1vTOOnX6 /2+oqAoqwB8T0m9444pcYPLbjBMSKOXhQOU50ZHMiQKEqQUZJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLioRfRY3UQjtkTj+SzGZi3njFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE0YzIzNDYtY2U4NC0z MDgyLTliZDEtZDUzYjY2YzZiMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAJDOPsX+QanKbWGedi2lQVaqj8c2Sze5CVUAIqBsLgUaD+rXz7uBLv na1b04zbCMf2dpzPzoGPJB/Voc0wypmNY3YlggfFFAM986gBGfgVcQAFZZ8Nwibz n3DBBpcvdlSYQDbtaoJt08CTTJZePV9fwt9oTpzNg9WOQsMYnNl5pPNq7gNKBMu9 iBqbljrF+4/BezmXZ+kx8RHjXPMHIvqsM6nGJIgucKdHfAFE+QapA9IeHe69tGic sOF8qlF4q0wTRHsbadTBtQUGY2LJbRdosrr/vc2S3dTwvOSHg6+ZwzE7+QwVWRRT UkfZuTXaStx86NK4rPZ9r8bBXSw/AIQ= -----END CERTIFICATE-----Generated at Fri Apr 17 17:09:02 2026 by rpki-client