$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf0b82a0-e438-3953-a753-148682204c6b.roa File: bf0b82a0-e438-3953-a753-148682204c6b.roa (raw, json) Hash identifier: wrvqsDxjDB+2qeLsM4yqBeUeJqyV+5yjTDy9+29Q4Dw= Subject key identifier: 58:10:53:C5:80:12:33:35:C1:01:C8:68:1C:B6:94:A2:5B:65:18:04 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D4D5A8B59521D57D62F414E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf0b82a0-e438-3953-a753-148682204c6b.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.226.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:8b:59:52:1d:57:d6:2f:41:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=f147b4c0-f81d-492f-b3ae-69375eaf254d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:42:2c:ca:ee:eb:a0:b3:49:15:61:1d:93: ca:f4:c5:85:de:6d:2f:80:3e:1c:3c:54:57:e9:48: e2:fc:ac:87:a3:47:9e:9e:7f:ed:0a:cb:f6:aa:12: 8e:67:1a:6f:7b:93:76:81:0c:a3:5f:87:ae:ef:90: 6e:a8:36:d2:94:68:c5:99:ba:d2:d3:e6:c3:be:53: 1c:f7:02:cc:d3:80:54:3c:67:b9:e0:3c:b2:3f:b5: 70:f7:4e:71:70:98:e7:77:fe:60:e2:d0:03:dd:5e: 22:37:9c:ac:55:10:48:8c:62:72:6d:46:76:50:50: 1d:91:4e:c5:2b:bf:49:35:e4:00:dc:42:6c:49:a3: e8:9e:eb:ec:b2:c7:c0:1b:e0:42:53:84:45:22:3e: d8:c4:1f:9c:ec:82:7f:d5:9d:80:ec:2c:0f:ee:16: 3d:50:61:08:05:a4:e0:d8:33:30:d1:72:2f:a4:9f: 5f:96:49:bd:c7:9d:5c:c2:87:05:c6:e5:ea:74:04: 9b:b5:08:7d:4c:47:2c:27:80:dc:e1:b6:e0:d2:27: 84:a4:33:ab:66:ef:e4:49:43:30:da:91:e8:d1:f2: e6:0e:16:56:c4:10:ec:3a:37:b8:c7:0b:8d:d3:98: 81:bf:91:8c:8c:39:57:5c:5b:93:c4:ed:0f:9e:b5: 52:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:10:53:C5:80:12:33:35:C1:01:C8:68:1C:B6:94:A2:5B:65:18:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bf0b82a0-e438-3953-a753-148682204c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f7:a9:d8:23:f3:cd:2c:e8:d5:05:cf:a7:e7:38:1d:45:f8: 8d:ef:2b:86:eb:07:c0:c2:d1:d8:9b:91:0e:79:59:a0:aa:b7: 9a:c7:89:77:f4:1e:64:eb:26:83:c1:fb:be:a6:e6:66:20:1f: 49:0d:db:6d:c2:a9:50:a9:d1:31:9d:45:de:2d:19:cd:96:70: ad:25:9b:85:9a:bf:74:3d:cc:e8:fa:6c:84:60:0b:13:e7:13: af:08:0d:52:67:20:32:3a:16:57:32:98:5a:95:0c:33:1e:62: 87:f0:6b:e8:51:9c:08:c6:6f:9b:3a:f9:11:da:d6:e1:56:c1: c6:27:ba:17:90:d0:5a:cd:64:be:23:45:f9:97:b8:f3:5f:d9: 9d:ce:53:dd:4b:e4:9d:ab:4d:f5:ed:b5:09:d4:ef:64:44:b4: 69:ac:84:a7:55:01:19:85:c9:19:d6:49:a0:a7:65:72:36:e7: 1d:48:db:0e:8f:f8:b8:b9:31:b4:cb:5e:67:46:9f:5c:a2:44: f9:34:2f:09:0b:9a:f1:62:e4:29:a1:3e:21:b9:b7:aa:06:18: d1:9d:7e:b0:e0:a0:3a:15:d2:65:20:96:06:c9:82:cd:a3:98: a4:8d:86:ad:e2:d9:81:36:ff:1a:6f:ff:51:60:97:36:97:13: 18:d0:1f:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWotZUh1X1i9BToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZjE0N2I0YzAtZjgxZC00OTJmLWIzYWUtNjkzNzVlYWYyNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9lCLMru66CzSRVhHZPK9MWF3m0vgD4cPFRX 6Uji/KyHo0eenn/tCsv2qhKOZxpve5N2gQyjX4eu75BuqDbSlGjFmbrS0+bDvlMc 9wLM04BUPGe54DyyP7Vw905xcJjnd/5g4tAD3V4iN5ysVRBIjGJybUZ2UFAdkU7F K79JNeQA3EJsSaPonuvsssfAG+BCU4RFIj7YxB+c7IJ/1Z2A7CwP7hY9UGEIBaTg 2DMw0XIvpJ9flkm9x51cwocFxuXqdASbtQh9TEcsJ4Dc4bbg0ieEpDOrZu/kSUMw 2pHo0fLmDhZWxBDsOje4xwuN05iBv5GMjDlXXFuTxO0PnrVSzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgQU8WAEjM1wQHIaBy2lKJbZRgEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmYwYjgyYTAtZTQzOC0z OTUzLWE3NTMtMTQ4NjgyMjA0YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOI6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX3qdgj880s6NUFz6fnOB1F+I3vK4brB8DC0dibkQ55WaCqt5rHiXf0 HmTrJoPB+76m5mYgH0kN223CqVCp0TGdRd4tGc2WcK0lm4Wav3Q9zOj6bIRgCxPn E68IDVJnIDI6FlcymFqVDDMeYofwa+hRnAjGb5s6+RHa1uFWwcYnuheQ0FrNZL4j RfmXuPNf2Z3OU91L5J2rTfXttQnU72REtGmshKdVARmFyRnWSaCnZXI25x1I2w6P +Li5MbTLXmdGn1yiRPk0LwkLmvFi5CmhPiG5t6oGGNGdfrDgoDoV0mUglgbJgs2j mKSNhq3i2YE2/xpv/1FglzaXExjQH6A= -----END CERTIFICATE-----Generated at Fri Apr 17 15:51:54 2026 by rpki-client