$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cabab288-ae29-3780-bf80-6b3af433ae63.roa File: cabab288-ae29-3780-bf80-6b3af433ae63.roa (raw, json) Hash identifier: pkSHn+pkQ94mR098ZO1DT1cRF3TM1j3Q1W99Nfb5jIs= Subject key identifier: 31:34:1A:24:0E:C8:8E:31:69:2D:18:F3:04:D4:04:A6:BD:EA:A2:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D55BA4C38E537EAF7E34B5E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cabab288-ae29-3780-bf80-6b3af433ae63.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 36183 IP address blocks: 172.224.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4c:38:e5:37:ea:f7:e3:4b:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=bc8cd734-895b-4e22-afd7-29166ec3d745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:66:2b:31:46:65:f1:d6:81:b8:46:ea:4f:88: a5:c0:8a:77:82:51:1d:29:12:af:01:83:7f:60:3c: 5d:74:4e:be:b9:ea:0e:8b:46:db:2d:18:03:f5:25: b7:80:e6:cb:aa:67:96:b9:e5:d5:ea:d9:03:54:fc: 9c:c1:32:41:a5:fd:9c:49:76:82:7d:67:d0:9b:86: 61:76:b8:4c:18:3c:b4:52:e5:8d:49:67:37:68:98: 10:6c:50:52:f5:31:d2:fa:d3:03:50:49:37:8a:17: e3:40:01:9e:06:41:8e:7f:22:b2:85:d0:a3:3b:55: 2d:81:3e:3f:b5:69:89:ad:52:12:8b:ab:c8:e9:91: 8e:a2:01:bb:e4:7f:32:c7:88:e9:37:aa:06:83:51: 65:f1:b7:c8:ce:1f:04:aa:65:cb:28:eb:d2:78:24: e6:23:0b:0a:7c:70:5d:12:94:84:e9:40:0e:2e:f7: e9:ea:05:61:64:66:ed:1d:3c:76:d0:aa:82:f6:f3: bd:b3:dd:bc:3e:42:16:17:b8:a4:74:24:b3:ea:6c: 05:41:49:a2:d4:9e:3f:d2:87:50:90:e6:1e:7d:45: 57:9b:3b:f1:d6:0b:a1:2a:2f:60:0d:11:10:5c:ea: cf:83:70:61:a5:86:8e:7d:73:9f:f2:4f:35:c3:b8: 2d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:34:1A:24:0E:C8:8E:31:69:2D:18:F3:04:D4:04:A6:BD:EA:A2:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cabab288-ae29-3780-bf80-6b3af433ae63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3c:18:12:e3:30:4e:3c:00:73:e1:c7:81:b9:a5:49:ab:9d: 5c:d8:6c:97:c0:f1:08:9d:3c:f0:41:38:73:39:fe:dc:c5:f3: 5f:4a:aa:1f:f1:36:f5:f2:f1:17:f4:11:0f:34:16:b1:82:0b: b6:bb:9c:41:55:9b:65:cf:63:df:67:6d:71:44:48:56:30:f2: 71:42:ed:fe:dc:df:fc:5a:04:82:c2:c7:46:17:f2:2b:18:60: 9f:92:3c:b3:8d:b8:37:71:85:e1:99:03:b4:bc:22:87:28:a4: 1f:06:ee:a0:5a:b6:bc:50:87:ed:80:82:ab:2c:cd:a0:ac:eb: ca:7d:73:52:54:10:b2:a3:51:63:ae:57:20:27:4f:47:26:eb: e8:24:60:aa:6b:a8:04:86:7c:c9:8e:86:97:b4:49:3e:4d:7b: ea:cb:57:d2:7d:ef:d7:b9:89:7f:40:f3:20:d6:8d:6a:65:e8: f0:4e:af:e6:eb:ec:d5:cc:f0:da:82:06:59:27:8e:3d:2e:54: 84:9c:a8:d6:82:1a:53:09:9c:ca:1a:16:d5:f3:de:de:7b:71: ac:a8:43:5d:b1:0e:41:ea:de:53:0f:9d:4a:37:1f:1b:12:47: ea:45:a5:fd:67:12:27:38:97:c6:a9:09:c3:7c:8e:f4:1e:7b: c2:d7:01:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vukw45Tfq9+NLXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YmM4Y2Q3MzQtODk1Yi00ZTIyLWFmZDctMjkxNjZlYzNkNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2YrMUZl8daBuEbqT4ilwIp3glEdKRKvAYN/ YDxddE6+ueoOi0bbLRgD9SW3gObLqmeWueXV6tkDVPycwTJBpf2cSXaCfWfQm4Zh drhMGDy0UuWNSWc3aJgQbFBS9THS+tMDUEk3ihfjQAGeBkGOfyKyhdCjO1UtgT4/ tWmJrVISi6vI6ZGOogG75H8yx4jpN6oGg1Fl8bfIzh8EqmXLKOvSeCTmIwsKfHBd EpSE6UAOLvfp6gVhZGbtHTx20KqC9vO9s928PkIWF7ikdCSz6mwFQUmi1J4/0odQ kOYefUVXmzvx1guhKi9gDREQXOrPg3BhpYaOfXOf8k81w7gtrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE0GiQOyI4xaS0Y8wTUBKa96qLhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FiYWIyODgtYWUyOS0z NzgwLWJmODAtNmIzYWY0MzNhZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOALMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk8GBLjME48AHPhx4G5pUmrnVzYbJfA8QidPPBBOHM5/tzF819Kqh/x NvXy8Rf0EQ80FrGCC7a7nEFVm2XPY99nbXFESFYw8nFC7f7c3/xaBILCx0YX8isY YJ+SPLONuDdxheGZA7S8IocopB8G7qBatrxQh+2AgqsszaCs68p9c1JUELKjUWOu VyAnT0cm6+gkYKprqASGfMmOhpe0ST5Ne+rLV9J979e5iX9A8yDWjWpl6PBOr+br 7NXM8NqCBlknjj0uVIScqNaCGlMJnMoaFtXz3t57cayoQ12xDkHq3lMPnUo3HxsS R+pFpf1nEic4l8apCcN8jvQee8LXAbg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:05:22 2026 by rpki-client