$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdb1eb81-de9f-3829-a9ad-da46c3d20849.roa File: cdb1eb81-de9f-3829-a9ad-da46c3d20849.roa (raw, json) Hash identifier: 1aJugENP3aZVCqjUOOR2FThbNT4xjrwAOBHRateB5oI= Subject key identifier: 9D:3E:D4:39:2A:B6:B0:BC:A6:E7:6B:ED:F0:C0:3F:B6:28:E7:48:72 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D55BA4C692AF57AA95AC27400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdb1eb81-de9f-3829-a9ad-da46c3d20849.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 36183 IP address blocks: 172.224.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4c:69:2a:f5:7a:a9:5a:c2:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=d813e5ab-2faa-4003-ad35-2db363251683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:49:d1:46:02:5f:80:e9:e3:26:ed:e6:c9:67: 53:24:bc:54:5a:13:61:02:d0:6c:23:fc:6e:d1:4c: 49:84:84:43:27:dd:ea:78:86:e4:f0:8b:f7:6a:f0: e2:3f:38:05:0f:78:0e:78:cc:c5:3d:65:85:fd:e5: 1d:d5:5f:4a:bf:0d:ff:db:06:55:10:67:65:0e:48: 8f:e5:f3:e2:02:60:46:00:01:55:a2:e0:12:56:8b: 28:a9:02:3f:2e:7f:2a:ba:b6:0f:a1:80:59:2a:5a: 6c:c7:ca:a9:4c:32:69:09:ff:01:93:6b:16:80:23: bd:eb:25:90:61:44:8e:7f:e8:91:73:96:f4:08:d3: 45:49:00:d0:05:d2:8b:93:cf:5a:2c:40:4c:3b:b6: 18:82:97:a3:28:64:53:91:d9:9b:ee:04:f4:28:6b: f2:54:c3:ba:bd:02:c5:12:67:1f:12:67:fe:78:2b: 34:a5:b5:c1:78:82:ef:18:d9:70:ae:bd:40:78:9d: fb:2c:18:84:31:ec:cb:0d:63:d0:0c:83:e3:d7:22: 7f:b0:6f:44:03:17:76:2b:0b:0d:73:b8:65:00:8e: 00:62:2c:32:a9:ea:d6:ba:f6:b7:26:a8:eb:9d:b8: 0e:d8:94:ae:c0:02:ee:b0:f5:31:5e:11:4f:1c:9c: a4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3E:D4:39:2A:B6:B0:BC:A6:E7:6B:ED:F0:C0:3F:B6:28:E7:48:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cdb1eb81-de9f-3829-a9ad-da46c3d20849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5f:66:a9:2e:91:2b:9e:3f:ab:85:a1:e9:ba:fd:23:1f:d8: 76:8f:16:6a:96:7b:f0:3c:1c:d6:c5:ac:ea:9f:79:26:c4:fc: c0:65:2e:dd:08:61:00:a5:3b:a6:ab:02:a2:d2:41:8a:3d:9f: fd:51:65:aa:f6:56:4e:49:01:7a:ae:33:0c:02:08:6b:08:bf: 8a:02:b9:63:58:42:23:87:58:46:2e:b8:7d:73:3e:1c:99:fe: 9f:37:4a:c8:1b:cd:47:be:a4:21:a0:34:44:53:f8:64:75:40: 55:fd:92:5a:e1:8e:c5:c9:56:e4:62:51:33:63:19:f9:96:e1: 05:91:7a:3f:cf:4b:2e:d6:89:09:35:15:f2:dc:2c:db:bf:49: d9:83:00:49:df:e9:a0:48:0d:23:b5:87:18:be:9d:b4:26:90: 54:ef:d5:ee:ad:05:49:da:51:df:72:ea:08:1d:a4:06:1b:a9: 4a:17:0c:9d:7c:4a:01:bf:0f:d9:7b:06:92:dc:f9:a0:ad:9b: 8f:7b:e8:aa:8c:15:92:0f:33:06:e7:f9:64:16:c6:23:84:d9: bb:c5:c7:5c:02:29:23:21:e3:e2:1c:29:4b:7a:1e:fe:de:05: 35:98:ed:f8:1c:96:31:ae:31:2c:c1:87:58:50:21:f5:01:54: aa:05:3f:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VukxpKvV6qVrCdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk ZDgxM2U1YWItMmZhYS00MDAzLWFkMzUtMmRiMzYzMjUxNjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUnRRgJfgOnjJu3myWdTJLxUWhNhAtBsI/xu 0UxJhIRDJ93qeIbk8Iv3avDiPzgFD3gOeMzFPWWF/eUd1V9Kvw3/2wZVEGdlDkiP 5fPiAmBGAAFVouASVosoqQI/Ln8qurYPoYBZKlpsx8qpTDJpCf8Bk2sWgCO96yWQ YUSOf+iRc5b0CNNFSQDQBdKLk89aLEBMO7YYgpejKGRTkdmb7gT0KGvyVMO6vQLF EmcfEmf+eCs0pbXBeILvGNlwrr1AeJ37LBiEMezLDWPQDIPj1yJ/sG9EAxd2KwsN c7hlAI4AYiwyqerWuva3JqjrnbgO2JSuwALusPUxXhFPHJykpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0+1DkqtrC8pudr7fDAP7Yo50hyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RiMWViODEtZGU5Zi0z ODI5LWE5YWQtZGE0NmMzZDIwODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBfZqkukSueP6uFoem6/SMf2HaPFmqWe/A8HNbFrOqfeSbE/MBlLt0I YQClO6arAqLSQYo9n/1RZar2Vk5JAXquMwwCCGsIv4oCuWNYQiOHWEYuuH1zPhyZ /p83SsgbzUe+pCGgNERT+GR1QFX9klrhjsXJVuRiUTNjGfmW4QWRej/PSy7WiQk1 FfLcLNu/SdmDAEnf6aBIDSO1hxi+nbQmkFTv1e6tBUnaUd9y6ggdpAYbqUoXDJ18 SgG/D9l7BpLc+aCtm4976KqMFZIPMwbn+WQWxiOE2bvFx1wCKSMh4+IcKUt6Hv7e BTWY7fgcljGuMSzBh1hQIfUBVKoFP3k= -----END CERTIFICATE-----Generated at Fri Apr 17 11:31:07 2026 by rpki-client