$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa File: cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa (raw, json) Hash identifier: il1lsRwWSk8XgzHhyFX2cYH6xEjF/N3pkm6Xp6FH21s= Subject key identifier: 11:8A:3B:81:9C:77:77:7F:39:19:FC:4D:AB:16:56:4D:F7:78:DA:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E2D9F36B3D5F3B1C3FEC5EB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 36183 IP address blocks: 172.226.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:36:b3:d5:f3:b1:c3:fe:c5:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=0ffb5f78-0b4a-4a69-b37e-5720bb2de2ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b8:9a:c5:e5:db:6c:d4:d1:3b:5c:99:1b:64: e9:5b:1e:c0:8d:23:64:56:f1:be:f6:f2:2d:ad:f7: e7:8d:e6:b6:06:a8:70:68:06:69:74:2f:7d:c4:56: 11:f8:af:23:17:fe:31:d7:10:28:47:63:7d:c7:89: 29:50:ce:61:de:53:47:d1:00:eb:f7:92:19:87:29: 75:4b:81:13:61:e1:75:30:1e:cb:88:61:28:16:98: 11:d5:b9:70:c2:ef:95:d7:ab:20:99:7a:99:56:c4: 91:0e:aa:2d:67:1c:16:0b:b9:16:5f:da:19:78:3a: 65:fb:09:73:7f:3e:98:07:2b:c1:8e:0e:27:c0:ba: 22:9b:d8:b2:f8:21:b8:c7:e2:29:58:f1:3b:e6:7a: 98:42:57:66:73:18:2a:28:ae:cb:e1:07:cf:38:d5: 98:b6:2a:87:08:f0:29:aa:db:ed:f7:d7:22:f5:8a: 00:4f:38:fc:ee:98:98:e5:8a:82:84:63:9a:81:48: c4:50:ff:51:17:b8:60:43:4f:70:60:0a:b2:33:ac: 43:33:f6:1b:e6:87:85:db:50:eb:92:d6:31:86:a6: d5:12:8e:e7:65:32:e0:f6:1f:fc:9d:04:bd:a4:d1: 92:6d:41:d9:ff:d3:be:14:e4:11:c1:56:63:28:c4: 56:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8A:3B:81:9C:77:77:7F:39:19:FC:4D:AB:16:56:4D:F7:78:DA:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfc2c419-6951-3d7c-be04-a2af92afaeb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:24:42:3f:73:e9:57:91:85:63:69:e8:94:6b:5a:cc:54:80: 6b:51:09:17:6a:5e:59:44:79:e1:05:d7:28:61:bd:45:30:3e: cc:98:0b:24:d8:e8:4b:3b:13:94:99:ef:40:d8:08:7a:63:8e: f3:28:56:49:1b:5e:69:38:98:5e:be:91:4a:86:7d:3f:9a:80: 48:43:3f:fc:e8:4c:b8:48:ad:4d:39:be:84:1f:90:ed:d6:e3: 6a:58:95:a3:cd:1a:e6:7b:02:11:27:3e:78:36:b3:e0:90:45: 67:ba:fe:c2:95:f8:46:10:8d:70:43:1a:28:fb:45:c3:3f:17: 12:a1:c0:ad:de:ee:54:29:bd:b1:1d:63:d2:72:2a:61:4b:00: 74:3c:54:dd:7e:f1:47:63:1a:c4:30:0f:08:a0:25:5c:13:3f: 24:fe:de:c4:0f:16:b6:8b:81:fc:4f:79:06:e5:99:1d:5d:19: c5:91:37:8b:ea:f0:3f:b1:6d:d0:6e:aa:32:3c:a2:9e:60:af: 22:2d:17:06:06:c0:84:5e:92:00:40:e9:5d:b5:69:25:44:da: 85:f5:39:bf:17:30:f0:81:b5:99:9c:dd:44:c7:c4:41:1d:67: 5c:1b:84:42:27:41:31:9a:51:b5:51:7c:4a:51:10:70:cd:f3: f9:bf:bf:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnzaz1fOxw/7F6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MGZmYjVmNzgtMGI0YS00YTY5LWIzN2UtNTcyMGJiMmRlMmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7iaxeXbbNTRO1yZG2TpWx7AjSNkVvG+9vIt rffnjea2BqhwaAZpdC99xFYR+K8jF/4x1xAoR2N9x4kpUM5h3lNH0QDr95IZhyl1 S4ETYeF1MB7LiGEoFpgR1blwwu+V16sgmXqZVsSRDqotZxwWC7kWX9oZeDpl+wlz fz6YByvBjg4nwLoim9iy+CG4x+IpWPE75nqYQldmcxgqKK7L4QfPONWYtiqHCPAp qtvt99ci9YoATzj87piY5YqChGOagUjEUP9RF7hgQ09wYAqyM6xDM/Yb5oeF21Dr ktYxhqbVEo7nZTLg9h/8nQS9pNGSbUHZ/9O+FOQRwVZjKMRWWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGKO4Gcd3d/ORn8TasWVk33eNp/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZjMmM0MTktNjk1MS0z ZDdjLWJlMDQtYTJhZjkyYWZhZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkkQj9z6VeRhWNp6JRrWsxUgGtRCRdqXllEeeEF1yhhvUUwPsyYCyTY 6Es7E5SZ70DYCHpjjvMoVkkbXmk4mF6+kUqGfT+agEhDP/zoTLhIrU05voQfkO3W 42pYlaPNGuZ7AhEnPng2s+CQRWe6/sKV+EYQjXBDGij7RcM/FxKhwK3e7lQpvbEd Y9JyKmFLAHQ8VN1+8UdjGsQwDwigJVwTPyT+3sQPFraLgfxPeQblmR1dGcWRN4vq 8D+xbdBuqjI8op5gryItFwYGwIRekgBA6V21aSVE2oX1Ob8XMPCBtZmc3UTHxEEd Z1wbhEInQTGaUbVRfEpREHDN8/m/vwk= -----END CERTIFICATE-----Generated at Wed Jun 17 13:42:28 2026 by rpki-client