$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0eec3e7-d8e3-32ca-90d6-018ccd59bc6a.roa File: d0eec3e7-d8e3-32ca-90d6-018ccd59bc6a.roa (raw, json) Hash identifier: ytMjFVaQYZ4IrNegZ5VXvzMUK7uObKXdgNX1oRVgXtg= Subject key identifier: B1:EF:B3:92:32:9C:B2:BD:29:E5:F6:54:E2:56:C5:CC:F7:E5:FF:F5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D75D541EB85BF31F4B7A6EE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0eec3e7-d8e3-32ca-90d6-018ccd59bc6a.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 63949 IP address blocks: 172.234.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:41:eb:85:bf:31:f4:b7:a6:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=ef47b239-0973-4c51-ab84-ff2ec68793d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bf:51:f8:a0:33:3f:3b:ea:60:e7:09:6e:17: 8d:9e:45:a2:55:3d:0b:95:df:22:1a:64:a9:b4:1b: 5c:6f:d9:54:47:65:a9:d2:18:2c:9f:70:c6:cc:08: dd:32:67:33:d4:25:2a:56:47:fc:c8:d8:7e:01:7d: ee:ea:08:f9:85:46:14:22:7f:a1:fa:ca:9d:4a:47: 2d:f3:85:95:fe:fb:56:88:d3:27:86:f6:3b:3e:ce: 48:52:5e:81:c9:87:fe:ac:d4:f2:43:ad:f0:55:11: 2a:f0:e9:70:56:f0:9a:8c:d1:d0:e7:05:0d:6f:5d: a7:28:f3:ea:11:05:76:a7:8a:e8:73:c8:78:d1:1d: a1:c1:f1:20:59:39:6d:17:90:6d:ff:8d:d8:6a:82: 47:60:aa:91:64:56:d1:34:1b:19:04:a1:d6:63:61: 3b:67:47:be:73:cd:2b:7e:e5:0c:82:47:e4:6a:8d: 09:4f:bd:7e:4f:ef:50:f4:93:f5:ae:58:cf:36:4f: cf:4b:36:9d:0d:8e:a4:c6:8d:d2:ba:19:94:35:4f: df:a9:00:26:37:f5:a0:4f:f4:18:39:d8:b9:7d:eb: 18:ca:91:29:d3:a3:a2:72:a1:cc:0d:0d:de:a1:a7: ce:55:46:36:3f:66:2f:7f:d5:7a:1d:30:f5:d8:f6: 77:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:B3:92:32:9C:B2:BD:29:E5:F6:54:E2:56:C5:CC:F7:E5:FF:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d0eec3e7-d8e3-32ca-90d6-018ccd59bc6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:03:fd:ef:f5:9a:f7:63:ff:f6:d6:db:c7:b8:92:dc:28:c0: 25:e4:58:73:c1:50:9e:e2:aa:64:66:cc:01:2f:bd:4c:85:a7: a2:89:98:79:5c:d9:e0:77:5c:57:2b:87:85:d1:df:cc:2c:2a: 26:e1:06:b0:53:d5:29:b5:9d:94:e6:9c:f0:e6:95:96:0e:f7: 91:18:e0:fc:24:17:96:e9:e5:35:1c:cb:60:ed:3a:f6:cf:36: 04:32:b4:6b:b0:80:5e:63:17:d6:bc:bc:66:91:ba:af:a7:f3: 4c:2c:08:83:80:74:b4:71:f6:8b:ac:c3:ca:36:19:0c:7e:d0: 54:56:12:af:30:32:2d:03:bc:88:24:48:38:bd:2c:70:63:17: 88:19:66:28:b9:f1:74:3d:0c:1a:2d:be:c2:da:89:b9:ad:d7: 8a:4f:40:35:ce:33:7b:94:a4:4c:d2:31:18:86:65:d2:66:ee: dc:7e:8a:c9:aa:8b:32:46:b6:7a:51:45:5f:71:4d:e1:20:36: dd:f7:46:e4:f9:e7:d6:7d:bf:bd:b4:8e:48:be:6a:00:df:43: 51:02:0b:61:17:0d:73:31:e8:28:5d:3c:ed:28:b9:39:a9:80: 0b:e5:5b:45:a0:63:08:40:78:29:f3:73:53:53:95:08:3d:4c: 9a:e3:5e:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UHrhb8x9Lem7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZWY0N2IyMzktMDk3My00YzUxLWFiODQtZmYyZWM2ODc5M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL9R+KAzPzvqYOcJbheNnkWiVT0Lld8iGmSp tBtcb9lUR2Wp0hgsn3DGzAjdMmcz1CUqVkf8yNh+AX3u6gj5hUYUIn+h+sqdSkct 84WV/vtWiNMnhvY7Ps5IUl6ByYf+rNTyQ63wVREq8OlwVvCajNHQ5wUNb12nKPPq EQV2p4roc8h40R2hwfEgWTltF5Bt/43YaoJHYKqRZFbRNBsZBKHWY2E7Z0e+c80r fuUMgkfkao0JT71+T+9Q9JP1rljPNk/PSzadDY6kxo3SuhmUNU/fqQAmN/WgT/QY Odi5fesYypEp06OicqHMDQ3eoafOVUY2P2Yvf9V6HTD12PZ3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHvs5IynLK9KeX2VOJWxcz35f/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDBlZWMzZTctZDhlMy0z MmNhLTkwZDYtMDE4Y2NkNTliYzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4D/e/1mvdj//bW28e4ktwowCXkWHPBUJ7iqmRmzAEvvUyFp6KJmHlc 2eB3XFcrh4XR38wsKibhBrBT1Sm1nZTmnPDmlZYO95EY4PwkF5bp5TUcy2DtOvbP NgQytGuwgF5jF9a8vGaRuq+n80wsCIOAdLRx9ousw8o2GQx+0FRWEq8wMi0DvIgk SDi9LHBjF4gZZii58XQ9DBotvsLaibmt14pPQDXOM3uUpEzSMRiGZdJm7tx+ismq izJGtnpRRV9xTeEgNt33RuT559Z9v720jki+agDfQ1ECC2EXDXMx6ChdPO0ouTmp gAvlW0WgYwhAeCnzc1NTlQg9TJrjXos= -----END CERTIFICATE-----Generated at Fri Apr 17 07:07:46 2026 by rpki-client