$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa File: d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa (raw, json) Hash identifier: HXDvpaIpr2o5vKsZfDLvDQz9yLoRu5HmlKiXuzcy1ls= Subject key identifier: D3:8E:13:97:80:19:3D:79:92:A7:4D:E6:AF:AA:18:BF:6D:88:39:26 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D571FBD6CAAA0FD07379A1BC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 36183 IP address blocks: 172.224.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:bd:6c:aa:a0:fd:07:37:9a:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=ae601513-cc6b-4226-92f7-09e99a095897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2d:bc:83:28:bc:f1:d1:5b:3a:fe:bb:60:f6: 0f:d9:03:50:8e:df:4f:1b:7b:e0:ad:ea:eb:d4:a5: 11:c5:19:d8:af:34:58:52:e1:86:54:84:87:11:da: 9e:86:df:b7:a2:5f:47:6a:f6:7c:7e:6b:b7:c8:70: 5a:29:d3:3e:07:ef:34:e0:c9:37:ef:a8:5c:cc:0b: ee:f4:51:1b:b3:f8:2c:dd:64:87:c4:b6:50:fd:62: bd:0e:05:f1:8c:00:40:f1:23:6e:03:aa:6c:cd:de: 6a:59:61:e6:c2:7e:03:4e:6c:66:b3:f9:4d:6c:8d: 67:d2:46:25:8f:99:e6:c9:34:85:a8:5f:57:4e:99: 9d:93:d2:92:eb:58:5c:d2:c9:38:05:a5:e2:3b:a6: eb:d1:09:23:bb:b1:ca:1f:90:cd:60:f8:31:4c:55: f4:e0:07:05:78:a4:6b:46:ea:4b:69:96:15:5c:4d: 9f:e1:b9:6c:11:b5:b2:fb:3b:bd:a6:71:fd:1e:e8: 5d:a2:ae:b7:b6:13:0b:67:69:aa:17:aa:9a:40:1d: 55:f7:16:f2:c8:d9:f4:a0:8c:44:56:3c:75:9c:e3: 39:e3:be:50:dc:49:49:84:81:f5:6b:15:ea:f8:a2: 3c:10:0c:00:92:85:e3:93:d0:73:f7:ec:49:ef:86: 1b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8E:13:97:80:19:3D:79:92:A7:4D:E6:AF:AA:18:BF:6D:88:39:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d4d9a20f-635a-30c5-a767-b466a8b4ecc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:99:fb:9f:6a:b0:67:b5:65:02:e6:97:34:87:9e:4e:0a:ac: 9f:b2:36:e7:23:f8:aa:34:1d:9b:3d:a9:2e:f9:93:91:55:61: 6f:f7:68:40:5e:85:d9:4f:4f:5c:26:8d:59:c3:c5:c3:cf:20: d3:be:16:fd:d8:5e:c5:84:38:c8:0e:cf:db:7b:da:c6:49:26: 66:28:4e:60:c2:d7:8a:dc:58:9f:2e:ba:02:cb:08:c5:6e:07: 95:f4:ab:47:b7:46:20:fa:c8:8f:a4:ba:a6:ee:3c:f8:1d:3b: f7:9b:2b:39:d2:e9:2c:f3:3c:7f:e1:54:ec:63:55:9e:57:4c: 95:0e:6a:8c:0c:2b:d0:b6:7b:59:f2:fb:59:72:65:d9:e3:df: 96:fc:f5:6d:f3:56:0f:28:db:5f:20:65:c1:2e:25:60:8f:f2: 53:2b:4d:ac:19:61:5c:0a:40:fd:43:4d:e2:a0:91:f6:01:b9: 33:46:ea:36:c6:81:f1:e2:b5:7f:6b:90:40:b5:38:f0:2f:6f: bb:8a:4d:50:44:ed:91:6a:68:be:37:28:0a:8e:c4:cb:80:ff: 6d:f7:09:99:7a:ca:d6:58:2a:57:42:ec:2b:9e:40:ad:6a:be: 49:8c:a8:b5:07:ca:2f:0a:fb:b5:61:5b:2d:93:dc:09:0b:3c: 91:61:c3:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH71sqqD9BzeaG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YWU2MDE1MTMtY2M2Yi00MjI2LTkyZjctMDllOTlhMDk1ODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy28gyi88dFbOv67YPYP2QNQjt9PG3vgrerr 1KURxRnYrzRYUuGGVISHEdqeht+3ol9HavZ8fmu3yHBaKdM+B+804Mk376hczAvu 9FEbs/gs3WSHxLZQ/WK9DgXxjABA8SNuA6pszd5qWWHmwn4DTmxms/lNbI1n0kYl j5nmyTSFqF9XTpmdk9KS61hc0sk4BaXiO6br0Qkju7HKH5DNYPgxTFX04AcFeKRr RupLaZYVXE2f4blsEbWy+zu9pnH9Huhdoq63thMLZ2mqF6qaQB1V9xbyyNn0oIxE Vjx1nOM5475Q3ElJhIH1axXq+KI8EAwAkoXjk9Bz9+xJ74Yb0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOOE5eAGT15kqdN5q+qGL9tiDkmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDRkOWEyMGYtNjM1YS0z MGM1LWE3NjctYjQ2NmE4YjRlY2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISZ+59qsGe1ZQLmlzSHnk4KrJ+yNucj+Ko0HZs9qS75k5FVYW/3aEBe hdlPT1wmjVnDxcPPINO+Fv3YXsWEOMgOz9t72sZJJmYoTmDC14rcWJ8uugLLCMVu B5X0q0e3RiD6yI+kuqbuPPgdO/ebKznS6SzzPH/hVOxjVZ5XTJUOaowMK9C2e1ny +1lyZdnj35b89W3zVg8o218gZcEuJWCP8lMrTawZYVwKQP1DTeKgkfYBuTNG6jbG gfHitX9rkEC1OPAvb7uKTVBE7ZFqaL43KAqOxMuA/233CZl6ytZYKldC7CueQK1q vkmMqLUHyi8K+7VhWy2T3AkLPJFhw3E= -----END CERTIFICATE-----Generated at Fri Apr 17 10:04:18 2026 by rpki-client