$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d975a817-1fd8-3e06-9028-360f3da64162.roa File: d975a817-1fd8-3e06-9028-360f3da64162.roa (raw, json) Hash identifier: HwbD/8WZxXJRU88TTTQnYVPJKw9V8/NhYcMhvB/yvUg= Subject key identifier: 94:4A:26:A0:E7:75:2E:ED:52:E3:2C:1F:90:E6:20:69:87:C6:6E:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D55BB85773A3AA0B53B9FB180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d975a817-1fd8-3e06-9028-360f3da64162.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 36183 IP address blocks: 172.224.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:85:77:3a:3a:a0:b5:3b:9f:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=c36668dd-dc34-4278-ab54-7eefd96b422c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e4:4e:d1:2d:c6:9b:f7:b9:18:f1:64:07:0d: aa:06:0c:f4:5d:12:c0:84:70:fe:f7:80:27:01:45: 0d:7d:a6:a9:4e:cd:1b:27:d6:3c:b6:37:7c:02:ff: 4f:98:68:b3:df:a5:48:1a:54:06:fe:62:11:d4:78: 6f:42:c5:df:52:b6:0a:ed:12:08:b4:07:bc:a3:e4: e5:ab:04:f0:13:a6:01:17:7d:fa:f7:43:3a:0e:3d: 25:cf:27:c1:59:41:db:36:f0:99:a1:bd:5a:23:cb: cb:aa:1c:1a:96:de:7a:c6:26:37:e2:f5:9b:e0:2f: 0e:e0:94:08:2f:b6:e8:09:6d:23:2e:df:f7:f0:cf: ed:e4:82:a2:d9:fa:9f:15:ae:f5:33:f3:5e:56:c7: d0:f3:a1:56:7b:11:98:6c:17:9d:72:ae:93:68:9f: a2:7b:53:7a:4f:ab:7d:f5:36:4f:8e:4c:62:63:a9: 9f:f9:d5:c9:85:61:79:9f:58:f9:dd:61:37:bf:23: 59:59:04:6d:8c:d0:47:8c:90:16:0e:1c:1f:62:bb: 89:ff:ea:36:a0:dd:af:92:c9:f2:16:cb:8c:ca:59: 49:a5:08:47:b5:fb:bd:12:1e:00:39:45:79:4b:d7: 73:1b:0e:3d:5a:27:0c:36:40:aa:ee:e3:b6:02:45: 84:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4A:26:A0:E7:75:2E:ED:52:E3:2C:1F:90:E6:20:69:87:C6:6E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d975a817-1fd8-3e06-9028-360f3da64162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:bc:b7:f8:2a:00:4a:63:f2:58:b7:ff:18:cc:9e:62:50:1b: 9c:b3:f3:a4:6b:3e:74:94:3c:c0:e1:86:8e:8e:af:54:31:20: d6:31:38:bc:93:24:82:33:f3:95:75:ef:2a:b8:2f:47:45:fc: f7:bc:79:89:d6:66:47:db:86:40:ae:9a:44:b4:8c:20:66:4a: 9c:e6:b4:0f:6c:94:97:e1:9f:f4:06:4f:f8:27:c5:4d:f4:dc: 7c:1b:43:85:e1:9a:93:70:68:3c:65:20:99:22:07:32:8d:7d: df:ae:25:e9:13:77:fe:41:18:0b:df:f9:a6:30:72:49:96:0d: 3f:22:a8:dd:e2:b1:ac:71:a4:62:08:c1:19:a8:0e:60:8d:c4: 0a:d0:45:71:14:f9:43:87:59:ce:fc:6b:39:85:78:49:67:98: 20:f4:65:a7:32:34:27:bb:30:a3:eb:ac:15:4f:db:6b:f6:f5: d6:bb:0a:f0:22:67:03:01:9c:26:a3:00:2b:4d:14:df:db:6c: 47:9b:71:dd:11:38:f7:11:34:9c:a3:38:40:22:dc:0c:1a:31: a3:2e:36:c5:d8:d2:cf:9e:e4:cd:ae:50:6d:64:aa:7d:c6:67: 04:fa:b4:15:66:91:e0:16:88:ca:f9:3c:60:72:34:dd:55:8c: ae:59:59:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu4V3OjqgtTufsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YzM2NjY4ZGQtZGMzNC00Mjc4LWFiNTQtN2VlZmQ5NmI0MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmeRO0S3Gm/e5GPFkBw2qBgz0XRLAhHD+94An AUUNfaapTs0bJ9Y8tjd8Av9PmGiz36VIGlQG/mIR1HhvQsXfUrYK7RIItAe8o+Tl qwTwE6YBF33690M6Dj0lzyfBWUHbNvCZob1aI8vLqhwalt56xiY34vWb4C8O4JQI L7boCW0jLt/38M/t5IKi2fqfFa71M/NeVsfQ86FWexGYbBedcq6TaJ+ie1N6T6t9 9TZPjkxiY6mf+dXJhWF5n1j53WE3vyNZWQRtjNBHjJAWDhwfYruJ/+o2oN2vksny FsuMyllJpQhHtfu9Eh4AOUV5S9dzGw49WicMNkCq7uO2AkWElQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRKJqDndS7tUuMsH5DmIGmHxm5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDk3NWE4MTctMWZkOC0z ZTA2LTkwMjgtMzYwZjNkYTY0MTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq8t/gqAEpj8li3/xjMnmJQG5yz86RrPnSUPMDhho6Or1QxINYxOLyT JIIz85V17yq4L0dF/Pe8eYnWZkfbhkCumkS0jCBmSpzmtA9slJfhn/QGT/gnxU30 3HwbQ4XhmpNwaDxlIJkiBzKNfd+uJekTd/5BGAvf+aYwckmWDT8iqN3isaxxpGII wRmoDmCNxArQRXEU+UOHWc78azmFeElnmCD0ZacyNCe7MKPrrBVP22v29da7CvAi ZwMBnCajACtNFN/bbEebcd0ROPcRNJyjOEAi3AwaMaMuNsXY0s+e5M2uUG1kqn3G ZwT6tBVmkeAWiMr5PGByNN1VjK5ZWcE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:49:56 2026 by rpki-client