$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa File: da88b2bd-e381-3804-af7d-337f02bc71e1.roa (raw, json) Hash identifier: 0hb/Vdg27U6Ac/0wjW2L2K62N4LqKTfqclu4vW+vWXA= Subject key identifier: 2B:87:53:1D:77:82:ED:91:28:1A:4B:46:8B:74:37:78:A3:C8:EE:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C6E218FF50D0BE86992FACC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.225.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6e:21:8f:f5:0d:0b:e8:69:92:fa:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=c756ef87-3c66-4369-b900-266f79087d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:51:53:41:7b:c9:17:56:f7:49:7a:a9:c5: fe:7d:c0:3e:31:73:c2:bb:0d:55:8e:a3:c7:92:ec: 2c:cb:03:92:e7:22:3c:66:18:58:28:40:c9:a2:5f: c9:aa:00:3d:6f:05:3a:82:f5:c2:1e:95:52:1e:0a: a5:fe:8d:c9:ca:ba:1d:90:7b:7f:76:c3:05:40:84: bf:d8:2f:36:bb:a0:d6:6f:a7:f6:17:2f:17:48:ea: 76:74:6d:89:29:b7:53:f1:00:d6:0f:3d:b5:d8:49: 89:05:5f:db:0d:02:8e:10:82:27:29:2c:48:73:17: 35:a6:41:91:f1:37:08:c0:52:a8:d6:b7:cd:af:13: 79:3f:22:a7:a2:f6:14:89:89:47:7d:58:b0:11:c7: 32:24:ee:fa:f7:d0:60:d1:e8:c7:67:c1:5b:92:50: 34:14:9b:88:3a:6f:2a:2d:f9:57:f2:88:2e:b3:e7: 15:97:ef:56:a0:23:4b:2d:ba:90:3b:33:ae:a0:e0: 92:70:bc:b9:c5:0b:80:55:83:9d:bb:28:8d:9a:05: 4b:87:52:12:b9:4e:92:6a:a5:24:cd:17:42:64:88: f0:77:1a:c8:f0:93:50:04:1a:57:5d:73:aa:15:6a: 59:88:e9:cb:33:2f:19:0c:4b:ed:f0:02:c9:39:53: 13:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:87:53:1D:77:82:ED:91:28:1A:4B:46:8B:74:37:78:A3:C8:EE:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:91:36:28:b4:16:88:2e:d4:41:66:98:d0:b0:16:68:aa:90: 9f:18:b7:58:68:66:e9:8a:03:2c:57:46:af:b7:2a:97:18:dc: 39:d7:16:4a:20:0a:dd:7d:4d:59:e4:c7:bc:32:8e:81:b0:3d: 70:3a:fb:61:4d:75:2e:80:bd:4b:ef:eb:1b:5e:b4:6e:20:db: 1e:2e:06:3b:60:83:9a:79:55:51:29:2d:8e:b7:04:1c:57:0c: 2f:9e:dc:ec:b8:ca:a8:16:28:33:aa:5e:63:09:40:8e:42:af: e9:61:4a:f4:e9:01:21:71:a6:34:94:3e:d0:39:25:df:d2:da: bf:d2:c1:a4:98:23:26:f3:df:d7:20:f1:0e:60:8b:65:ff:90: 63:9c:46:b5:08:29:2d:0d:64:d6:25:0f:25:9f:78:62:a1:62: f3:8a:c3:a8:95:74:e3:f6:f1:21:90:18:49:04:54:2e:a0:3c: 42:24:54:62:0a:c9:61:e9:67:1e:98:b8:a3:1c:95:d0:12:88: 13:71:c8:fd:db:20:6a:ca:40:c5:74:15:63:9c:de:5a:c3:92: 54:03:9c:ff:5d:b9:b7:86:82:26:65:18:4b:fd:66:c0:62:a0: 16:2e:a6:10:6d:b5:eb:7b:92:f4:a1:ca:c6:53:2a:7d:1a:38: 2f:8d:5d:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExuIY/1DQvoaZL6zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk Yzc1NmVmODctM2M2Ni00MzY5LWI5MDAtMjY2Zjc5MDg3ZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX9RU0F7yRdW90l6qcX+fcA+MXPCuw1VjqPH kuwsywOS5yI8ZhhYKEDJol/JqgA9bwU6gvXCHpVSHgql/o3JyrodkHt/dsMFQIS/ 2C82u6DWb6f2Fy8XSOp2dG2JKbdT8QDWDz212EmJBV/bDQKOEIInKSxIcxc1pkGR 8TcIwFKo1rfNrxN5PyKnovYUiYlHfViwEccyJO7699Bg0ejHZ8FbklA0FJuIOm8q LflX8ogus+cVl+9WoCNLLbqQOzOuoOCScLy5xQuAVYOduyiNmgVLh1ISuU6SaqUk zRdCZIjwdxrI8JNQBBpXXXOqFWpZiOnLMy8ZDEvt8ALJOVMTQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuHUx13gu2RKBpLRot0N3ijyO4uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE4OGIyYmQtZTM4MS0z ODA0LWFmN2QtMzM3ZjAyYmM3MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqRNii0Fogu1EFmmNCwFmiqkJ8Yt1hoZumKAyxXRq+3KpcY3DnXFkog Ct19TVnkx7wyjoGwPXA6+2FNdS6AvUvv6xtetG4g2x4uBjtgg5p5VVEpLY63BBxX DC+e3Oy4yqgWKDOqXmMJQI5Cr+lhSvTpASFxpjSUPtA5Jd/S2r/SwaSYIybz39cg 8Q5gi2X/kGOcRrUIKS0NZNYlDyWfeGKhYvOKw6iVdOP28SGQGEkEVC6gPEIkVGIK yWHpZx6YuKMcldASiBNxyP3bIGrKQMV0FWOc3lrDklQDnP9dubeGgiZlGEv9ZsBi oBYuphBttet7kvShysZTKn0aOC+NXbM= -----END CERTIFICATE-----Generated at Sun Mar 1 22:40:03 2026 by rpki-client