$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa File: da88b2bd-e381-3804-af7d-337f02bc71e1.roa (raw, json) Hash identifier: R5SGGcg/2YNHl7UXOqLugM1lvTXWUCCxh/8iNQKPCd4= Subject key identifier: 95:C0:A2:93:E2:7F:E3:0F:79:AF:7C:CF:39:05:AC:2E:9A:6F:5A:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E2D9F2B16F0966109B8DC4740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 36183 IP address blocks: 172.225.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:2b:16:f0:96:61:09:b8:dc:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=05117504-d8bc-4105-9f9b-6dd376781df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6e:3c:41:50:a1:7e:12:f2:6b:17:99:f3:fb: 10:40:d6:59:7b:10:45:1a:20:44:51:8c:17:93:cc: a8:36:e1:f2:ee:2e:81:b5:fa:99:22:02:2d:0a:d2: 4b:d4:cf:d6:b5:bd:9d:aa:7f:ae:57:3e:ec:01:ba: 92:88:0f:0d:6a:9c:a1:83:5d:37:a3:d7:ab:32:0d: 46:7e:b8:51:1b:09:0d:54:f5:2f:36:f9:93:6e:18: ef:45:e3:a5:60:18:15:b8:f6:01:2f:47:d3:f3:a8: 3a:f7:52:70:57:fd:8a:57:94:26:13:fe:66:ff:ad: 08:8e:40:1e:72:a4:d8:ec:7d:57:8d:3b:a0:c9:64: 90:e9:73:ef:1f:b6:45:7f:1f:06:dd:70:cf:fc:82: 99:a9:62:c2:ca:fe:1f:d7:df:2b:5e:09:43:5d:c4: d3:b2:16:a2:11:98:54:b3:ae:07:d2:82:99:5b:66: a9:82:ed:4a:d0:ac:06:13:b0:33:09:68:ad:c0:75: 41:7f:ae:39:01:1c:e0:5a:3a:fb:47:91:3b:01:7a: 8b:85:1e:98:bf:ec:82:4f:06:27:e3:ca:e3:2d:15: 54:7c:62:51:7b:1d:b2:c5:ec:d7:5e:2a:2b:88:df: 8c:47:fc:b4:d7:41:b3:38:f9:1a:d5:9d:b3:89:ab: b3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C0:A2:93:E2:7F:E3:0F:79:AF:7C:CF:39:05:AC:2E:9A:6F:5A:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da88b2bd-e381-3804-af7d-337f02bc71e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9c:a3:65:91:37:cb:b7:62:ff:87:72:d4:de:bb:74:3c:6e: 1d:a0:a0:8a:29:ce:b9:01:6a:e6:03:44:63:66:1b:28:99:08: 97:43:c5:f1:50:dc:2c:5b:e7:66:76:58:02:69:7b:e2:e9:c9: ac:1a:d9:f1:4f:ec:80:c8:54:51:54:d6:1c:6a:fc:c0:b7:76: 2c:24:4f:60:bc:e7:c6:a9:c4:f7:5d:c6:5b:0b:b0:db:7a:41: ab:6b:b0:3a:ae:21:e2:9a:25:93:0e:2b:95:6a:e6:58:7a:48: 6d:89:e6:b7:c2:b4:bc:8b:f9:02:e6:3b:8d:0b:e0:44:43:37: d2:87:21:9d:95:e2:f8:25:ff:6d:cf:d4:c9:03:c7:e7:09:2f: 8e:de:15:1f:c9:47:0c:83:44:c1:5c:18:3b:34:74:87:37:8b: 67:be:7b:1a:c4:76:02:22:ac:61:aa:8d:c7:c0:31:b4:40:8b: 24:5d:0e:1c:05:7a:1c:20:75:80:11:3b:ee:b9:28:3f:30:d5: bd:69:b4:51:26:f7:4c:87:a4:b1:ee:d9:8a:f2:61:4f:f2:5b: 13:03:92:6d:ac:de:9d:af:94:9c:3a:6a:b8:c6:cc:7b:cf:63: 9c:e1:14:c9:f1:4e:44:28:e7:e7:38:e9:3a:c4:ff:94:e5:2e: 93:4f:78:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnysW8JZhCbjcR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MDUxMTc1MDQtZDhiYy00MTA1LTlmOWItNmRkMzc2NzgxZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm248QVChfhLyaxeZ8/sQQNZZexBFGiBEUYwX k8yoNuHy7i6BtfqZIgItCtJL1M/Wtb2dqn+uVz7sAbqSiA8Napyhg103o9erMg1G frhRGwkNVPUvNvmTbhjvReOlYBgVuPYBL0fT86g691JwV/2KV5QmE/5m/60IjkAe cqTY7H1XjTugyWSQ6XPvH7ZFfx8G3XDP/IKZqWLCyv4f198rXglDXcTTshaiEZhU s64H0oKZW2apgu1K0KwGE7AzCWitwHVBf645ARzgWjr7R5E7AXqLhR6Yv+yCTwYn 48rjLRVUfGJRex2yxezXXioriN+MR/y010GzOPka1Z2ziauzQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXAopPif+MPea98zzkFrC6ab1qGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGE4OGIyYmQtZTM4MS0z ODA0LWFmN2QtMzM3ZjAyYmM3MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqco2WRN8u3Yv+HctTeu3Q8bh2goIopzrkBauYDRGNmGyiZCJdDxfFQ 3Cxb52Z2WAJpe+Lpyawa2fFP7IDIVFFU1hxq/MC3diwkT2C858apxPddxlsLsNt6 QatrsDquIeKaJZMOK5Vq5lh6SG2J5rfCtLyL+QLmO40L4ERDN9KHIZ2V4vgl/23P 1MkDx+cJL47eFR/JRwyDRMFcGDs0dIc3i2e+exrEdgIirGGqjcfAMbRAiyRdDhwF ehwgdYARO+65KD8w1b1ptFEm90yHpLHu2YryYU/yWxMDkm2s3p2vlJw6arjGzHvP Y5zhFMnxTkQo5+c46TrE/5TlLpNPeGU= -----END CERTIFICATE-----Generated at Wed Jun 17 12:27:26 2026 by rpki-client