$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa File: dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa (raw, json) Hash identifier: LGtWgoS6RJu1PRzPw2XOI2C8dr3JFUjiuuCy4kLmrdo= Subject key identifier: 7C:F2:50:C4:7D:7E:E7:D9:5B:F1:60:8E:70:1D:5A:69:C5:CA:7B:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D71A51BFBB46FF42C4FB72300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 16625 IP address blocks: 173.222.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:1b:fb:b4:6f:f4:2c:4f:b7:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=7a50e45f-6f8c-4a6e-9d67-eb097bbb7a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:af:6b:8d:b2:6b:86:78:c3:b0:3d:63:31: 0f:79:80:f3:bf:27:a6:d3:68:76:09:90:e9:64:1b: c0:17:87:f8:c9:15:df:af:ad:e1:b9:54:6d:04:a1: 6e:82:cd:78:1d:49:cd:8a:2d:50:8a:16:0b:f4:4f: 81:dd:61:4c:1f:bd:27:ff:41:aa:c2:11:58:b8:02: 1e:b3:60:e4:d5:3d:c1:b3:8f:25:ef:ff:e5:48:05: a9:ec:eb:04:14:3e:17:69:75:f1:a3:d8:62:5f:49: 5a:b4:69:0a:0e:4c:ba:b4:cb:2d:b4:4c:c6:32:03: 7f:91:ac:87:7f:87:23:09:a4:3a:5d:a9:62:bd:a7: 6d:f2:cd:22:12:dd:02:7d:bf:81:d8:a0:c0:cd:66: 53:c2:43:65:5a:0f:1d:dc:2c:7c:11:f3:87:3a:a3: 27:96:67:c2:0b:53:d1:3e:e5:61:38:a6:b7:6a:8a: 41:c1:a6:45:55:43:b7:ff:9e:32:a2:5e:78:34:0c: 85:98:01:a9:da:9f:c9:5d:8f:d4:88:aa:fb:a7:34: b8:94:bd:de:dc:7b:11:b2:f4:c1:f7:b6:0f:78:9b: bd:0c:b2:b4:88:13:fa:9e:99:d1:20:97:52:75:84: da:65:30:4e:e4:6c:bd:dc:56:e1:e9:c2:80:f7:1f: c9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F2:50:C4:7D:7E:E7:D9:5B:F1:60:8E:70:1D:5A:69:C5:CA:7B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcf8b210-08ec-3460-9f7d-f91eee8b0320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b2:24:94:fb:05:8e:dc:f1:4a:9e:c3:01:1c:76:59:a5:17: 40:21:26:9d:52:69:dd:79:90:e9:3c:1e:b5:f5:c8:c6:33:bb: 0c:93:7a:a6:d3:f6:2b:06:23:d1:a6:ea:4a:d9:ca:68:83:3e: 26:4d:96:0c:29:5f:96:f9:c8:e0:ef:86:36:c1:79:9b:14:e8: ac:75:09:37:63:72:f2:80:8d:1a:71:69:1b:6b:5e:15:cd:aa: c3:e9:70:34:9c:e1:95:9c:a3:b9:78:cf:fb:e1:b4:8d:2d:76: d0:b0:1d:74:5d:da:53:cb:a4:00:9b:9c:48:c7:6d:02:bc:98: 8f:b8:4a:27:32:d2:1f:5c:45:b1:de:15:f2:b1:44:e4:6e:1c: 82:75:af:44:1a:3e:d6:9c:29:98:f0:1e:1d:14:a2:60:47:2c: cb:d9:62:53:e4:2f:ca:bc:e5:41:9d:34:dc:ef:19:17:8d:5c: bf:8d:d2:db:be:d3:d2:db:b2:3a:91:a2:8f:e6:8e:5f:df:7e: 10:6d:9f:75:84:e3:76:3a:ad:10:09:7c:02:ec:da:01:e3:94: 52:6c:f5:c9:c1:1d:0f:14:38:d7:0c:0b:4b:5d:21:75:be:d4: a6:bb:e3:d8:ad:c3:5e:3a:a9:a8:e0:14:22:fb:ef:db:25:d6: 27:ac:c6:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpRv7tG/0LE+3IwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk N2E1MGU0NWYtNmY4Yy00YTZlLTlkNjctZWIwOTdiYmI3YTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocSva42ya4Z4w7A9YzEPeYDzvyem02h2CZDp ZBvAF4f4yRXfr63huVRtBKFugs14HUnNii1QihYL9E+B3WFMH70n/0GqwhFYuAIe s2Dk1T3Bs48l7//lSAWp7OsEFD4XaXXxo9hiX0latGkKDky6tMsttEzGMgN/kayH f4cjCaQ6Xalivadt8s0iEt0Cfb+B2KDAzWZTwkNlWg8d3Cx8EfOHOqMnlmfCC1PR PuVhOKa3aopBwaZFVUO3/54yol54NAyFmAGp2p/JXY/UiKr7pzS4lL3e3HsRsvTB 97YPeJu9DLK0iBP6npnRIJdSdYTaZTBO5Gy93Fbh6cKA9x/J0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzyUMR9fufZW/FgjnAdWmnFynutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGNmOGIyMTAtMDhlYy0z NDYwLTlmN2QtZjkxZWVlOGIwMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeyJJT7BY7c8UqewwEcdlmlF0AhJp1Sad15kOk8HrX1yMYzuwyTeqbT 9isGI9Gm6krZymiDPiZNlgwpX5b5yODvhjbBeZsU6Kx1CTdjcvKAjRpxaRtrXhXN qsPpcDSc4ZWco7l4z/vhtI0tdtCwHXRd2lPLpACbnEjHbQK8mI+4Sicy0h9cRbHe FfKxRORuHIJ1r0QaPtacKZjwHh0UomBHLMvZYlPkL8q85UGdNNzvGReNXL+N0tu+ 09LbsjqRoo/mjl/ffhBtn3WE43Y6rRAJfALs2gHjlFJs9cnBHQ8UONcMC0tdIXW+ 1Ka749itw146qajgFCL779sl1iesxgE= -----END CERTIFICATE-----Generated at Fri Apr 17 12:42:58 2026 by rpki-client