$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd8aa4a5-0666-371a-b61a-d1e70146c2b3.roa File: dd8aa4a5-0666-371a-b61a-d1e70146c2b3.roa (raw, json) Hash identifier: dNWSrXj0WzjpelTwqgS7okNSKug6Abb3JoIsivCaLhQ= Subject key identifier: F7:22:69:56:1F:1B:77:5E:D5:23:2F:56:89:88:24:05:C9:2E:DC:C0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D59EA7DE84A6F95CB57BB6B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd8aa4a5-0666-371a-b61a-d1e70146c2b3.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 36183 IP address blocks: 172.224.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:7d:e8:4a:6f:95:cb:57:bb:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=62aaf1a7-f124-4da4-8dac-be962286cbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:9c:9a:24:65:db:65:1b:07:31:94:dd:da: 6e:3a:d8:be:85:5f:e4:39:a5:bf:75:17:e2:9c:f8: 33:d7:23:d3:67:4b:9e:89:a3:ff:7b:75:aa:d6:bd: 3a:8a:81:fe:d4:05:8f:76:c2:01:80:b7:d6:df:ba: 98:6a:01:e9:23:33:c3:d7:9b:15:4f:fa:5b:95:c4: f7:ba:08:7a:4f:43:e1:6b:71:6e:58:b3:d3:b3:43: dc:62:7a:77:9c:2f:8d:91:ee:7c:26:86:ca:aa:7e: 97:7c:28:12:28:f8:fe:7d:39:30:f3:20:b6:d4:71: 15:0e:c7:6a:06:7e:47:cd:f0:86:f0:be:78:d7:44: 04:83:b3:8c:96:10:ae:62:73:f9:e3:9a:30:dc:0b: 3b:2a:8c:85:b0:ef:97:4f:76:cc:c8:bd:12:34:a1: b8:43:90:2d:1b:be:e7:f6:28:45:43:66:32:34:86: 3f:22:6f:bd:60:aa:a4:f4:f5:b3:5e:ad:f9:0e:07: da:a3:21:ed:d3:bc:3e:0a:3c:9d:87:15:f3:5d:a8: 08:95:98:ab:ea:95:4e:ec:a5:f3:e7:57:11:75:5d: 85:a5:07:ed:67:e8:ab:15:c5:a8:d9:a5:0a:3d:9f: a3:47:96:7e:84:09:09:64:81:6d:86:67:8f:11:5d: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:22:69:56:1F:1B:77:5E:D5:23:2F:56:89:88:24:05:C9:2E:DC:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd8aa4a5-0666-371a-b61a-d1e70146c2b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:5e:de:40:a9:78:06:e4:b4:2e:99:66:f2:3d:c9:94:26:d6: ba:b2:45:39:f2:89:b5:78:42:ab:b4:fa:6d:8a:b2:1a:ba:4f: 6f:26:19:d3:85:46:82:59:8c:c7:65:e4:f5:b4:70:9c:c1:30: 12:77:eb:f5:f0:dc:c2:fd:be:c3:3e:08:bf:78:84:49:58:53: 5e:1a:b1:f8:f5:2e:57:cf:e8:33:f7:3a:c0:be:6f:bd:46:e8: d6:5b:d4:16:8c:5b:df:51:2d:7f:e8:91:b4:a2:a6:70:c5:0d: 20:d5:38:53:b8:54:07:aa:55:0a:ac:dc:bb:06:e5:0f:fb:00: be:02:c7:ac:7e:43:56:ae:0a:08:3f:60:7c:b8:7c:60:a0:f4: 3e:5b:0b:86:c8:17:9f:ae:42:0c:f6:01:f0:79:0a:cd:b6:cc: c6:24:55:64:62:7b:a6:10:a6:91:8c:30:93:97:4b:e7:72:45: e0:da:22:72:e0:7f:c5:8c:79:b5:de:3c:0d:39:1e:38:48:66: c5:ab:0f:b6:ce:6f:12:83:b3:05:e7:2f:b7:a5:09:3b:38:bd: 64:1c:8a:70:37:95:bd:cb:90:bb:a3:ba:d9:a2:70:74:48:8e: 95:11:e3:69:fa:81:b4:c4:c8:66:20:6e:bc:ed:d6:a8:c9:2e: 9d:b1:96:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6n3oSm+Vy1e7awAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NjJhYWYxYTctZjEyNC00ZGE0LThkYWMtYmU5NjIyODZjYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rOcmiRl22UbBzGU3dpuOti+hV/kOaW/dRfi nPgz1yPTZ0ueiaP/e3Wq1r06ioH+1AWPdsIBgLfW37qYagHpIzPD15sVT/pblcT3 ugh6T0Pha3FuWLPTs0PcYnp3nC+Nke58JobKqn6XfCgSKPj+fTkw8yC21HEVDsdq Bn5HzfCG8L5410QEg7OMlhCuYnP545ow3As7KoyFsO+XT3bMyL0SNKG4Q5AtG77n 9ihFQ2YyNIY/Im+9YKqk9PWzXq35DgfaoyHt07w+CjydhxXzXagIlZir6pVO7KXz 51cRdV2FpQftZ+irFcWo2aUKPZ+jR5Z+hAkJZIFthmePEV1EdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPciaVYfG3de1SMvVomIJAXJLtzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGQ4YWE0YTUtMDY2Ni0z NzFhLWI2MWEtZDFlNzAxNDZjMmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpe3kCpeAbktC6ZZvI9yZQm1rqyRTnyibV4Qqu0+m2Kshq6T28mGdOF RoJZjMdl5PW0cJzBMBJ36/Xw3ML9vsM+CL94hElYU14asfj1LlfP6DP3OsC+b71G 6NZb1BaMW99RLX/okbSipnDFDSDVOFO4VAeqVQqs3LsG5Q/7AL4Cx6x+Q1auCgg/ YHy4fGCg9D5bC4bIF5+uQgz2AfB5Cs22zMYkVWRie6YQppGMMJOXS+dyReDaInLg f8WMebXePA05HjhIZsWrD7bObxKDswXnL7elCTs4vWQcinA3lb3LkLujutmicHRI jpUR42n6gbTEyGYgbrzt1qjJLp2xlv4= -----END CERTIFICATE-----Generated at Fri Apr 17 12:15:52 2026 by rpki-client