$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa File: de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa (raw, json) Hash identifier: GYSzLcuFM343rmqoYrNmyptRBEYN1TtQ4MaA0lOD9+g= Subject key identifier: 32:D2:82:60:1B:50:6F:B5:61:14:59:BA:6B:B8:3C:C8:4C:8A:C5:DD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C7681816A92A1A72EF90AB000 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa Signing time: Fri 09 Jan 2026 02:00:31 +0000 ROA not before: Fri 09 Jan 2026 02:00:31 +0000 ROA not after: Thu 09 Apr 2026 01:00:31 +0000 asID: 36183 IP address blocks: 172.224.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:76:81:81:6a:92:a1:a7:2e:f9:0a:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 9 02:00:31 2026 GMT Not After : Apr 9 01:00:31 2026 GMT Subject: CN=5cd8b0ab-dc5b-4fa5-a6dd-4e4283cc7ae8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:db:86:54:58:c3:f5:58:b1:f8:e1:bc:26: 29:84:92:b4:45:d1:d6:b0:74:33:7f:eb:12:8b:de: 5f:da:88:06:f6:e9:c1:42:b8:f6:0b:45:73:15:9d: b8:6e:69:47:01:85:cf:38:b1:10:76:63:03:16:8e: a2:48:07:4e:b4:55:f3:18:0b:ca:3f:a6:92:91:14: 48:9b:85:29:36:18:06:8f:69:f2:51:6e:23:9e:24: 3b:e3:6f:6b:a4:3e:dd:e2:84:91:d9:78:a6:af:b3: 71:69:6f:71:02:eb:79:3c:05:c4:8e:2a:6b:bd:75: 6d:b6:a4:f3:0d:f7:34:78:4d:aa:b5:a0:53:c8:03: 52:99:f8:5f:d1:44:a4:22:71:3b:45:3a:c9:27:4d: be:93:e0:25:3c:56:f0:8b:df:73:89:3d:4b:8b:b5: 58:d1:45:14:36:0c:9d:c7:cb:a2:b7:0a:5a:d6:f0: a1:92:4e:fc:d2:06:fb:8a:23:a6:c2:f2:ca:42:7c: b2:22:d8:7b:39:09:7c:4d:31:c0:37:db:fb:34:a2: f4:36:9a:2f:36:28:10:c1:32:bf:40:ed:3a:82:59: 71:e3:19:17:88:f4:0f:91:38:3f:9f:3f:00:3b:ac: e0:fc:ee:c1:0b:23:27:1a:72:64:a0:b4:5a:a8:d4: 7d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D2:82:60:1B:50:6F:B5:61:14:59:BA:6B:B8:3C:C8:4C:8A:C5:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de33e11b-3b44-35e1-a0b2-dd0afd7ee4ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cc:bf:ff:4f:09:4e:ee:61:06:75:a1:87:c9:71:f2:27:cc: ad:9e:15:3c:7b:7a:67:45:3c:9f:4d:62:66:b9:2e:62:cf:c4: 85:06:0f:ee:97:ca:c8:a9:2c:7b:b8:a8:81:5c:ce:8e:84:e6: 9d:61:29:6c:c1:2e:4a:ad:a9:41:81:f9:92:1e:93:9d:c5:f8: 1c:10:a1:84:af:29:fc:46:29:03:55:67:2f:d7:0d:43:a4:4e: eb:11:20:73:2b:c5:fa:11:c4:ea:29:93:98:d7:b3:1f:04:5f: 38:ff:49:88:43:24:ac:e1:3c:d8:b2:4e:1a:ab:50:22:28:fe: d1:60:32:61:1a:ab:48:af:68:e3:97:9e:50:c0:de:d7:a0:0a: c3:a7:8c:7f:26:d4:a5:16:cb:90:fa:0f:1b:d2:19:53:ee:de: df:04:61:ee:22:7c:6d:2d:6c:6f:38:af:9a:01:49:bc:46:43: 6d:07:51:ac:b3:5d:8e:de:aa:79:05:d1:67:da:62:b2:77:a0: 03:a2:a7:f0:9b:a5:b4:45:bb:4b:50:1e:3b:56:e4:15:fa:f1: 23:6c:f6:27:61:0f:7e:5f:a4:ef:dc:f8:5d:af:64:2e:55:6e: 46:fa:d6:cc:1e:5b:c2:88:af:3e:06:8c:31:cc:cf:05:e1:a0: 70:94:cb:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx2gYFqkqGnLvkKsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwOTAyMDAzMVoXDTI2MDQwOTAxMDAzMVowLzEtMCsGA1UEAxMk NWNkOGIwYWItZGM1Yi00ZmE1LWE2ZGQtNGU0MjgzY2M3YWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTHbhlRYw/VYsfjhvCYphJK0RdHWsHQzf+sS i95f2ogG9unBQrj2C0VzFZ24bmlHAYXPOLEQdmMDFo6iSAdOtFXzGAvKP6aSkRRI m4UpNhgGj2nyUW4jniQ7429rpD7d4oSR2Ximr7NxaW9xAut5PAXEjiprvXVttqTz Dfc0eE2qtaBTyANSmfhf0USkInE7RTrJJ02+k+AlPFbwi99ziT1Li7VY0UUUNgyd x8uitwpa1vChkk780gb7iiOmwvLKQnyyIth7OQl8TTHAN9v7NKL0NpovNigQwTK/ QO06gllx4xkXiPQPkTg/nz8AO6zg/O7BCyMnGnJkoLRaqNR9PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLSgmAbUG+1YRRZumu4PMhMisXdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGUzM2UxMWItM2I0NC0z NWUxLWEwYjItZGQwYWZkN2VlNGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHMv/9PCU7uYQZ1oYfJcfInzK2eFTx7emdFPJ9NYma5LmLPxIUGD+6X ysipLHu4qIFczo6E5p1hKWzBLkqtqUGB+ZIek53F+BwQoYSvKfxGKQNVZy/XDUOk TusRIHMrxfoRxOopk5jXsx8EXzj/SYhDJKzhPNiyThqrUCIo/tFgMmEaq0ivaOOX nlDA3tegCsOnjH8m1KUWy5D6DxvSGVPu3t8EYe4ifG0tbG84r5oBSbxGQ20HUayz XY7eqnkF0WfaYrJ3oAOip/CbpbRFu0tQHjtW5BX68SNs9idhD35fpO/c+F2vZC5V bkb61sweW8KIrz4GjDHMzwXhoHCUyzQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:44:32 2026 by rpki-client