$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e08262c9-f5df-328d-9b79-83b5f044e0d8.roa File: e08262c9-f5df-328d-9b79-83b5f044e0d8.roa (raw, json) Hash identifier: lrZF8ovOP6izbJE/pspA8hYHsdbRg2IQb/XpE4Cc8s8= Subject key identifier: FE:A2:0E:14:19:5D:D0:78:84:25:CB:EA:21:8A:A6:44:80:9A:42:A0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D59EA7D9814FBA9A86FCEE900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e08262c9-f5df-328d-9b79-83b5f044e0d8.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 36183 IP address blocks: 172.224.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:7d:98:14:fb:a9:a8:6f:ce:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=781b0446-b26d-4666-8a1d-c2510f4cd8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:f6:17:b9:16:79:a3:b0:57:de:79:f5:1f: f9:5c:86:c7:93:f3:71:8a:d0:8e:a1:94:1d:37:86: d4:5a:c5:13:fc:57:c8:04:4c:0e:37:22:7e:06:6e: 68:9b:41:e7:e9:e7:d0:40:f0:3d:86:cf:ba:8c:1f: 9e:d0:2f:b3:49:ed:bf:1c:63:9c:2e:10:0d:1d:b9: b8:8a:6d:e2:c0:9b:2c:4a:2a:bc:ee:e4:e2:53:f7: 2e:33:0c:b1:85:57:2c:26:52:c7:06:3e:9b:1f:d8: 7f:6a:6d:e3:84:68:f4:ba:94:7b:fc:7e:9a:17:1c: 67:5b:fb:62:06:1d:50:a2:42:87:21:60:bd:20:7d: 02:34:e8:ed:bc:76:d5:73:34:ef:23:c1:b2:0f:e1: dc:05:35:09:45:e8:5a:ba:d7:a8:b0:24:62:5c:94: 16:67:bc:b4:e2:df:f6:b1:33:2c:e9:a6:67:56:15: 44:92:06:d2:3d:04:32:63:f9:62:1f:89:53:82:91: cc:e9:2c:65:86:70:0b:64:ee:77:c8:d2:73:4b:49: a7:87:c7:c0:74:4b:83:03:e9:08:bc:13:9c:07:1c: 46:e5:44:0f:48:f2:f3:21:2e:e5:90:ed:8a:8f:b0: 26:dd:a7:8c:bd:6e:c8:48:a7:8f:ac:e0:41:17:0f: 8c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A2:0E:14:19:5D:D0:78:84:25:CB:EA:21:8A:A6:44:80:9A:42:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e08262c9-f5df-328d-9b79-83b5f044e0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:43:fa:5d:73:3b:b8:57:ad:e9:1a:a7:50:68:46:00:2b:6d: d0:e2:6a:e8:28:7b:27:55:7a:59:0e:b7:c9:c2:ce:87:14:0e: 63:f8:14:fa:70:16:46:e7:0a:26:1b:40:b0:2c:6f:42:be:ce: 05:37:7a:58:cf:59:52:ca:4a:37:9e:fd:d3:ae:5c:e4:f7:7f: cc:ea:24:ff:c4:66:f8:7a:5d:97:29:02:74:61:80:e4:5e:29: 74:2c:0c:5f:cd:46:b3:14:20:16:b5:a8:e8:74:1e:e0:d4:07: f8:75:f9:e8:2b:04:51:68:0a:80:43:2f:bc:a5:7a:e6:0d:ec: 97:4f:80:fd:f1:4e:93:12:e0:46:ca:ee:e8:15:1f:55:dc:5f: 16:98:c8:77:44:e1:5c:bb:35:4a:27:04:c6:42:0c:6e:67:3e: 67:18:c7:19:38:1f:36:85:dd:66:64:9b:5f:f4:67:21:2c:ef: fe:d1:ff:73:a3:63:f2:da:1c:0a:18:23:69:f6:c2:54:91:af: 09:18:cd:de:7b:e3:90:46:97:f8:19:24:19:d1:ff:36:43:73: c5:d3:05:76:07:65:32:3f:3e:f1:54:c4:74:7e:67:82:5e:18: cf:f4:5f:95:69:1d:74:be:c7:57:3b:33:f1:13:97:60:bc:a0: 1c:9c:46:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6n2YFPupqG/O6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzgxYjA0NDYtYjI2ZC00NjY2LThhMWQtYzI1MTBmNGNkOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2j2F7kWeaOwV9559R/5XIbHk/NxitCOoZQd N4bUWsUT/FfIBEwONyJ+Bm5om0Hn6efQQPA9hs+6jB+e0C+zSe2/HGOcLhANHbm4 im3iwJssSiq87uTiU/cuMwyxhVcsJlLHBj6bH9h/am3jhGj0upR7/H6aFxxnW/ti Bh1QokKHIWC9IH0CNOjtvHbVczTvI8GyD+HcBTUJRehauteosCRiXJQWZ7y04t/2 sTMs6aZnVhVEkgbSPQQyY/liH4lTgpHM6SxlhnALZO53yNJzS0mnh8fAdEuDA+kI vBOcBxxG5UQPSPLzIS7lkO2Kj7Am3aeMvW7ISKePrOBBFw+MpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6iDhQZXdB4hCXL6iGKpkSAmkKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTA4MjYyYzktZjVkZi0z MjhkLTliNzktODNiNWYwNDRlMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVD+l1zO7hXrekap1BoRgArbdDiaugoeydVelkOt8nCzocUDmP4FPpw FkbnCiYbQLAsb0K+zgU3eljPWVLKSjee/dOuXOT3f8zqJP/EZvh6XZcpAnRhgORe KXQsDF/NRrMUIBa1qOh0HuDUB/h1+egrBFFoCoBDL7yleuYN7JdPgP3xTpMS4EbK 7ugVH1XcXxaYyHdE4Vy7NUonBMZCDG5nPmcYxxk4HzaF3WZkm1/0ZyEs7/7R/3Oj Y/LaHAoYI2n2wlSRrwkYzd5745BGl/gZJBnR/zZDc8XTBXYHZTI/PvFUxHR+Z4Je GM/0X5VpHXS+x1c7M/ETl2C8oBycRqs= -----END CERTIFICATE-----Generated at Fri Apr 17 13:23:49 2026 by rpki-client