$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa File: e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa (raw, json) Hash identifier: lPpLjTiUYrzAwgCPV5bdG2XPSLfx/u04HVRbVzWw7JY= Subject key identifier: DE:D0:41:BD:98:D3:97:F9:23:CA:53:9B:61:7D:07:DE:B3:F7:64:A8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C751C32CCF79EC29131857B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa Signing time: Thu 08 Jan 2026 14:00:39 +0000 ROA not before: Thu 08 Jan 2026 14:00:39 +0000 ROA not after: Wed 08 Apr 2026 13:00:39 +0000 asID: 36183 IP address blocks: 172.224.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:75:1c:32:cc:f7:9e:c2:91:31:85:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 8 14:00:39 2026 GMT Not After : Apr 8 13:00:39 2026 GMT Subject: CN=b549d27d-752d-424b-97f7-03113fa020f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:46:d4:fe:cc:53:84:37:83:da:c2:d9:24:2d: 15:26:71:76:ee:1c:6d:7b:4e:73:6e:23:bc:2c:2c: bb:7d:2c:79:be:9c:0e:79:37:e5:58:5b:7f:9a:fc: bd:73:12:82:98:cc:ad:ff:a0:1c:68:91:b5:dd:f7: 92:7a:56:0f:7a:58:09:84:a4:91:18:60:95:4c:84: 84:52:99:8d:3c:f0:61:38:25:65:d2:41:08:f8:ed: f9:3e:14:e3:01:41:8f:a6:72:ca:a8:8b:e6:f7:e6: ee:cb:4d:0d:e3:b6:5a:f6:59:5f:b2:a3:86:f6:cc: ff:b9:aa:b0:27:96:bd:e8:b1:85:78:ab:95:30:55: 3e:ae:f8:92:1c:a6:23:d6:10:1d:ca:3e:11:64:16: 97:30:25:48:fa:22:3a:d6:2a:d1:ea:01:54:c6:3b: 99:f3:3a:19:ee:a0:fb:f6:ed:f8:19:f3:90:51:32: c7:97:f3:5f:46:77:28:de:a8:ed:20:9c:c2:01:3e: 24:11:7a:7b:83:6f:ae:fa:12:75:50:5f:97:34:59: a4:5f:10:32:c0:c7:e9:5c:cc:23:bc:0e:11:33:b4: 01:e7:aa:77:0d:c0:05:3f:37:e2:7e:61:12:d0:bf: 34:9a:0b:74:b9:25:eb:b4:49:a3:a3:90:0b:51:97: 6c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D0:41:BD:98:D3:97:F9:23:CA:53:9B:61:7D:07:DE:B3:F7:64:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e47915f2-6a53-3edf-8bc4-a6f4db5d93ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:6a:aa:3d:ae:5a:a0:9a:53:c5:21:0a:72:ec:7e:aa:0b:7a: ca:e3:a7:43:2b:0b:ad:3b:97:e1:65:9a:87:72:17:8e:f2:9a: ce:97:1e:23:14:0e:ad:4b:74:37:90:50:5c:0f:d6:70:d3:4d: e1:5b:f8:c5:05:fc:78:e8:2c:79:99:50:e4:d4:34:37:79:7f: 22:09:f4:85:6e:6f:e7:10:a1:eb:bb:ec:1b:37:2f:ff:58:c2: 4d:82:85:08:f7:12:f7:46:0b:46:ca:22:ce:01:c3:92:3b:33: c1:49:89:65:47:ad:f7:e1:4a:d7:f9:0c:f6:e6:47:45:57:1b: f2:8d:89:df:6e:01:03:7c:c6:3c:2b:10:cc:6e:c6:33:6b:68: 38:39:d3:83:d8:7a:25:62:5f:99:bc:5f:f5:0c:f7:ad:78:e8: dd:2c:d5:78:5c:1d:80:9f:08:16:7f:d4:26:c6:17:14:52:3b: db:3c:93:5d:56:9b:69:d9:ea:a5:d4:71:0e:32:3c:d1:51:b3: cf:ea:0a:58:c6:3d:3b:98:99:c6:d6:a5:81:f9:6e:c8:73:ac: 10:01:e0:92:16:a3:66:09:64:ed:ab:73:43:88:d8:67:ee:19: ce:8b:b0:3c:46:af:24:aa:b2:74:4b:bd:c1:4e:07:cb:ad:35: 51:f2:34:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEx1HDLM957CkTGFewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk YjU0OWQyN2QtNzUyZC00MjRiLTk3ZjctMDMxMTNmYTAyMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0bU/sxThDeD2sLZJC0VJnF27hxte05zbiO8 LCy7fSx5vpwOeTflWFt/mvy9cxKCmMyt/6AcaJG13feSelYPelgJhKSRGGCVTISE UpmNPPBhOCVl0kEI+O35PhTjAUGPpnLKqIvm9+buy00N47Za9llfsqOG9sz/uaqw J5a96LGFeKuVMFU+rviSHKYj1hAdyj4RZBaXMCVI+iI61irR6gFUxjuZ8zoZ7qD7 9u34GfOQUTLHl/NfRnco3qjtIJzCAT4kEXp7g2+u+hJ1UF+XNFmkXxAywMfpXMwj vA4RM7QB56p3DcAFPzfifmES0L80mgt0uSXrtEmjo5ALUZds2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7QQb2Y05f5I8pTm2F9B96z92SoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ3OTE1ZjItNmE1My0z ZWRmLThiYzQtYTZmNGRiNWQ5M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJqqj2uWqCaU8UhCnLsfqoLesrjp0MrC607l+FlmodyF47yms6XHiMU Dq1LdDeQUFwP1nDTTeFb+MUF/HjoLHmZUOTUNDd5fyIJ9IVub+cQoeu77Bs3L/9Y wk2ChQj3EvdGC0bKIs4Bw5I7M8FJiWVHrffhStf5DPbmR0VXG/KNid9uAQN8xjwr EMxuxjNraDg504PYeiViX5m8X/UM96146N0s1XhcHYCfCBZ/1CbGFxRSO9s8k11W m2nZ6qXUcQ4yPNFRs8/qCljGPTuYmcbWpYH5bshzrBAB4JIWo2YJZO2rc0OI2Gfu Gc6LsDxGrySqsnRLvcFOB8utNVHyNAo= -----END CERTIFICATE-----Generated at Mon Mar 2 02:38:14 2026 by rpki-client