$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f84086d6-22bd-327a-aac8-035a40250ae8.roa File: f84086d6-22bd-327a-aac8-035a40250ae8.roa (raw, json) Hash identifier: Gf2eT0ZO+frX5VO+Iqi/UEJG6B8TcprEjGObGmHxuHM= Subject key identifier: 2A:C0:6F:DB:85:D9:A5:C1:6E:63:36:75:70:9A:85:7D:68:7D:3D:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7A053882760CEBA7CEB16120 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f84086d6-22bd-327a-aac8-035a40250ae8.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 16625 IP address blocks: 184.24.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:38:82:76:0c:eb:a7:ce:b1:61:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=a91367a1-cb5c-4fdd-82b3-a12b8c9c83fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:da:77:30:12:9b:ba:ec:77:24:62:26:8f:6d: fa:b9:5c:2f:17:2f:87:69:59:72:2e:e3:fc:80:87: 63:02:f2:af:0f:f1:56:4c:f2:b9:be:0b:7b:4c:5d: 08:45:9e:a3:35:f0:19:89:e2:ea:2d:35:e6:88:bc: 23:8d:4b:fd:ee:06:10:36:8e:ea:62:2e:bf:23:3f: 1a:bf:9c:9f:5a:e1:37:05:a9:49:03:33:5e:4c:8a: 2f:e2:71:81:b0:92:ce:06:a5:e9:82:99:6b:49:40: 8d:25:7a:f1:85:ba:8a:03:39:a1:34:5c:11:71:8e: a1:83:c6:de:68:88:a9:75:2a:e2:b3:87:54:d0:e2: 50:a2:89:c9:2d:7e:4b:76:15:0c:4c:d3:44:34:21: ea:a3:49:18:0d:a5:85:86:df:00:6f:cf:58:6a:da: 6c:5a:d1:ee:f1:18:2a:7e:9b:77:2c:74:a5:ca:62: 2e:9c:ce:3e:36:d0:e5:9a:06:c3:55:68:be:6e:9e: c6:41:d6:a1:dc:bd:46:be:e8:01:74:ab:f9:76:80: cb:61:12:0f:b3:65:fa:ec:65:80:67:7d:70:3b:a4: fe:64:7b:68:bf:8f:65:d7:0a:a3:cc:70:08:b6:d7: 20:83:ae:18:34:95:72:65:95:81:4e:5d:56:8d:e2: ce:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:6F:DB:85:D9:A5:C1:6E:63:36:75:70:9A:85:7D:68:7D:3D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f84086d6-22bd-327a-aac8-035a40250ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.24.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:a8:f9:ab:6a:67:a6:9b:7b:e4:3f:c5:eb:72:a9:85:07:03: 69:d0:0d:83:8e:c0:75:5e:a5:6b:c9:ee:1b:ac:01:11:a8:46: d2:7a:6f:cb:c8:92:22:06:ce:ca:49:09:4c:84:13:fe:96:df: f3:37:ba:d8:43:55:39:a6:22:6c:c0:34:c1:48:b2:69:c2:d2: fe:e6:62:76:6d:ab:e2:28:f3:c3:4e:4d:a9:a6:f5:d2:9a:a3: 02:e6:20:c7:05:9a:52:c7:48:9b:2f:df:27:2c:89:84:35:8c: 9c:d1:12:82:e8:e8:0e:7e:d8:8c:fe:fa:70:05:6d:ac:ee:3f: 96:9d:c9:ac:f5:f7:32:91:0e:c4:76:8c:f2:f0:a6:fe:49:4d: 39:84:54:d9:19:b1:25:ec:bf:ae:8f:be:2a:db:59:cd:1d:2b: 80:e7:36:d2:ba:f2:7b:83:cd:2f:d1:f2:9c:26:fd:b5:43:32: 48:45:96:99:37:72:49:d4:59:6f:b7:08:94:07:e9:51:c5:1d: d6:7d:93:a3:63:42:dd:f6:4e:55:ec:a8:bf:1c:17:e8:3f:af: 93:e3:60:0e:02:aa:11:05:07:8f:c7:88:57:97:05:c4:29:aa: d2:95:64:05:91:49:9a:1e:e4:24:b4:96:ea:ec:2e:9a:f2:45: d7:b0:f6:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTiCdgzrp86xYSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YTkxMzY3YTEtY2I1Yy00ZmRkLTgyYjMtYTEyYjhjOWM4M2ZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9p3MBKbuux3JGImj236uVwvFy+HaVlyLuP8 gIdjAvKvD/FWTPK5vgt7TF0IRZ6jNfAZieLqLTXmiLwjjUv97gYQNo7qYi6/Iz8a v5yfWuE3BalJAzNeTIov4nGBsJLOBqXpgplrSUCNJXrxhbqKAzmhNFwRcY6hg8be aIipdSris4dU0OJQoonJLX5LdhUMTNNENCHqo0kYDaWFht8Ab89YatpsWtHu8Rgq fpt3LHSlymIunM4+NtDlmgbDVWi+bp7GQdah3L1GvugBdKv5doDLYRIPs2X67GWA Z31wO6T+ZHtov49l1wqjzHAIttcgg64YNJVyZZWBTl1WjeLO9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrAb9uF2aXBbmM2dXCahX1ofT3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjg0MDg2ZDYtMjJiZC0z MjdhLWFhYzgtMDM1YTQwMjUwYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuBjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICo+atqZ6abe+Q/xetyqYUHA2nQDYOOwHVepWvJ7husARGoRtJ6b8vI kiIGzspJCUyEE/6W3/M3uthDVTmmImzANMFIsmnC0v7mYnZtq+Io88NOTamm9dKa owLmIMcFmlLHSJsv3ycsiYQ1jJzREoLo6A5+2Iz++nAFbazuP5adyaz19zKRDsR2 jPLwpv5JTTmEVNkZsSXsv66PvirbWc0dK4DnNtK68nuDzS/R8pwm/bVDMkhFlpk3 cknUWW+3CJQH6VHFHdZ9k6NjQt32TlXsqL8cF+g/r5PjYA4CqhEFB4/HiFeXBcQp qtKVZAWRSZoe5CS0lursLpryRdew9jI= -----END CERTIFICATE-----Generated at Fri Apr 17 16:46:58 2026 by rpki-client