$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa File: 1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa (raw, json) Hash identifier: 3VXAP5cdMWvCN3foQPGH60wOB5Qyf6NfOQBlST4YhIw= Subject key identifier: 60:C5:C3:E9:04:AD:20:69:56:92:A2:3E:E4:95:52:4F:40:D1:7E:9B Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584EA5AA718B0FA373AC61935240 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa Signing time: Tue 28 Jul 2026 09:00:11 +0000 ROA not before: Tue 28 Jul 2026 09:00:11 +0000 ROA not after: Mon 26 Oct 2026 09:00:11 +0000 asID: 14618 IP address blocks: 172.86.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a5:aa:71:8b:0f:a3:73:ac:61:93:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Jul 28 09:00:11 2026 GMT Not After : Oct 26 09:00:11 2026 GMT Subject: CN=d1f1c7a7-2ad0-47ba-9a73-a47a975b0d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:52:a1:9c:60:1f:54:ae:2b:72:b5:24:2c:ea: b5:cd:c8:c0:59:fb:f0:a0:f2:3d:6f:85:e9:a1:67: f3:14:14:23:81:63:e9:cf:51:8f:76:ed:21:af:be: 46:37:92:be:4e:32:1e:70:85:b8:f2:50:d9:a1:3d: f5:9d:f0:ac:0c:5e:61:8f:b8:77:96:0e:ef:22:90: 31:42:81:f4:14:73:9f:4f:34:cd:06:e2:5e:07:50: 69:19:3b:99:2d:91:af:d9:a4:b4:5d:ca:1a:00:66: 67:fb:bf:0f:65:af:10:b7:3f:bd:61:a4:ff:66:97: 3d:a8:9d:ce:72:f5:44:e5:b3:48:be:f2:a8:3d:61: 79:4e:cd:17:8e:7d:f2:ec:98:cd:28:91:61:9f:c5: bb:3d:cb:89:a5:f7:69:40:0e:89:f5:61:fc:02:ce: e3:77:c5:02:45:45:2c:a3:01:81:b4:36:d1:6b:97: 86:05:c9:8c:b8:8a:4c:cf:36:ac:55:0e:07:0c:cf: f3:e0:4b:d4:31:be:92:24:88:43:12:81:27:58:cf: d7:9e:33:5d:93:76:0f:6c:55:b3:d3:59:fb:aa:3d: e0:86:77:a2:4f:49:ea:1a:81:ee:fa:02:9d:5e:c5: df:90:95:43:34:cb:03:55:ca:fe:47:2f:82:6e:ce: 05:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C5:C3:E9:04:AD:20:69:56:92:A2:3E:E4:95:52:4F:40:D1:7E:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:53:58:7b:b4:a0:57:93:a8:52:a0:69:3e:ba:84:ef:25:4c: 66:0b:fa:45:7d:3e:69:c7:e5:76:e5:f4:8c:92:43:d8:03:40: 49:8f:71:a6:de:95:11:ca:49:02:b7:fa:6e:cf:ce:60:1a:a8: a2:96:f8:9e:03:46:49:0a:37:5b:d6:88:ac:2e:a3:9d:eb:e0: ad:e1:02:0c:32:c4:5a:63:63:50:c8:78:f6:9d:9f:96:22:0c: 8b:36:51:6b:c4:d6:8e:90:24:00:94:85:e2:63:ce:a3:25:2c: 51:21:10:99:12:7e:95:c5:37:84:9b:f0:13:c9:0f:69:8e:06: b7:94:59:ba:80:3e:d7:24:c6:b4:db:8e:14:c2:f9:d7:7e:b3: 3f:9c:46:fc:71:04:43:69:02:2f:1a:41:f8:13:1d:91:c1:00: 7d:c6:f0:31:34:42:f7:40:af:c0:95:44:46:21:0c:de:0a:fe: 4b:93:9b:7b:39:e3:f2:d9:83:8a:6d:f5:34:08:9f:4f:af:c1: a8:8e:21:02:4b:4c:10:f6:db:25:65:d3:f3:69:60:19:22:6d: 94:8b:cd:46:fc:3d:11:1a:03:26:d1:f3:be:61:3b:72:a5:da: 0e:01:8b:96:78:a8:73:b2:8d:b4:d2:23:7c:df:68:e5:65:bc: c1:38:19:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6lqnGLD6NzrGGTUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI2MDcyODA5MDAxMVoXDTI2MTAyNjA5MDAxMVowLzEtMCsGA1UEAxMk ZDFmMWM3YTctMmFkMC00N2JhLTlhNzMtYTQ3YTk3NWIwZDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFKhnGAfVK4rcrUkLOq1zcjAWfvwoPI9b4Xp oWfzFBQjgWPpz1GPdu0hr75GN5K+TjIecIW48lDZoT31nfCsDF5hj7h3lg7vIpAx QoH0FHOfTzTNBuJeB1BpGTuZLZGv2aS0XcoaAGZn+78PZa8Qtz+9YaT/Zpc9qJ3O cvVE5bNIvvKoPWF5Ts0Xjn3y7JjNKJFhn8W7PcuJpfdpQA6J9WH8As7jd8UCRUUs owGBtDbRa5eGBcmMuIpMzzasVQ4HDM/z4EvUMb6SJIhDEoEnWM/XnjNdk3YPbFWz 01n7qj3ghneiT0nqGoHu+gKdXsXfkJVDNMsDVcr+Ry+Cbs4FFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDFw+kErSBpVpKiPuSVUk9A0X6bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvMWRlN2UyMWItN2FmMy0z ZTg0LTg5ZWUtM2JjNzNkMGRlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlTWHu0oFeTqFKgaT66hO8lTGYL+kV9PmnH5Xbl9IySQ9gDQEmPcabe lRHKSQK3+m7PzmAaqKKW+J4DRkkKN1vWiKwuo53r4K3hAgwyxFpjY1DIePadn5Yi DIs2UWvE1o6QJACUheJjzqMlLFEhEJkSfpXFN4Sb8BPJD2mOBreUWbqAPtckxrTb jhTC+dd+sz+cRvxxBENpAi8aQfgTHZHBAH3G8DE0QvdAr8CVREYhDN4K/kuTm3s5 4/LZg4pt9TQIn0+vwaiOIQJLTBD22yVl0/NpYBkibZSLzUb8PREaAybR875hO3Kl 2g4Bi5Z4qHOyjbTSI3zfaOVlvME4GeA= -----END CERTIFICATE-----Generated at Tue Jul 28 20:18:33 2026 by rpki-client