$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa File: b343567e-a49e-3300-8a5b-72a22b6d70aa.roa (raw, json) Hash identifier: ccmp7Yn1fg9obcPbZYlVjbAElSbKQcORCbJF9pfFQTk= Subject key identifier: DE:F6:24:A8:DA:D8:0B:B4:2E:BA:4A:6C:7E:FC:24:EA:65:81:2C:48 Certificate issuer: /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Certificate serial: 010D0C9F4328584DE9B07D817A19D71379B67D80 Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 1239 IP address blocks: 172.84.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:7d:81:7a:19:d7:13:79:b6:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=d2627d9f-b46b-4e0f-b726-77b959eaea19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cd:aa:a9:d4:bb:e6:e7:a5:69:5c:1f:e5:59: d6:dc:af:e1:61:43:82:cd:63:bc:d5:31:89:b7:d5: 85:dc:2c:8b:fa:b2:81:d0:48:3c:fd:d0:aa:1f:c6: 79:ab:95:25:c7:f1:d6:83:aa:de:75:5b:ba:c0:45: 32:6f:9e:67:a3:91:fc:17:0c:d2:66:1a:a0:d1:39: 9b:e6:ad:57:5d:2f:8d:6a:6f:22:e1:af:ae:d2:c3: 6e:76:6a:bb:a5:7d:b9:88:2d:ac:d6:37:8d:d5:61: de:13:bf:e7:87:9e:f3:93:9c:99:6d:94:7d:d8:2a: bc:4b:2f:de:05:20:a0:7a:92:01:90:39:43:0c:43: 4e:3b:ec:5e:4b:c9:69:e1:c8:1f:d3:11:37:13:83: 67:4f:10:34:1d:ba:f5:2f:0e:93:00:61:7b:e4:8c: 7e:1f:f9:f2:e4:f5:34:bd:8c:41:27:28:82:f2:36: a6:05:5e:4a:1e:d2:97:3c:30:8d:c1:4e:ea:87:96: 9f:c1:f5:9a:0e:4d:98:68:50:71:d6:a8:6e:e3:47: 98:dc:4a:b7:40:12:7e:60:cd:d4:ad:27:9a:5f:fb: c5:9b:60:c1:80:0f:f3:e2:ae:cd:0b:18:2c:51:54: 78:26:b8:a4:dd:0c:eb:9d:0b:78:4d:02:8b:f1:cb: 08:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F6:24:A8:DA:D8:0B:B4:2E:BA:4A:6C:7E:FC:24:EA:65:81:2C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/b343567e-a49e-3300-8a5b-72a22b6d70aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl X509v3 Authority Key Identifier: keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer sbgp-ipAddrBlock: critical IPv4: 172.84.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:cc:b0:ba:7c:ee:6e:0f:45:89:c9:37:5b:38:8d:bc:14:d7: 78:e1:89:03:8c:ca:77:0f:39:40:03:f2:1d:cd:8b:47:04:b1: 8c:4e:b0:52:7f:ae:38:20:5d:3d:64:cc:16:6e:84:6e:06:9e: 04:9e:16:d0:1a:56:91:74:9d:4f:28:10:0d:bf:b0:25:5c:99: 60:80:6d:ec:9a:92:1d:21:22:d3:91:7f:b4:91:d5:68:98:16: 98:57:da:9f:ba:53:27:1e:5c:cd:ce:d3:3c:15:66:91:45:bb: 0a:2a:27:26:d3:4a:f8:d6:b7:f1:d1:e8:46:71:06:6a:87:06: c5:0b:08:8e:3e:0b:be:e2:33:39:87:83:96:7d:e8:86:a6:13: 01:5d:4e:3f:28:22:b6:f8:6f:d2:4d:c0:c2:7f:6e:17:82:ae: 0b:f8:2c:b4:40:1a:bb:b8:7d:b5:82:9a:47:d5:c6:4c:91:3a: 73:29:8c:c0:c6:c4:ba:fa:53:66:c8:c9:a4:90:0a:cc:09:27: 43:99:e9:2e:19:4d:b7:64:cb:77:93:82:bb:52:f5:bc:2b:1a: b8:71:08:06:d8:67:bb:c6:c2:ee:50:1b:78:e1:93:ff:63:e9: ff:5e:56:5b:16:57:5a:2a:b5:f0:f9:c4:c1:c2:67:b6:a7:3a: e1:37:a7:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psH2BehnXE3m2fYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw ZDcwMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZDI2MjdkOWYtYjQ2Yi00ZTBmLWI3MjYtNzdiOTU5ZWFlYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM2qqdS75uelaVwf5VnW3K/hYUOCzWO81TGJ t9WF3CyL+rKB0Eg8/dCqH8Z5q5Ulx/HWg6redVu6wEUyb55no5H8FwzSZhqg0Tmb 5q1XXS+Nam8i4a+u0sNudmq7pX25iC2s1jeN1WHeE7/nh57zk5yZbZR92Cq8Sy/e BSCgepIBkDlDDENOO+xeS8lp4cgf0xE3E4NnTxA0Hbr1Lw6TAGF75Ix+H/ny5PU0 vYxBJyiC8jamBV5KHtKXPDCNwU7qh5afwfWaDk2YaFBx1qhu40eY3Eq3QBJ+YM3U rSeaX/vFm2DBgA/z4q7NCxgsUVR4Jrik3QzrnQt4TQKL8csIJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN72JKja2Au0LrpKbH78JOplgSxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0 OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvYjM0MzU2N2UtYTQ5ZS0z MzAwLThhNWItNzJhMjJiNmQ3MGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1 MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFS9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfMsLp87m4PRYnJN1s4jbwU13jhiQOMyncPOUAD8h3Ni0cEsYxOsFJ/ rjggXT1kzBZuhG4GngSeFtAaVpF0nU8oEA2/sCVcmWCAbeyakh0hItORf7SR1WiY FphX2p+6UyceXM3O0zwVZpFFuwoqJybTSvjWt/HR6EZxBmqHBsULCI4+C77iMzmH g5Z96IamEwFdTj8oIrb4b9JNwMJ/bheCrgv4LLRAGru4fbWCmkfVxkyROnMpjMDG xLr6U2bIyaSQCswJJ0OZ6S4ZTbdky3eTgrtS9bwrGrhxCAbYZ7vGwu5QG3jhk/9j 6f9eVlsWV1oqtfD5xMHCZ7anOuE3p6k= -----END CERTIFICATE-----Generated at Thu May 28 14:20:39 2026 by rpki-client