$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/146d3cc6-9f76-3286-978a-96dc9b9c6eae.roa File: 146d3cc6-9f76-3286-978a-96dc9b9c6eae.roa (raw, json) Hash identifier: rhg68tqqXxm7t4/1vZpNZv7ryL0D24qRG6loIWdFowA= Subject key identifier: 61:3A:29:F6:41:77:D5:DC:D2:FB:82:9C:F3:1D:4E:9F:D8:AC:63:86 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E376482A6080F0BC3740FAB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/146d3cc6-9f76-3286-978a-96dc9b9c6eae.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 36183 IP address blocks: 172.224.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:82:a6:08:0f:0b:c3:74:0f:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=41400031-d892-49b1-a22a-734a45e9b476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:c1:2e:62:0b:94:c3:60:4f:70:34:35:1c: 15:8c:00:5a:7f:d5:e8:6c:cd:a8:22:2b:1e:31:7f: 0a:31:80:1c:cc:27:c0:ef:f9:eb:9f:e9:c4:dc:34: e4:7f:77:31:16:89:31:30:1c:4c:e2:2b:41:70:2e: ef:64:be:f7:d0:19:26:5c:93:c5:e0:17:88:c0:9d: 38:5f:4e:ee:17:ff:8e:ab:60:e5:50:cc:ea:89:70: 16:a3:ba:26:21:5b:cc:97:03:bc:2f:de:22:d8:2d: 71:97:00:71:64:c7:99:3b:fb:9e:9a:0d:79:4d:20: b7:ab:e3:88:e4:aa:56:df:3e:09:f2:1c:13:30:7b: ad:29:81:b3:4e:57:66:a8:25:41:40:85:5a:ba:14: d4:e3:6d:9c:29:4e:12:6c:3d:32:c8:a1:cc:03:fd: 0c:86:f5:a6:a4:42:ad:52:30:dd:35:42:32:e3:1c: 9b:93:7b:e0:85:50:47:ab:86:28:3e:4a:3c:80:df: 1e:0d:c3:ba:81:51:23:de:4b:bb:0e:fb:14:c3:95: 61:23:c7:54:2c:5f:20:ea:1f:d0:b2:05:d3:4c:bb: 93:7a:0c:ba:9b:6e:52:12:41:05:11:fa:26:7c:9f: 13:25:6a:d8:bf:5e:21:54:c3:e7:42:61:19:ab:2f: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:3A:29:F6:41:77:D5:DC:D2:FB:82:9C:F3:1D:4E:9F:D8:AC:63:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/146d3cc6-9f76-3286-978a-96dc9b9c6eae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:be:e2:cc:b4:63:84:99:ef:17:fd:55:ac:fb:48:ba:5e:d1: a9:cc:cd:cb:de:8d:a5:dc:47:1a:88:21:85:8a:d3:56:66:ef: 5b:f5:3f:00:9f:e5:69:85:9b:a8:9e:68:07:95:99:90:3f:fe: e2:5c:0d:3b:4c:c0:72:f0:c2:4b:7b:60:33:f1:50:c0:0b:31: 09:67:8d:00:d4:02:bd:eb:1d:64:d7:3c:3d:39:83:62:db:4e: 6e:d0:ca:1f:30:b1:8e:c7:97:7a:be:d4:7b:f1:bd:91:f3:11: 55:9e:26:47:d3:af:9e:d4:38:21:b0:d1:0c:7f:c9:2b:21:46: 1e:33:6c:1d:b5:16:65:3d:86:5b:38:6e:c1:d3:90:9f:55:6f: 05:74:16:1a:c6:34:54:a3:00:3b:f0:4c:85:b8:e1:d0:43:f6: 73:8f:71:98:06:89:b2:7e:02:ac:5a:d5:ee:4c:b6:94:17:bb: 22:c5:26:dc:0f:8e:6b:fe:41:98:3e:18:e4:56:b6:28:fe:a7: 5d:d7:66:e2:79:d0:65:ae:76:27:7e:4b:7e:3d:ca:46:ba:a3: 3a:9a:91:c2:fe:21:86:ae:92:37:50:26:b7:14:e2:88:a3:cd: 8e:3e:b0:a4:a5:13:2f:f3:27:d0:f5:c4:38:c0:91:ed:9a:5a: 46:eb:1c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIKmCA8Lw3QPqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NDE0MDAwMzEtZDg5Mi00OWIxLWEyMmEtNzM0YTQ1ZTliNDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg17BLmILlMNgT3A0NRwVjABaf9XobM2oIise MX8KMYAczCfA7/nrn+nE3DTkf3cxFokxMBxM4itBcC7vZL730BkmXJPF4BeIwJ04 X07uF/+Oq2DlUMzqiXAWo7omIVvMlwO8L94i2C1xlwBxZMeZO/uemg15TSC3q+OI 5KpW3z4J8hwTMHutKYGzTldmqCVBQIVauhTU422cKU4SbD0yyKHMA/0MhvWmpEKt UjDdNUIy4xybk3vghVBHq4YoPko8gN8eDcO6gVEj3ku7DvsUw5VhI8dULF8g6h/Q sgXTTLuTegy6m25SEkEFEfomfJ8TJWrYv14hVMPnQmEZqy/OCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE6KfZBd9Xc0vuCnPMdTp/YrGOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTQ2ZDNjYzYtOWY3Ni0z Mjg2LTk3OGEtOTZkYzliOWM2ZWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA++4sy0Y4SZ7xf9Vaz7SLpe0anMzcvejaXcRxqIIYWK01Zm71v1PwCf 5WmFm6ieaAeVmZA//uJcDTtMwHLwwkt7YDPxUMALMQlnjQDUAr3rHWTXPD05g2Lb Tm7Qyh8wsY7Hl3q+1HvxvZHzEVWeJkfTr57UOCGw0Qx/ySshRh4zbB21FmU9hls4 bsHTkJ9VbwV0FhrGNFSjADvwTIW44dBD9nOPcZgGibJ+Aqxa1e5MtpQXuyLFJtwP jmv+QZg+GORWtij+p13XZuJ50GWudid+S349yka6ozqakcL+IYaukjdQJrcU4oij zY4+sKSlEy/zJ9D1xDjAke2aWkbrHAo= -----END CERTIFICATE-----Generated at Tue Jul 21 19:58:40 2026 by rpki-client