$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e290c50-ef6d-3093-abfb-d989bd7eec95.roa File: 1e290c50-ef6d-3093-abfb-d989bd7eec95.roa (raw, json) Hash identifier: bBpuZ6KTwP4fRwzTYRXlnUrq6MYnkOu9Pkvyw9whOss= Subject key identifier: 68:00:D8:AC:8D:65:02:75:5B:A7:EC:84:8A:52:9C:BD:E8:E0:BC:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E376481C3F93F7296060D3700 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e290c50-ef6d-3093-abfb-d989bd7eec95.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 36183 IP address blocks: 172.224.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:81:c3:f9:3f:72:96:06:0d:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=69688b2e-9782-4bc2-a406-e7f4748421e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:93:78:e8:f5:fd:cc:48:b5:85:d5:83:57:da: 6a:49:b0:d3:dd:48:f6:f6:f1:60:52:d6:b3:00:bd: 5b:3f:4f:52:d8:50:eb:37:c0:b4:44:5e:75:95:3d: 3b:38:08:78:76:e7:b5:33:28:18:48:7c:03:b7:81: d9:81:ca:20:35:4a:77:2c:e6:e2:6f:af:02:0b:eb: 32:6c:04:b1:e0:ff:83:28:d9:d1:d9:2f:80:fe:d5: 5d:6e:7c:ee:e8:c2:10:0b:a3:a4:e2:15:80:50:c4: ff:d5:02:c6:7d:eb:7a:50:f4:13:4f:d9:22:2e:1f: 71:e8:77:b1:b6:0e:ef:f2:65:3e:9b:01:38:53:06: 23:ac:46:85:ae:93:6c:6c:70:43:d2:6a:cd:39:1a: 75:52:9f:d7:fc:89:74:97:25:1a:5c:cf:87:58:b3: ab:1a:f3:d1:39:8e:5a:25:84:30:27:4a:df:3c:f8: d4:93:73:8f:87:44:42:4d:8e:a3:9d:aa:53:5f:8b: 2f:e5:af:76:bb:d5:36:a2:3d:8e:c6:28:b6:56:d1: 04:d3:4c:0a:38:99:23:0d:08:72:82:4c:57:13:86: 1f:51:aa:21:13:d9:a0:02:6a:1d:6a:fd:3a:51:30: 9a:86:9e:dc:04:41:0e:9b:86:9f:bb:2a:ea:a6:00: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:00:D8:AC:8D:65:02:75:5B:A7:EC:84:8A:52:9C:BD:E8:E0:BC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e290c50-ef6d-3093-abfb-d989bd7eec95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:f4:d7:c6:0d:15:e4:cc:0b:ce:2b:36:1c:10:f1:31:f0:e2: a0:39:55:0c:bd:59:14:a5:2d:fe:e4:22:f0:c7:36:0e:a8:16: bc:48:1f:10:a0:d4:81:04:bd:ce:e5:c5:76:32:7f:4d:d8:ab: f6:d8:a1:8a:d3:c4:10:77:c8:50:c0:73:de:6a:5b:37:c1:2e: 03:d0:0b:f7:ff:8b:2a:b2:a7:92:f9:4d:f3:f6:f2:50:c3:72: ca:44:9e:45:6f:70:36:ca:0e:1f:7a:15:de:08:e4:1b:81:d5: 2a:f0:71:93:0d:00:b8:79:f4:3c:b4:d0:b4:e6:15:6a:d8:15: 8c:77:de:20:a6:31:f8:56:7c:59:a7:7e:d4:dd:84:f4:8f:d3: c0:19:a6:b7:b5:76:20:32:6c:a4:36:6a:07:2e:b3:a3:1b:d9: 3e:ef:96:f8:4f:ad:94:f3:b2:a2:f3:9f:f5:34:0d:d9:cd:cd: 42:b3:58:1d:76:4f:2e:03:dc:53:cb:09:12:58:3e:a2:dc:96: 9f:7d:f4:50:81:b5:73:b9:0b:de:5a:4f:df:36:16:c6:29:f2: 3e:c5:6b:54:d6:03:45:dc:c7:e0:57:2e:4e:fb:3e:11:ed:d8: b4:51:51:ee:2f:0f:1a:36:e5:4f:3e:1a:4c:9e:82:9d:1d:76: b7:ef:dd:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIHD+T9ylgYNNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk Njk2ODhiMmUtOTc4Mi00YmMyLWE0MDYtZTdmNDc0ODQyMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5N46PX9zEi1hdWDV9pqSbDT3Uj29vFgUtaz AL1bP09S2FDrN8C0RF51lT07OAh4due1MygYSHwDt4HZgcogNUp3LObib68CC+sy bASx4P+DKNnR2S+A/tVdbnzu6MIQC6Ok4hWAUMT/1QLGfet6UPQTT9kiLh9x6Hex tg7v8mU+mwE4UwYjrEaFrpNsbHBD0mrNORp1Up/X/Il0lyUaXM+HWLOrGvPROY5a JYQwJ0rfPPjUk3OPh0RCTY6jnapTX4sv5a92u9U2oj2Oxii2VtEE00wKOJkjDQhy gkxXE4YfUaohE9mgAmodav06UTCahp7cBEEOm4afuyrqpgDYnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgA2KyNZQJ1W6fshIpSnL3o4LyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWUyOTBjNTAtZWY2ZC0z MDkzLWFiZmItZDk4OWJkN2VlYzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb018YNFeTMC84rNhwQ8THw4qA5VQy9WRSlLf7kIvDHNg6oFrxIHxCg 1IEEvc7lxXYyf03Yq/bYoYrTxBB3yFDAc95qWzfBLgPQC/f/iyqyp5L5TfP28lDD cspEnkVvcDbKDh96Fd4I5BuB1SrwcZMNALh59Dy00LTmFWrYFYx33iCmMfhWfFmn ftTdhPSP08AZpre1diAybKQ2agcus6Mb2T7vlvhPrZTzsqLzn/U0DdnNzUKzWB12 Ty4D3FPLCRJYPqLclp999FCBtXO5C95aT982FsYp8j7Fa1TWA0Xcx+BXLk77PhHt 2LRRUe4vDxo25U8+Gkyegp0ddrfv3YE= -----END CERTIFICATE-----Generated at Tue Jul 21 20:40:44 2026 by rpki-client